Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: ejPHaw2Pvl8W1ONsm01TrKhlBTgtsLFeeaN78Os0zqc=
Subject key identifier: 59:55:63:65:5B:A8:C3:D1:FA:26:FA:CF:0F:FD:C0:4E:5A:7D:EF:BA
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019D98BDE1F378D2560E34B8B809B36B02BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 0685
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: kOMo54x3NWBAW190SLHmvbDZtaIM5OYW86la601CAAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e1:f3:78:d2:56:0e:34:b8:b8:09:b3:6b:02:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=595563655ba8c3d1fa26facf0ffdc04e5a7defba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:9c:1b:de:d9:2d:0c:3a:28:3a:e8:db:76:
86:46:fd:a5:2e:29:e6:f9:4a:35:1e:f1:bc:c4:4e:
56:1f:6b:43:14:df:d4:e2:51:f3:bc:eb:3c:1c:8a:
4b:3b:84:19:f9:97:ec:40:c4:db:72:36:61:56:96:
7d:6f:23:2d:3e:87:f9:64:9b:99:26:e4:c7:a7:f3:
4b:f2:9e:3b:49:5b:73:2b:95:64:57:70:b8:cb:34:
9d:cc:23:8e:4d:c2:d5:a0:5c:2b:d8:a4:65:7e:60:
a4:9f:b2:5f:f3:28:2f:d9:e9:3f:19:2e:c7:64:91:
88:24:92:74:16:fe:e9:b8:ed:9b:35:e9:85:ad:f7:
d1:0f:41:d8:64:ff:3e:dc:96:d2:ac:e4:56:2a:cc:
eb:86:e0:96:f2:47:37:57:bd:9d:55:d2:88:41:d3:
33:ab:78:d9:60:4d:3f:b5:66:6b:c7:d6:8a:85:1e:
97:40:d5:6c:57:0c:6e:a8:3a:74:58:45:f7:f6:0f:
14:2e:9c:7a:dc:c5:5f:cc:fa:a7:64:05:fd:54:f5:
2e:c5:fb:ef:5c:52:3c:06:57:a1:af:10:d9:df:91:
b1:05:78:a2:11:a3:23:11:bb:40:94:58:d4:ae:9a:
ba:34:ce:64:da:2d:b2:f0:63:63:f5:d3:22:60:76:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:63:65:5B:A8:C3:D1:FA:26:FA:CF:0F:FD:C0:4E:5A:7D:EF:BA
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:b3:97:7c:7e:52:4b:07:26:40:71:d8:f8:96:64:27:1d:
2e:5e:09:7b:d6:8a:db:17:60:94:5c:b7:d5:9d:c1:27:4e:80:
a6:cf:51:e8:98:8a:69:e6:00:c5:de:75:5c:b9:08:85:ae:f9:
c7:09:80:e3:6b:28:e6:48:d8:88:80:70:80:8a:89:32:5c:1e:
06:89:14:76:78:c9:34:71:7c:63:8a:05:ed:2a:0b:c9:5d:0a:
80:6a:ac:63:02:01:20:7b:ca:65:0f:b3:b5:6c:de:0e:94:38:
a8:5a:bd:c4:4a:f0:55:53:2c:6f:c4:c7:45:31:1a:a0:60:bd:
d6:7b:6d:0e:7c:ff:35:c7:cc:09:d0:4e:58:c9:fa:cc:d9:ed:
27:69:8c:a5:84:00:b1:63:b1:25:36:ec:70:3c:11:55:b9:dc:
23:9d:34:3f:4c:67:df:7a:c9:a5:71:ae:92:51:55:56:a8:9d:
74:44:3a:09:8b:f2:79:de:38:21:88:5b:9f:e3:b4:da:76:34:
3d:09:62:4c:30:66:c7:d5:8c:a7:b9:83:79:44:50:a7:d5:e8:
4f:50:2d:4f:8e:4e:7f:b3:d1:c4:ff:e5:38:38:07:75:2a:8b:
de:c2:54:8a:31:4e:f8:a1:72:0f:19:f2:0c:18:46:1a:47:b8:
6a:29:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:21 2026 by rpki-client