Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: 8I9XpwzqUOMNl3oCbjGtEWZW/H8E+fHQLgaid5/PwgI=
Subject key identifier: F1:04:2E:4B:88:07:7E:85:44:B1:1D:92:62:39:7F:45:28:1B:8F:BC
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019FAC3EBB532D55CC6DB63A1D815807CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 10C8
Signing time: Wed 29 Jul 2026 05:00:20 +0000
Manifest this update: Wed 29 Jul 2026 05:00:20 +0000
Manifest next update: Thu 30 Jul 2026 05:00:20 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: 0SYuOll3mn3285k421Xj1wONpW2nRpV188Y8AeX6/Tg=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:bb:53:2d:55:cc:6d:b6:3a:1d:81:58:07:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jul 29 05:00:20 2026 GMT
Not After : Jul 30 05:00:20 2026 GMT
Subject: CN=f1042e4b88077e8544b11d9262397f45281b8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:be:3e:3f:dc:3d:62:2e:2c:90:03:c3:f6:
1a:38:ee:22:ca:a2:5e:fd:33:b4:66:ff:17:44:b6:
9a:24:78:55:3c:97:a6:2f:4d:bb:17:d5:73:7f:ff:
24:be:82:77:ce:6b:85:5b:7d:4e:da:f8:e3:7c:81:
46:5f:a5:35:3c:d7:73:bc:bb:7a:1c:d3:50:ce:d3:
06:ca:b3:42:e9:1f:51:84:d9:2d:a8:80:c6:ec:64:
75:bc:d8:fd:4f:b1:02:11:94:cd:6c:05:f2:82:83:
bc:1e:2b:c5:69:55:0f:04:98:9c:98:c7:a6:98:a8:
87:44:8d:80:ab:23:19:27:c6:63:1b:99:4c:6d:54:
60:a6:92:6f:de:a3:d0:b6:db:f9:c5:59:1b:dc:f3:
80:16:f6:21:9e:8d:1f:f6:a2:d9:90:02:67:15:96:
32:aa:ba:00:5f:55:c1:e0:79:5e:d1:98:e2:90:c5:
f6:e7:e9:d6:b9:65:06:36:f2:59:b3:33:ba:00:1d:
cc:bb:8e:87:69:1d:4e:43:86:93:07:fc:77:63:3a:
6f:bf:70:4b:46:67:41:e1:5f:5e:9b:e0:41:c5:d3:
2b:3f:2a:25:2f:19:62:fb:80:8d:c0:4c:0a:14:83:
d4:c3:a7:72:4f:d5:8d:cd:54:46:3b:e2:82:c8:97:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:2E:4B:88:07:7E:85:44:B1:1D:92:62:39:7F:45:28:1B:8F:BC
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:b5:81:03:84:4a:40:88:b7:02:37:40:0a:54:0a:40:a4:
26:0a:e5:0b:4c:f7:bf:d4:2e:de:bc:8a:c3:11:18:13:f7:1e:
22:da:6c:ca:f4:1b:c6:0c:bc:ba:4d:76:5f:48:73:51:bf:4f:
c2:57:dc:30:1d:4a:9a:9d:bc:a7:7d:d3:9b:d3:36:31:81:f7:
4c:1d:78:f4:be:05:e3:96:13:79:c1:80:98:94:16:f5:68:68:
fa:03:e7:a5:37:ba:6a:b2:0f:98:18:54:64:0c:01:46:4f:5b:
dc:29:51:b9:98:e7:58:5c:fc:bf:78:3c:b5:a3:d1:d5:17:e5:
d1:23:d3:f4:2e:55:ca:64:e0:e0:39:46:14:5d:75:d6:3e:b7:
0b:36:f3:7e:38:a6:1b:6f:29:7c:6d:5d:ed:1e:ca:ec:62:8c:
6f:0a:df:82:fe:47:db:62:33:fb:9b:72:68:a6:f3:03:d1:c1:
46:db:f4:46:96:8b:9b:21:c5:b0:e6:5b:e1:f8:a1:d3:44:8a:
6d:b4:3a:ef:e2:7b:61:2e:13:9e:0e:93:96:08:8f:35:c2:61:
44:b8:bf:f6:63:2a:54:ff:39:0c:ab:ca:b2:4d:4e:9a:6c:a7:
c9:c0:2b:4d:29:db:c2:03:05:a2:fa:84:2c:52:f3:ab:e7:7d:
83:ee:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:21:06 2026 by rpki-client