Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: mYpXN3Z0Bqif7OFxtYFpzdXJvmr9BI+U9ydj9ZE/iWI=
Subject key identifier: EF:18:9E:B0:7B:F1:B9:34:F4:49:D3:DD:48:36:B4:6F:13:1E:35:64
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019CADFE11563FD8277EE7FDCEEF8F4F0EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 10B4
Signing time: Mon 02 Mar 2026 10:00:34 +0000
Manifest this update: Mon 02 Mar 2026 10:00:34 +0000
Manifest next update: Tue 03 Mar 2026 10:00:34 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: TVS+43DMTgzm2Y8zj+mKIebSu1Mfk5evr32ijcaYihU=)
2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:11:56:3f:d8:27:7e:e7:fd:ce:ef:8f:4f:0e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Mar 2 10:00:34 2026 GMT
Not After : Mar 3 10:00:34 2026 GMT
Subject: CN=ef189eb07bf1b934f449d3dd4836b46f131e3564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:e0:21:f5:74:07:93:51:32:e9:33:91:91:
b3:bb:95:b8:86:1e:82:f8:50:20:f2:01:95:ca:9e:
cf:e6:30:dc:2c:23:85:59:dd:f0:4f:07:a8:01:13:
56:81:90:1b:ab:0a:4e:07:0a:84:80:09:95:f3:a1:
52:8b:94:11:76:1b:25:08:a2:b3:00:26:87:0a:b2:
4f:9b:79:84:c1:c6:99:01:46:99:a3:af:d9:f5:e1:
3e:ee:3d:15:bb:91:6f:3b:28:5c:b7:b7:69:74:5a:
d1:c7:c0:f6:02:67:04:4b:fe:09:b6:4e:b8:21:00:
57:2b:b3:5f:32:0b:98:04:35:a6:6f:db:2a:58:21:
31:d8:56:07:53:45:4e:b4:ee:b2:c2:aa:13:00:00:
83:a8:25:f6:c7:d4:1a:17:7b:c1:f0:fd:07:ae:ff:
78:8d:50:95:76:37:d3:ec:b4:de:60:8d:0c:4e:bd:
35:a4:93:c9:57:04:9c:c7:16:11:37:69:5d:8c:d0:
4e:8b:35:96:f0:cb:64:74:1d:56:ae:5e:27:33:4e:
1b:28:30:f0:45:45:83:40:fc:01:71:7c:0f:c6:4c:
23:b9:96:3a:f8:13:72:58:44:5f:48:4c:6f:f3:c3:
91:99:bf:9d:84:a2:30:c4:33:ed:1d:d2:6f:05:50:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:9E:B0:7B:F1:B9:34:F4:49:D3:DD:48:36:B4:6F:13:1E:35:64
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:30:1e:91:5c:5f:db:b8:d7:a7:2f:69:af:da:9b:cc:29:
34:72:6a:73:ba:e6:a8:68:45:e2:48:6e:25:8d:2a:98:38:75:
74:e3:02:b0:17:f9:16:7a:12:30:42:cd:a6:55:7a:35:8d:e9:
93:84:3e:4a:1a:40:c0:28:57:5d:e1:1f:48:d9:41:a5:e2:92:
bb:cd:b6:a1:1f:6d:7c:02:4e:16:4d:ed:a0:bf:ff:91:30:67:
ef:b1:9a:8a:eb:34:36:6e:69:be:49:bd:15:7b:f7:b7:a9:db:
50:ad:8c:ae:65:21:af:27:70:5b:b8:ca:2a:a3:ea:f2:fe:5b:
5f:4c:45:e5:a6:7b:e1:4a:f6:5e:2c:d5:ae:ba:7a:67:e4:d5:
b6:da:dc:33:5b:38:9c:82:76:51:e7:b3:de:9e:09:20:d4:5d:
1d:f2:06:24:9a:7e:f0:2e:ec:0d:31:f7:6f:be:19:13:51:9d:
2d:53:e6:da:1c:a8:b5:71:a6:18:3e:e5:06:d0:e2:fb:ae:8f:
44:ae:fc:48:a6:55:78:0f:63:3b:81:b8:d3:df:f2:dc:d5:dc:
8d:41:58:9e:23:6e:40:3c:f2:87:bd:a6:cd:32:f1:7f:48:e8:
dc:f2:95:6c:f7:7f:99:ef:8a:63:22:93:89:f7:bf:b6:9f:00:
74:a1:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:38 2026 by rpki-client