Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: mB9CHDTXuZLRpo9KnGkQrDCNG+gfa/nVfouHtWFsAGw=
Subject key identifier: 81:4D:5B:28:15:23:E4:3E:4F:ED:A6:00:3E:19:BC:2C:59:47:41:39
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019CABD993C1E33CCDE40558262B47163C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1440
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: nu/vzbFk34rDMKu/DtxJj/JxEPMzXIRze9zyz2eou+8=)
2: sU4SdgLEKJLdmmd7O0WH0cIHbDc.roa (hash: 56F6iMelALI7bLbAqUWShoXQBZvQSM/mzwf3Aamh/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:93:c1:e3:3c:cd:e4:05:58:26:2b:47:16:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=814d5b281523e43e4feda6003e19bc2c59474139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:cc:37:96:15:1a:e2:71:65:de:32:8b:88:
e2:52:11:f5:6c:35:1f:e1:8d:d1:4f:f4:16:cc:b5:
73:1f:d9:d7:1a:08:33:4b:f5:96:29:27:06:5e:55:
c1:bd:2f:63:0d:ce:d8:14:54:7e:c8:42:62:5f:b3:
75:2d:b8:22:cf:07:39:12:7d:a2:4b:cc:42:c2:fe:
26:dc:6d:ae:bd:34:8f:4c:d5:aa:61:67:bf:fc:77:
48:0e:d3:11:bb:e1:8f:2f:71:c6:63:6d:a1:00:a4:
b0:dc:e6:6b:ad:9a:da:24:0f:96:03:63:6d:99:c3:
44:b4:d6:54:5d:48:32:5e:84:65:c2:bb:68:70:22:
56:74:c7:2a:e1:c4:cf:4e:c7:1e:1f:da:e9:23:2e:
0c:bb:c5:b8:e7:b8:99:26:a8:ac:8b:5f:a6:03:3a:
7d:e0:f7:c4:d7:5f:80:82:4c:12:f5:5e:b5:33:e3:
ab:ee:c0:2d:cf:5a:6f:23:1d:d0:60:f2:6e:dc:f7:
1d:1a:c3:f4:c7:b2:24:44:76:3b:2b:39:f8:6b:a7:
06:b3:2e:cb:18:47:30:49:24:37:12:35:3e:d5:c9:
e9:cb:de:a5:b4:63:82:f6:cb:fe:74:ce:d0:53:43:
b9:66:a1:f0:6b:b5:a6:08:b8:1a:e1:fb:9e:6c:03:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4D:5B:28:15:23:E4:3E:4F:ED:A6:00:3E:19:BC:2C:59:47:41:39
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:9f:2a:d6:a9:0c:66:de:bc:e6:ca:26:f2:d7:fb:30:52:
5b:af:54:de:11:bd:38:fd:9b:31:d3:50:45:e2:49:ef:8c:af:
25:54:e6:75:09:71:07:c8:48:e7:e5:95:f9:da:52:d8:42:50:
ac:6f:0e:9c:aa:91:b2:38:b0:89:2c:8f:a9:c7:2d:e0:41:e7:
30:70:51:70:ca:6d:a4:6c:c4:61:eb:2e:bc:c8:3d:58:15:8b:
ac:87:10:5d:13:d7:37:4c:96:25:13:1f:53:cf:b5:b0:b2:f8:
cf:2e:97:c5:2f:c2:8b:f5:eb:27:a3:c2:ce:45:aa:f4:d8:13:
e0:db:99:22:4e:18:72:bb:3b:c5:8b:36:02:37:9d:a0:07:2e:
31:93:ea:dd:a2:44:e0:a4:af:4a:e3:9d:8a:96:8f:5c:5e:fa:
fb:fe:1f:b6:1a:12:53:64:93:19:70:bf:30:ea:44:c6:9c:9f:
d7:d9:32:1b:02:be:14:9e:75:26:fa:5b:38:2e:0f:84:5b:71:
02:58:43:11:39:9b:99:4a:02:2c:22:c1:97:e5:80:f8:73:b8:
d7:6a:c5:a9:08:6c:2b:3e:72:c4:9c:f1:ed:c3:29:29:b5:7f:
2e:3e:8b:91:fe:61:84:93:ab:63:67:e6:d4:85:1b:0f:81:df:
53:52:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:22 2026 by rpki-client