Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: D+z46as3ifS74JF7UZqUWxfW/gNh9z14kFDWKiLCrMs=
Subject key identifier: 4A:CC:EC:C7:88:BB:21:A6:C6:28:30:98:7D:C7:32:4E:2A:5D:42:6F
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019CABA2302D07555D08FD0C73B6073957FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0F3A
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: P/aq1cRDKpIYUAu1IeM/yaLVRfheRQ9T3Dk8zOiff0w=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:30:2d:07:55:5d:08:fd:0c:73:b6:07:39:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=4accecc788bb21a6c62830987dc7324e2a5d426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:60:a8:56:30:16:8a:77:d6:ea:ac:be:54:
b0:62:41:ab:70:93:3a:5c:0d:e4:9b:24:a5:ca:75:
1d:35:a4:db:b7:5e:9a:f5:c7:fd:94:81:f2:5f:61:
2f:d5:6e:0c:77:de:6e:84:57:7a:2a:76:da:82:40:
d3:5b:a0:f8:3d:51:62:0a:a9:f7:b5:aa:58:6d:3a:
bd:9e:3d:22:88:4f:f8:bd:84:6b:46:ee:54:ee:b4:
4b:2c:5f:c2:b0:f6:58:39:8c:dc:81:c3:d4:76:e5:
bc:9d:62:ef:e0:7e:cd:24:b6:f7:52:0c:ad:52:96:
4f:27:e4:ba:b5:48:39:aa:a5:c3:3d:a8:40:b1:23:
8a:25:13:69:2e:5b:87:a6:8c:30:27:4b:a0:b4:1c:
2b:84:6e:e7:c3:37:20:0a:78:21:95:6a:7f:20:d4:
d6:2a:84:9b:0d:33:c0:9a:aa:c9:7a:fc:35:e7:7f:
e2:7b:bb:ef:28:d2:4e:1a:4f:f9:7a:f7:6e:dd:5e:
3f:b8:ff:8d:b1:9f:75:8a:2f:e4:a4:c6:6d:16:bf:
52:51:49:9a:f4:1e:43:73:d6:4e:07:94:60:4d:11:
1f:24:d2:2a:29:94:78:1d:08:6e:12:80:51:63:ae:
9b:7b:42:07:b6:f9:2b:9b:47:41:9c:02:3f:03:e5:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:EC:C7:88:BB:21:A6:C6:28:30:98:7D:C7:32:4E:2A:5D:42:6F
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:64:b3:41:9e:f5:cc:d9:8f:0c:db:1c:b0:8b:55:1f:87:
28:34:89:97:98:30:4d:d0:73:fa:8f:50:bc:7b:a0:7c:2e:4a:
d8:72:ed:80:79:67:e5:5f:f6:72:90:16:71:ed:18:be:d0:6d:
51:5f:73:ca:8b:4a:41:d7:0f:63:94:fb:4b:cf:ee:f3:ef:eb:
7a:0f:0f:b1:46:96:90:cb:03:45:ee:4f:4d:58:84:26:dd:d3:
f2:1f:3a:ec:fc:94:b1:b6:ac:73:f5:c6:a8:12:de:68:d0:62:
0c:d9:92:7c:a6:a6:b8:63:f0:fc:16:d5:49:02:de:d6:af:af:
b3:a2:09:4e:03:43:66:94:29:0d:3e:40:ae:73:57:4f:f0:1e:
4f:c2:b7:bf:56:fe:ee:b1:e5:03:91:08:e1:a4:4d:ef:24:08:
30:f3:fa:59:d7:c1:da:03:70:9d:32:f1:d1:01:25:59:7f:e2:
b4:dd:7d:4b:3a:09:be:b1:7a:e1:36:b6:ca:28:ee:24:49:9e:
29:30:ff:ab:e7:1e:74:f9:4e:93:24:b3:bb:d9:67:f0:d0:8e:
ac:e3:bd:0f:9a:6f:d4:d4:b8:aa:1d:bd:f7:92:b2:6c:1e:12:
44:c2:b9:2e:1a:1b:63:5e:84:21:75:cd:34:38:5b:f1:31:12:
2e:96:af:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojAtB1VdCP0Mc7YHOVf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjYwMzAxMjMwMDU4WhcNMjYwMzAyMjMwMDU4WjAzMTEwLwYDVQQD
Eyg0YWNjZWNjNzg4YmIyMWE2YzYyODMwOTg3ZGM3MzI0ZTJhNWQ0MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthJgqFYwFop31uqsvlSwYkGrcJM6
XA3kmySlynUdNaTbt16a9cf9lIHyX2Ev1W4Md95uhFd6KnbagkDTW6D4PVFiCqn3
tapYbTq9nj0iiE/4vYRrRu5U7rRLLF/CsPZYOYzcgcPUduW8nWLv4H7NJLb3Ugyt
UpZPJ+S6tUg5qqXDPahAsSOKJRNpLluHpowwJ0ugtBwrhG7nwzcgCnghlWp/INTW
KoSbDTPAmqrJevw153/ie7vvKNJOGk/5evdu3V4/uP+NsZ91ii/kpMZtFr9SUUma
9B5Dc9ZOB5RgTREfJNIqKZR4HQhuEoBRY66be0IHtvkrm0dBnAI/A+VI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErM7MeIuyGmxigwmH3HMk4qXUJvMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKJks0Ge
9czZjwzbHLCLVR+HKDSJl5gwTdBz+o9QvHugfC5K2HLtgHln5V/2cpAWce0YvtBt
UV9zyotKQdcPY5T7S8/u8+/reg8PsUaWkMsDRe5PTViEJt3T8h867PyUsbasc/XG
qBLeaNBiDNmSfKamuGPw/BbVSQLe1q+vs6IJTgNDZpQpDT5ArnNXT/AeT8K3v1b+
7rHlA5EI4aRN7yQIMPP6WdfB2gNwnTLx0QElWX/itN19SzoJvrF64Ta2yijuJEme
KTD/q+cedPlOkySzu9ln8NCOrOO9D5pv1NS4qh2995KybB4SRMK5LhobY16EIXXN
NDhb8TESLpavVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:30 2026 by rpki-client