Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: yrGY2chVEbGTdEgYuP37v4CE3vhBGDW/1xvuedlUU1o=
Subject key identifier: 89:38:D4:AC:9A:76:C6:03:73:CB:72:EB:FB:3A:38:AB:87:10:C2:5B
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019D9B5161F998D9148268708753009656BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 14BC
Signing time: Fri 17 Apr 2026 12:01:35 +0000
Manifest this update: Fri 17 Apr 2026 12:01:35 +0000
Manifest next update: Sat 18 Apr 2026 12:01:35 +0000
Files and hashes: 1: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: hlPE3f17azlAnDT7ifsEPzu1ayJ+h508conblOBqVCY=)
2: sU4SdgLEKJLdmmd7O0WH0cIHbDc.roa (hash: 56F6iMelALI7bLbAqUWShoXQBZvQSM/mzwf3Aamh/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:61:f9:98:d9:14:82:68:70:87:53:00:96:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Apr 17 12:01:35 2026 GMT
Not After : Apr 18 12:01:35 2026 GMT
Subject: CN=8938d4ac9a76c60373cb72ebfb3a38ab8710c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:d9:fe:45:94:1a:ef:83:c1:81:f2:0b:b7:
50:7f:58:f9:12:50:58:67:bf:39:d3:b6:ab:c2:95:
24:13:7a:5a:97:f4:3b:8f:a5:ae:6c:29:c3:b2:1c:
61:b0:9f:23:b9:39:31:23:a1:3c:a7:09:db:ed:c7:
75:11:1a:7a:92:c9:c4:5d:f1:24:1b:f9:f2:aa:f0:
a9:cb:6d:c7:c9:85:0f:a9:84:c0:37:54:10:4f:c7:
c9:57:75:8a:81:5c:b4:5f:92:28:fe:37:18:47:58:
3f:e3:f1:a5:12:f9:80:aa:5b:28:37:d3:a6:f7:09:
7b:a1:0c:ac:d0:5b:09:86:bc:d9:17:d5:94:a3:c3:
5f:72:30:de:85:22:7e:83:36:28:50:af:b7:73:30:
3e:9d:c8:0a:35:42:42:1e:d3:a5:95:f9:c8:b1:10:
32:1d:32:93:a6:d1:03:48:15:7c:b0:8f:fe:97:61:
8f:6f:63:0f:8c:b7:38:b4:fb:81:b9:b2:1e:3b:39:
c6:94:8e:46:4e:da:e1:be:85:c7:cd:ae:a1:1b:5a:
13:75:8f:46:94:80:39:a4:25:0f:07:7c:ce:a2:17:
7a:f9:3a:39:7d:1a:37:53:04:e6:72:46:0d:8a:35:
5b:5b:7c:5f:f2:3c:36:7c:42:55:c2:2d:40:b1:67:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:D4:AC:9A:76:C6:03:73:CB:72:EB:FB:3A:38:AB:87:10:C2:5B
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bf:80:f2:30:19:38:cc:e9:0b:f2:28:bf:77:20:2c:e9:47:
94:15:11:d3:b3:a1:8f:74:39:49:ae:15:6e:00:cf:92:a2:6e:
cd:c6:44:ae:04:19:3e:e4:62:72:a0:ff:e3:0b:9b:fe:bd:9b:
02:76:b1:f5:35:1e:ff:e0:09:c6:50:fc:c1:b3:1e:d9:61:f6:
a6:1b:c0:f7:9d:c0:30:1b:48:33:05:42:4f:11:f3:18:88:5b:
0f:53:ff:0c:00:a9:e7:69:b4:27:76:af:85:22:9a:4e:4a:c6:
25:5f:bb:0b:42:a3:7a:44:63:35:3c:1b:3f:ee:8e:77:fd:df:
20:9b:5f:8c:64:ca:24:35:5b:aa:bf:cc:d8:f4:f8:22:07:48:
fc:8b:70:61:20:83:8e:64:c9:55:77:65:7b:0c:5d:3d:91:95:
c0:40:36:b0:6d:35:bc:16:4c:5b:e1:f8:86:2a:73:bd:11:da:
47:e4:f0:db:d2:5f:82:09:e1:97:a9:24:d1:5d:3e:82:c2:60:
03:35:d7:b1:18:22:d8:fa:de:37:be:ac:c1:d0:c7:c0:83:04:
9d:9b:ad:6e:c0:6f:67:33:5f:bf:30:bb:1a:5f:4b:06:3c:b9:
48:dd:d1:6a:41:f5:23:9c:58:15:fb:26:ff:b0:5c:1b:86:66:
e4:11:78:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:59 2026 by rpki-client