Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: tARfSjH4NCW8d1ayu3TWLQARYw0aqa6O7orL6J04CrU=
Subject key identifier: CA:CD:74:70:C2:77:CC:86:3F:BF:75:95:AE:7F:8A:0F:59:6B:51:00
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019D992AF770D088E9386B17527532ADE4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 143F
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: cN3ZczEC6yB5pmuzxr6u5hHrCQhFmv4TNSb1roqC6JY=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f7:70:d0:88:e9:38:6b:17:52:75:32:ad:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=cacd7470c277cc863fbf7595ae7f8a0f596b5100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:34:12:9e:3a:45:1f:10:36:1e:d2:a9:a6:
37:34:cd:7c:36:68:00:f3:6c:a2:87:db:60:af:e1:
64:bf:f8:f3:12:10:06:b8:98:d4:d4:a3:3f:28:ef:
a0:b2:83:65:43:2c:28:aa:b1:f6:59:e7:eb:ec:20:
0d:f9:2d:b0:b8:c0:c5:1a:2b:cd:ed:3d:5b:4d:59:
47:92:2a:5a:a7:68:7b:0b:1b:01:26:e0:59:cc:5e:
0e:1b:69:fe:af:89:8b:27:43:aa:82:ac:ef:39:c5:
5d:75:49:01:ad:d5:1b:8e:ef:1b:5b:18:c4:29:6e:
c6:d3:e1:73:52:57:97:bf:a4:b5:e5:66:a2:e1:f9:
7a:d8:4e:c0:d2:74:b9:18:cb:56:c7:24:48:31:70:
a3:73:83:3e:57:81:b8:7b:0b:89:44:db:9f:1c:dd:
81:f0:e5:7c:18:72:6f:25:4a:4a:8b:64:e5:45:2c:
de:ff:cf:18:13:53:bc:28:f6:f9:e7:08:26:8c:10:
ca:5d:a0:49:a4:1a:27:1a:cd:fa:02:77:85:6f:b8:
93:98:b6:e1:dc:f6:b9:a0:44:58:a3:17:89:a9:fc:
de:4c:05:ce:06:9f:3e:ec:7e:c3:d5:b6:09:5a:f0:
1f:b4:96:76:8a:8a:15:5f:dc:47:d6:bb:24:b5:86:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:74:70:C2:77:CC:86:3F:BF:75:95:AE:7F:8A:0F:59:6B:51:00
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:29:f6:e5:8e:ee:f8:59:ac:c9:83:3c:60:c1:ed:e2:6b:
3b:ff:11:27:91:0c:d5:4d:62:90:51:cd:68:48:77:47:1b:ac:
c4:46:7a:66:5b:91:24:c0:cc:b8:1c:84:4c:b1:39:e3:16:ed:
70:d7:43:57:c3:c7:ee:5b:44:58:8f:cc:2a:77:9c:63:49:6e:
5c:cb:12:c4:15:7b:c2:dd:d0:b2:a7:f3:29:e9:df:0d:4b:fb:
8e:1b:55:e8:8a:26:ec:02:e8:e1:6d:75:a1:37:90:56:b8:62:
ef:ba:dc:51:3d:a9:32:ea:7f:83:f5:86:1f:f4:08:d7:6b:ef:
59:d2:37:12:da:31:97:45:67:35:8a:b8:f5:31:16:ab:44:2a:
7d:f3:fa:bb:25:10:20:75:30:f3:8e:58:9c:3f:90:e3:1b:f2:
77:34:a2:7a:d9:85:51:c7:cd:d2:63:85:e9:0d:64:e4:2b:a9:
00:68:9b:12:7d:54:8d:d1:3c:b4:21:3b:43:da:98:0f:15:6d:
e7:75:58:a2:b5:da:26:95:4c:a0:b6:03:48:6e:e4:ac:2b:1f:
81:d5:8f:39:49:44:82:57:1c:4d:8d:63:36:44:ae:ea:7a:c1:
8e:21:72:26:6f:78:8f:a7:42:7d:a7:ab:d1:e5:09:31:6b:b1:
c5:fe:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:33 2026 by rpki-client