Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: 4NoOqgF2IgH1qLbP6boh8jwAxS2Hw5VGASjBHOMBTEs=
Subject key identifier: BA:AE:D8:64:5B:0A:D6:74:15:9F:F6:EC:E5:06:97:D1:75:A1:AB:2B
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 01A1287A7D12EE571EDF1E2DB6076196755B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 067C
Signing time: Sun 11 Oct 2026 01:01:18 +0000
Manifest this update: Sun 11 Oct 2026 01:01:18 +0000
Manifest next update: Mon 12 Oct 2026 01:01:18 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: Qg93rYFlU+fovVDB9OKJTnKpqoZBiWMd5+CzBdgeQTQ=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:7d:12:ee:57:1e:df:1e:2d:b6:07:61:96:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Oct 11 01:01:18 2026 GMT
Not After : Oct 12 01:01:18 2026 GMT
Subject: CN=baaed8645b0ad674159ff6ece50697d175a1ab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:70:d0:a6:f6:bc:ba:ac:c5:ac:ff:f1:66:
a1:82:4f:e4:d4:2a:bb:a0:36:19:c3:60:4f:dc:5f:
46:d7:56:eb:fe:b2:29:32:93:47:9e:97:3d:5e:cf:
70:37:a0:26:ac:6c:04:75:6b:c8:77:09:b7:8e:88:
d9:a4:61:bb:1a:3e:6f:02:71:2d:a5:e4:e3:c3:7b:
88:dc:fa:d2:13:f2:fc:bd:80:24:69:6a:2e:af:7a:
45:f7:f1:cc:88:81:a8:61:29:73:12:0d:59:4b:27:
4b:ad:79:60:0f:90:35:1f:91:76:5e:64:f1:d1:db:
b2:b9:5f:4b:84:d2:d4:7e:48:d1:d1:f7:03:64:e8:
7d:05:c1:f3:a2:c9:af:20:94:b5:ed:d6:a5:ef:cf:
a1:e0:4d:6f:c5:f7:bd:a7:77:28:ac:c7:11:e3:6e:
60:52:3c:8b:b2:5f:71:0e:ce:e6:66:c6:8d:ab:23:
fa:94:33:d7:f8:18:9a:ec:dc:e2:11:25:36:de:56:
23:c2:a1:dc:82:e7:aa:00:84:bb:e5:d8:6b:46:86:
d6:b4:3b:aa:e2:3c:a2:de:b4:26:5a:fc:75:f1:82:
ec:09:3f:b9:9c:63:b5:ff:c3:49:cb:46:66:da:f3:
7b:1f:63:3a:68:60:e7:77:58:a0:f3:5e:00:6a:f3:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:D8:64:5B:0A:D6:74:15:9F:F6:EC:E5:06:97:D1:75:A1:AB:2B
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:3d:13:53:c8:bb:00:cf:0c:23:ea:ac:f1:a1:41:66:6a:
ce:7b:ff:f8:80:3a:e1:cc:7e:1f:97:0a:e7:3d:dd:d0:8d:c4:
c9:91:c3:15:aa:21:46:ca:a5:ef:f7:33:b8:19:6d:2f:30:0c:
1e:ce:81:3e:7e:55:7b:9e:e4:57:5a:ff:64:45:6c:c9:bb:68:
fe:d5:a1:74:a7:34:95:7f:ec:d3:23:03:0b:a8:38:61:61:6c:
2f:eb:f5:3d:49:68:8b:d4:dd:be:77:76:ca:7a:d7:74:fc:55:
57:1b:bb:fd:16:ae:ab:dc:ad:ad:df:a6:d3:d1:d6:45:c8:8b:
55:be:c5:ae:0b:61:1c:c6:44:8d:0d:ae:6b:60:c6:cf:4a:b1:
be:89:91:7a:d2:79:d2:8b:f3:a7:81:70:7b:36:29:37:24:45:
66:f8:8d:f6:ce:1d:52:68:10:c3:ef:6a:ea:6e:9e:28:78:01:
e3:8e:6e:ee:36:bf:a0:60:99:78:44:53:a2:be:8f:78:83:98:
f3:f7:22:ca:94:10:87:46:94:51:05:af:1a:8e:5e:e0:7b:de:
bb:1c:61:dc:3b:af:0a:64:0d:fc:ed:d2:88:8a:7b:79:e8:90:
eb:f4:f0:f8:63:75:55:28:b4:fe:4f:d8:8a:1a:4b:fa:85:5b:
6c:07:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:53:04 2026 by rpki-client