Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: qNBoehtbR3R5VYDJIy36hxlFiGJbqkeFA72sPAMC3SU=
Subject key identifier: 16:F0:AB:D3:7D:4D:79:C7:3C:CE:29:E5:74:AD:2E:CD:16:80:A3:AE
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 01A0C10D502A2FCDEE526EFA3A918A9836DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 23:01:10 +0000
Manifest this update: Sun 20 Sep 2026 23:01:10 +0000
Manifest next update: Mon 21 Sep 2026 23:01:10 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: B1Cm2mW8nSuMA5YojmlhQ1F1qeTIzmJhXNXaGyce8Bs=)
3: YbU5wyUqLqEHDmRvFcj5yxlUnP4.asa (hash: kL358urGtKDFubZ/xfiLlds0XnPgCtrLaQBg7SppGts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:50:2a:2f:cd:ee:52:6e:fa:3a:91:8a:98:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Sep 20 23:01:10 2026 GMT
Not After : Sep 21 23:01:10 2026 GMT
Subject: CN=16f0abd37d4d79c73cce29e574ad2ecd1680a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:8b:91:12:cf:d5:aa:07:a9:f9:51:83:3c:
21:78:66:30:30:21:5f:05:b0:8d:e2:5d:36:7b:63:
80:e3:ba:1e:30:b6:a8:da:7c:44:f0:52:36:1e:7c:
7d:e3:68:f6:cd:36:49:2b:ee:b5:bf:bc:7e:b7:82:
54:cb:b0:c8:b9:64:e3:d8:47:d1:95:15:85:6a:fa:
5e:60:c4:a5:0a:65:8a:fd:0a:f2:4f:49:16:34:ce:
f2:cd:ab:6b:48:65:8c:26:45:a3:77:21:fd:f8:c7:
4e:69:e1:a1:8f:7d:3e:95:bd:84:08:5c:1c:06:e8:
00:da:09:36:a8:19:a5:c3:26:b7:32:75:90:a6:25:
41:5d:e0:5d:f6:de:4d:4e:99:49:e7:a6:0f:14:58:
0d:2d:fd:26:93:8f:c8:a4:8c:31:22:39:33:74:60:
59:a5:27:79:35:92:6e:ba:ae:fd:8f:1e:a9:30:57:
82:37:34:d6:31:87:d7:0d:1b:d8:15:f0:8e:a5:ca:
e4:7c:1a:04:f4:ce:d8:d4:0a:c7:29:7e:c3:75:77:
35:c4:94:90:81:2a:86:47:03:25:f4:d5:46:cd:d6:
6e:a1:d0:c5:2b:55:dc:e6:b8:a7:05:fb:4b:ea:e2:
26:ff:9c:e5:ea:9e:08:66:b9:ea:02:33:60:40:12:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:AB:D3:7D:4D:79:C7:3C:CE:29:E5:74:AD:2E:CD:16:80:A3:AE
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f2:1c:63:aa:b8:46:86:9c:3e:52:48:e5:05:9e:da:eb:20:
5f:62:61:85:28:6f:49:13:dc:59:c0:27:1f:6b:63:9a:de:2e:
ae:70:aa:f8:63:29:91:55:a0:06:45:b6:ce:79:e5:0e:2d:3f:
fc:3d:60:01:e9:2f:67:d6:e7:a8:fa:00:13:46:bb:a7:e2:c2:
bf:f3:4c:60:60:88:af:af:1e:4f:19:b6:c9:53:dd:b6:11:92:
13:92:61:1d:a7:91:90:95:ae:c6:43:17:df:ad:a0:aa:53:5a:
1b:96:a5:14:1d:ed:d1:34:b0:77:b0:e3:37:5e:13:0e:cb:49:
8b:03:38:c2:45:5c:50:31:2f:92:f1:5a:67:29:98:01:8f:dd:
4f:de:c0:af:a5:47:89:9c:c3:c1:7f:f6:de:de:d9:af:a1:12:
f5:5d:b1:bb:eb:55:b1:43:2b:87:46:57:c7:b3:9d:87:a1:a4:
11:5d:6e:4e:04:70:9d:6a:be:66:20:3a:b7:2d:f8:bd:e9:5b:
3c:33:f8:f5:88:a2:21:ad:cc:f3:3d:83:30:fc:20:a8:c5:9a:
0e:ee:13:a1:2f:5a:3a:a7:0a:6d:f2:2a:ea:ea:d3:9c:01:ba:
91:25:d0:31:81:56:6a:f8:8e:22:4e:78:2d:fa:53:b3:ef:cb:
17:60:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:46:51 2026 by rpki-client