Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: fNVRepw+pDe/fjNkChHJTOxMAREWFjbEd2N3LopLmkI=
Subject key identifier: E1:80:F4:E2:72:59:AB:B5:82:9D:9B:28:08:E6:5B:0D:B7:CE:2C:A7
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019CAB34066A5C8A0BCB9B9192143766C9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 060A
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: Ng60qwuouQvHcm6/JXha33V0Sb7AG/bCqvmzmIEmzws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:06:6a:5c:8a:0b:cb:9b:91:92:14:37:66:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=e180f4e27259abb5829d9b2808e65b0db7ce2ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:51:c6:d1:b5:20:89:3e:a8:e7:02:a4:35:
93:10:47:50:35:f9:f4:da:cf:bd:d5:6e:f3:74:95:
cf:ad:fb:cc:fc:de:f1:32:ac:a4:0b:56:12:6f:92:
b6:54:31:02:42:4c:37:4c:e2:87:da:11:c3:cd:03:
eb:b7:ea:59:2d:0a:95:67:93:dd:30:9d:30:0c:4b:
77:15:15:e2:db:25:ed:ff:e0:ef:8a:de:f8:fa:a9:
9c:88:05:5a:0d:fa:3a:e6:0f:38:26:00:1c:cc:bc:
34:2b:3a:3b:1f:22:fb:0a:1a:89:a0:1e:38:37:8b:
d3:9d:11:65:1f:7d:59:01:78:49:fb:da:e7:e0:e1:
31:54:05:d7:a4:99:70:a3:8f:aa:fd:43:70:11:6e:
a8:9f:23:8c:9a:84:02:de:94:8f:8a:c5:83:db:11:
16:b5:6a:6c:01:1a:b6:9b:3a:fd:7a:56:04:45:5b:
69:d7:f1:45:9c:94:39:22:18:76:b0:d5:c1:4e:6f:
7d:84:41:c6:45:af:8a:d8:a2:88:c6:be:9e:72:4b:
f7:2d:8b:9f:7c:09:54:68:cc:d8:11:ff:19:4f:07:
1a:a0:f8:71:39:f3:96:3e:0f:e7:b0:be:3b:f5:58:
5f:6f:da:50:5b:95:6f:9d:81:ea:d9:56:e7:a4:cd:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:F4:E2:72:59:AB:B5:82:9D:9B:28:08:E6:5B:0D:B7:CE:2C:A7
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:05:32:36:32:dd:95:4f:c9:b4:4f:5a:61:14:f7:c4:a4:
6c:92:dc:fb:86:70:b2:23:ca:0e:bd:23:95:0a:db:a1:fd:18:
ac:2b:79:73:6c:f6:29:86:ef:7c:43:44:4f:f8:70:60:1a:64:
08:2c:0e:11:eb:eb:b8:88:15:cd:2c:ca:76:37:3e:38:de:d2:
b2:58:17:cf:b5:56:4c:e5:cd:be:4a:cd:ca:89:61:07:a4:32:
cb:b9:e7:c7:47:a3:5a:d0:0c:22:4b:e6:49:bd:ee:91:10:1b:
80:69:be:15:16:71:0a:fb:c2:3e:92:ff:ef:98:f1:2d:6b:96:
ea:76:21:4c:57:d8:54:c4:3b:0f:ce:e6:08:a0:d1:1e:44:a8:
2b:0c:4a:60:3f:d1:52:36:44:68:0e:ac:79:d1:8b:ba:2f:d2:
05:c7:7f:2d:fd:05:cf:e2:2c:d7:ce:78:2e:12:17:bf:bc:71:
f4:41:73:29:c0:32:a6:98:b7:9c:01:66:5a:6f:07:2d:7d:52:
1a:9c:11:3a:61:11:f3:cb:d4:8b:42:76:be:28:c1:61:a6:08:
d2:a3:56:d3:bc:9d:7e:96:7e:f1:37:42:90:12:8e:49:91:58:
0e:c8:c4:76:b5:d5:97:2a:19:8f:63:07:2c:12:0f:0f:b0:8e:
87:ff:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:50 2026 by rpki-client