Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: XTWu6aY/Cl1J6N5aMWtZAo2OYAZdRc4BqOyGx/LFvwM=
Subject key identifier: FC:3E:28:4A:B1:B2:6C:A9:8A:1C:49:A8:A9:A9:3B:19:CC:B1:D3:45
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 019CABA1CE2B4E5E7B84072C3517B7E620A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: objYwnVub/Grvv13Z8ERue8JYFdQsXI9L6XSmxf6Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ce:2b:4e:5e:7b:84:07:2c:35:17:b7:e6:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=fc3e284ab1b26ca98a1c49a8a9a93b19ccb1d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:51:a4:33:5c:ef:13:cf:dc:07:90:27:38:
ce:77:cd:1e:58:9f:0a:87:6d:9d:fd:0b:4b:26:f4:
d0:84:e2:b7:96:32:a3:59:b7:c5:87:2c:70:21:c1:
7a:ed:ed:ef:87:d7:62:ed:bd:26:56:2d:46:ef:0d:
eb:e0:ac:e4:40:a8:cb:23:6c:9a:63:78:d3:cc:9b:
5f:ee:1b:4b:04:c8:be:70:95:0c:4f:e8:5a:d8:e1:
5a:db:35:a1:30:ae:aa:97:ff:db:6c:bf:71:20:73:
46:68:4c:6a:a3:e7:b0:e7:88:d5:c1:26:29:2c:59:
ac:e5:88:12:c6:30:61:1f:74:3f:b5:3d:6b:a7:99:
31:20:95:2a:fb:ff:a3:58:d6:0d:83:e1:d2:50:ef:
08:3a:5e:8e:bb:b6:37:a7:28:85:d1:91:6e:5b:7e:
4d:ed:fd:76:09:c7:c1:4c:e9:8b:b8:2c:1d:98:0e:
c8:17:6c:0f:e0:d7:e4:76:0b:03:2e:d6:78:06:4e:
ec:5f:3a:e9:d4:fc:fe:13:1a:7c:c6:0b:26:b8:2f:
c6:9e:9f:60:31:61:e0:c8:f8:f2:e3:67:ff:42:37:
29:73:99:7c:7f:98:a7:c1:29:9d:9e:2f:48:8d:d1:
fb:b9:e4:1b:21:0a:f4:8e:91:de:3c:d8:d8:25:d1:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:28:4A:B1:B2:6C:A9:8A:1C:49:A8:A9:A9:3B:19:CC:B1:D3:45
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:fa:c6:37:2f:d0:cb:34:57:55:c9:9a:d3:d7:89:82:ba:
99:62:4f:69:fb:95:90:7b:53:87:71:73:8f:fb:38:5f:aa:bf:
0e:29:ee:8b:ec:63:72:73:f7:c2:eb:62:92:a5:d3:db:1e:58:
62:2c:75:ba:37:9a:e2:42:7e:c6:ee:ed:2a:4d:63:38:e6:51:
c9:56:e7:3c:71:1d:f9:24:d9:58:7a:c1:03:86:a2:43:cf:a3:
25:7a:75:0d:9e:90:de:88:de:41:d8:dd:5b:93:0f:6c:ef:34:
ef:6e:cb:ec:11:d2:0c:99:b4:f0:ec:6d:e6:d5:65:66:31:a3:
06:fe:57:e8:aa:e9:8d:70:1e:49:39:03:7a:02:08:b0:f5:7e:
d7:45:af:f6:4c:b4:ac:2a:74:79:43:e1:07:4f:aa:1d:b4:bd:
ec:c4:0f:57:de:3a:66:26:03:8f:be:27:25:fb:c2:11:84:ac:
83:98:a2:ce:de:b3:5e:82:27:2f:99:33:43:d7:dc:e6:4a:36:
eb:1f:49:da:b3:bb:52:d1:09:b0:e3:82:3b:0c:e6:f8:28:0a:
2d:e9:c0:62:92:a1:29:95:88:c3:39:b8:33:df:43:62:cb:56:
31:23:5e:65:5c:16:c7:42:82:7c:fb:d7:7d:12:ec:9e:12:1c:
50:83:8d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroc4rTl57hAcsNRe35iChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0
ZjM2M2QwHhcNMjYwMzAxMjMwMDMzWhcNMjYwMzAyMjMwMDMzWjAzMTEwLwYDVQQD
EyhmYzNlMjg0YWIxYjI2Y2E5OGExYzQ5YThhOWE5M2IxOWNjYjFkMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr5RpDNc7xPP3AeQJzjOd80eWJ8K
h22d/QtLJvTQhOK3ljKjWbfFhyxwIcF67e3vh9di7b0mVi1G7w3r4KzkQKjLI2ya
Y3jTzJtf7htLBMi+cJUMT+ha2OFa2zWhMK6ql//bbL9xIHNGaExqo+ew54jVwSYp
LFms5YgSxjBhH3Q/tT1rp5kxIJUq+/+jWNYNg+HSUO8IOl6Ou7Y3pyiF0ZFuW35N
7f12CcfBTOmLuCwdmA7IF2wP4NfkdgsDLtZ4Bk7sXzrp1Pz+Exp8xgsmuC/Gnp9g
MWHgyPjy42f/Qjcpc5l8f5inwSmdni9IjdH7ueQbIQr0jpHePNjYJdHyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw+KEqxsmypihxJqKmpOxnMsdNFMB8GA1UdIwQY
MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt
M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0
LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTr6xjcv
0Ms0V1XJmtPXiYK6mWJPafuVkHtTh3Fzj/s4X6q/Dinui+xjcnP3wutikqXT2x5Y
Yix1ujea4kJ+xu7tKk1jOOZRyVbnPHEd+STZWHrBA4aiQ8+jJXp1DZ6Q3ojeQdjd
W5MPbO80727L7BHSDJm08Oxt5tVlZjGjBv5X6KrpjXAeSTkDegIIsPV+10Wv9ky0
rCp0eUPhB0+qHbS97MQPV946ZiYDj74nJfvCEYSsg5iizt6zXoInL5kzQ9fc5ko2
6x9J2rO7UtEJsOOCOwzm+CgKLenAYpKhKZWIwzm4M99DYstWMSNeZVwWx0KCfPvX
fRLsnhIcUIONug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:59 2026 by rpki-client