Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: qKEWLWrT7kQzF3QG0/juapPk+OFgM/FxwPblOt2c304=
Subject key identifier: 33:6E:3A:FC:14:9F:30:5C:F7:1E:A0:25:F1:6C:BA:50:F4:6D:70:DA
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019D9B8762F3982C59A378D8972E2BBBB1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 112F
Signing time: Fri 17 Apr 2026 13:00:34 +0000
Manifest this update: Fri 17 Apr 2026 13:00:34 +0000
Manifest next update: Sat 18 Apr 2026 13:00:34 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: roBLj/IQongtYqjaPVNHG+6evJ/a36qjPeS5X71ij7k=)
2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:62:f3:98:2c:59:a3:78:d8:97:2e:2b:bb:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Apr 17 13:00:34 2026 GMT
Not After : Apr 18 13:00:34 2026 GMT
Subject: CN=336e3afc149f305cf71ea025f16cba50f46d70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:93:ed:9f:2c:7d:eb:36:fa:e9:fd:08:cb:
2e:79:0c:1a:45:dc:95:03:a2:43:7d:de:a6:12:4d:
43:79:57:d7:25:dd:03:42:b7:bc:a2:ea:4f:7b:49:
90:e6:74:fd:25:2c:0b:36:9c:d7:e2:87:42:a5:ae:
39:87:c5:2b:61:80:0f:57:e2:a4:18:a9:8b:ad:91:
c6:93:1d:89:2d:53:ce:f4:61:c4:35:45:bb:90:89:
61:45:4e:fb:8a:f3:24:f2:c1:1d:e9:0e:74:7c:fa:
dc:b5:50:79:02:b3:f3:ae:67:ed:87:f0:b3:67:ce:
d6:5f:f9:ea:03:96:f3:c2:98:69:95:c0:e7:7f:4e:
5b:fd:d8:f8:45:1d:1b:b7:1c:dc:29:ab:f0:74:a6:
a3:ab:fa:1c:41:46:c1:c3:3c:40:f7:8d:f8:b5:54:
3c:d8:c2:8f:d2:96:cf:29:31:db:c5:50:99:7d:96:
1f:8f:20:8c:d6:0d:5c:a0:9f:08:26:5b:04:ea:cc:
43:75:f2:4d:f1:6f:67:1a:65:98:20:d9:4c:ff:56:
60:fe:20:c9:27:e0:f7:f9:49:e2:ef:71:cf:bf:43:
ac:6c:a5:b5:b4:b0:55:6d:83:88:d6:ad:2f:4d:65:
65:d0:f1:37:35:a5:42:9c:66:56:dd:87:75:23:5d:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:3A:FC:14:9F:30:5C:F7:1E:A0:25:F1:6C:BA:50:F4:6D:70:DA
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:3b:75:05:1f:cb:1a:9e:f6:cb:3b:61:33:bb:95:f6:17:
6d:81:6a:df:5c:71:28:05:01:37:ae:e7:a7:8e:f1:46:63:7d:
c3:d8:1f:bf:f6:dc:90:3a:0e:96:90:9a:3e:71:a6:fc:9b:40:
a4:f3:7c:93:8b:04:45:e6:16:69:8e:2e:b5:92:1a:ca:e0:65:
2d:96:90:03:4d:49:58:38:8b:ec:fe:40:e2:82:ea:18:6e:8c:
cb:b5:d0:39:6f:7d:e5:02:28:4d:34:8c:0c:0e:bc:3d:a7:b6:
f7:33:44:76:03:5c:c5:65:04:b7:ac:fe:51:9d:b0:7a:ff:06:
cd:9f:41:f4:06:36:00:91:55:d1:39:8f:b8:f3:c8:fc:e6:b1:
73:10:31:fa:9b:69:08:78:ed:87:e8:35:f5:9c:91:df:cc:9b:
cc:f8:06:da:56:e7:01:d0:41:a8:d3:59:9b:4f:8b:66:06:5d:
9a:66:ed:08:1c:ca:c4:bd:a2:60:f5:4b:48:11:d5:de:de:b4:
2f:74:79:9d:f1:59:42:4d:51:41:8e:1c:9a:a7:b8:f2:a9:08:
e4:e4:f1:74:1e:e8:c0:b2:d0:0e:18:4b:21:14:d0:a0:d6:f1:
2c:8e:ef:86:61:0e:59:33:76:6a:69:9f:3b:5c:d2:0f:c2:e6:
95:d4:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:14 2026 by rpki-client