Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: yJWTlEGtRX6Cilbgifw3U4Mv7qEGRxOCE8G7ITKjK2Q=
Subject key identifier: D0:C9:90:FC:27:52:51:25:A6:4F:D0:2E:80:C4:F7:32:97:00:00:69
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 019D992B988C7FD2031E8618615D3A750F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:01:04 +0000
Manifest this update: Fri 17 Apr 2026 02:01:04 +0000
Manifest next update: Sat 18 Apr 2026 02:01:04 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: j5gXYCP/t+12GYN59cKoZwHbFX3B7OCWzqc6OekQm2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:98:8c:7f:d2:03:1e:86:18:61:5d:3a:75:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Apr 17 02:01:04 2026 GMT
Not After : Apr 18 02:01:04 2026 GMT
Subject: CN=d0c990fc27525125a64fd02e80c4f73297000069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:e7:54:f3:52:99:6f:60:ae:8c:0f:6c:c6:
3a:44:2f:f2:1f:2a:80:e7:7e:f9:fc:f1:ca:93:05:
dd:cc:ba:8d:83:7f:fc:2b:61:c6:f1:8f:ef:30:81:
ad:8e:1c:31:dc:ac:9f:8e:fb:86:dc:fe:67:8a:26:
8b:99:f6:bc:ee:06:c5:02:db:6d:ed:bd:fb:b8:d5:
a6:a3:9a:ed:53:1c:7d:71:75:d5:0f:87:fe:6e:dd:
3c:5f:55:f6:db:22:f9:22:23:ba:d4:4b:47:05:d0:
f0:13:a4:b5:98:91:09:e4:fd:aa:85:c4:02:a2:1a:
a8:ce:a2:bb:5e:76:e1:0f:1c:10:3f:f8:24:0b:83:
ca:04:60:45:41:e1:a0:18:8c:90:00:49:d3:1d:7b:
63:c7:c2:4d:36:92:67:a0:03:6e:8b:19:a7:3c:79:
23:39:37:15:39:6d:7d:15:a2:d1:d4:ad:1c:3e:e3:
d3:44:df:5f:a6:e4:48:1c:ff:63:07:31:b5:79:4d:
50:78:8e:36:da:40:c9:c7:78:6b:c8:bc:48:e6:83:
97:26:dd:80:5c:57:c3:75:ef:c1:87:3c:d2:18:6d:
93:f6:f0:c1:9e:1f:43:48:24:6f:a3:86:7b:13:96:
dd:f3:0c:16:af:8a:fb:93:cb:06:89:76:f7:c2:42:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:90:FC:27:52:51:25:A6:4F:D0:2E:80:C4:F7:32:97:00:00:69
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e0:98:f0:75:90:88:4a:55:f7:78:0b:e5:2b:f0:ec:29:b6:
64:38:5f:58:ba:c5:29:14:a5:8e:ac:74:e2:3d:90:44:c7:01:
4e:45:5e:1c:b8:a4:b0:d1:af:67:c1:38:fa:97:cd:90:fa:0c:
d6:b1:6d:26:dd:fd:50:f8:76:ed:e3:4a:87:06:68:52:43:cd:
6f:37:08:03:84:58:59:fc:88:23:92:ac:84:16:93:f2:f2:d8:
32:a6:f0:2e:99:a0:94:0c:31:3e:9a:18:38:20:ee:c2:1f:a3:
d2:6b:5c:d9:2c:78:04:d9:b0:20:ea:af:b3:21:87:df:20:f5:
95:9f:dd:e6:9c:b5:15:bd:9c:e4:d1:f1:81:90:28:68:f8:1e:
0f:e3:58:0e:d7:45:0f:cf:74:38:19:05:df:ab:0e:4a:9b:b9:
55:ab:06:be:e1:c7:ac:fc:38:ed:18:06:80:74:ef:0d:b2:35:
4c:90:14:1d:a2:9c:3d:31:af:af:48:b5:c9:07:7b:50:41:e3:
87:e6:aa:85:52:86:ac:52:e9:70:a4:76:5f:98:f5:71:28:09:
e2:fa:b8:3f:cc:a8:63:ce:72:24:4f:9c:d7:19:3b:c4:0c:71:
e8:1f:d4:52:f0:92:7b:d2:08:bf:e8:04:60:ac:53:60:c3:2f:
ab:5f:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:43 2026 by rpki-client