Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: KdMVkpYAeDuxU0oinFT6e0pFqmcQS9aizNHp49YgkPQ=
Subject key identifier: 56:38:9D:06:6E:68:BB:2B:1B:13:B3:6C:D9:1A:67:42:A1:01:76:3E
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01A12466409C0CAB608903967326E77C1175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 085B
Signing time: Sat 10 Oct 2026 06:00:43 +0000
Manifest this update: Sat 10 Oct 2026 06:00:43 +0000
Manifest next update: Sun 11 Oct 2026 06:00:43 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 1h1LsegCVN3Gx8bSqQKxrH34dWaaWGpV17W2haZKWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:40:9c:0c:ab:60:89:03:96:73:26:e7:7c:11:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Oct 10 06:00:43 2026 GMT
Not After : Oct 11 06:00:43 2026 GMT
Subject: CN=56389d066e68bb2b1b13b36cd91a6742a101763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:a6:26:78:69:ed:f5:50:e9:38:00:e0:cf:
fd:76:bf:a1:53:fe:12:cf:27:d9:e1:fa:3c:ea:5a:
70:51:6b:24:dc:eb:a4:0f:66:3f:3b:6c:f3:68:29:
ff:62:09:4f:61:03:6d:c9:22:5b:ca:5e:2c:8c:da:
7f:d9:45:60:81:42:3e:30:fb:d7:e4:d1:50:ab:2f:
f3:75:14:94:22:e4:87:d9:8e:64:e3:82:85:cd:09:
43:b8:d3:6e:7c:9f:85:7b:23:75:83:2c:09:68:b7:
5b:cd:45:21:bb:40:00:ff:74:b0:60:28:d0:a5:47:
5c:62:7b:55:43:06:92:9d:f9:cd:33:f3:0e:a9:99:
55:48:32:d8:ca:01:93:ba:9a:a0:45:b6:bc:49:5c:
66:bc:7f:99:a6:9b:bf:4b:0c:4e:00:c8:ae:73:a7:
4a:37:4b:f0:21:da:22:7e:98:7c:e4:58:ce:21:28:
5e:ef:b5:ac:72:fa:45:79:3a:d8:63:7a:ae:cb:52:
cb:e9:5f:1c:51:0f:46:3b:59:2a:bc:f3:53:1d:05:
8b:ed:bd:f9:96:66:0b:45:38:c8:20:b8:5b:78:27:
c6:97:ab:96:36:2e:70:a7:4d:5a:a3:6a:3a:bc:c9:
97:a4:33:d9:26:ed:a7:02:88:93:4b:d2:60:64:71:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:9D:06:6E:68:BB:2B:1B:13:B3:6C:D9:1A:67:42:A1:01:76:3E
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:9b:41:b1:fc:f7:19:aa:91:f6:c2:34:c8:a9:47:48:80:
5d:85:68:de:73:cb:59:d2:be:d7:42:e2:da:33:99:a1:51:ed:
e3:f1:39:b1:36:d2:11:4d:f9:56:1c:15:2b:0e:65:26:eb:d3:
48:cb:bb:4f:7c:e0:de:1a:f6:31:a5:b5:97:06:c7:bd:d0:e9:
8c:cb:7b:11:76:a4:b0:67:1a:50:23:28:05:32:1c:4a:97:9b:
a5:cb:26:85:f8:bd:f0:e5:46:b6:bd:66:cc:84:f7:74:eb:91:
18:e9:e3:de:7e:b8:24:01:33:1e:1f:89:15:13:1e:23:d4:1b:
6e:b9:a5:70:e7:25:54:fb:b9:d2:08:aa:06:7c:17:b4:d2:99:
7d:83:42:aa:3a:c7:31:33:37:2f:f4:30:98:ac:b4:e8:85:32:
4d:f6:4f:c7:50:13:1e:04:b4:32:93:9a:2c:c1:b8:1a:26:99:
1b:ac:eb:8c:77:85:83:12:96:ba:2e:d3:58:91:01:1f:e7:52:
97:ed:dd:b6:0f:cb:aa:84:56:e2:67:ed:4d:cf:49:8a:f0:a1:
04:b3:cc:01:f2:27:74:d1:33:a8:94:66:43:3a:d2:58:3a:e8:
76:4d:b0:e4:b6:87:4d:c4:eb:96:29:99:db:0a:22:6b:41:e5:
72:e0:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:50:38 2026 by rpki-client