Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier: KKW7iWrvSq+WxsQYvjvK8qKLiU2D29jGlQXhL9qFaEU=
Subject key identifier: 4F:0C:6A:28:EC:81:52:55:D3:0A:96:42:90:C8:7D:48:4E:13:83:4B
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 019CAD909420D2B6540D82B5AEBF7F320DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number: 134F
Signing time: Mon 02 Mar 2026 08:00:59 +0000
Manifest this update: Mon 02 Mar 2026 08:00:59 +0000
Manifest next update: Tue 03 Mar 2026 08:00:59 +0000
Files and hashes: 1: MQkaYy80rlcF2zpg2yFpUgSAhhE.roa (hash: S21YGrGdqaF7674FFZMPM/sVGaBX3VNwBzrWaUE2Lqg=)
2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: oW3YExv6Y0wxBRwEL19yVBJnE7429A9gXkvyGzTDu64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:94:20:d2:b6:54:0d:82:b5:ae:bf:7f:32:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Mar 2 08:00:59 2026 GMT
Not After : Mar 3 08:00:59 2026 GMT
Subject: CN=4f0c6a28ec815255d30a964290c87d484e13834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:42:2d:57:5a:3e:70:d8:a4:c9:8b:9d:1f:
21:e1:d1:89:00:12:43:cf:8d:b7:f9:8e:e8:b3:5a:
a1:3f:7c:cf:85:57:66:67:94:8a:f6:6b:43:6a:53:
87:99:b9:c7:ab:10:9f:00:f5:78:46:8f:d7:c4:c5:
87:73:1b:7f:2b:c8:3b:88:f9:e8:e0:43:eb:82:4d:
7b:ba:27:ce:f5:aa:f8:8c:62:4d:ea:aa:ae:e9:0d:
db:f1:49:c0:87:cc:f1:5e:4d:7b:48:e3:1e:1e:aa:
66:b7:2c:97:06:9a:4b:29:17:77:be:c4:e8:c5:72:
d1:29:ce:98:b1:2e:94:af:88:55:f5:02:6d:28:84:
00:ab:0d:52:0a:fd:08:03:25:78:8c:fc:08:a2:c7:
97:b0:88:93:37:8b:58:53:60:03:60:b8:38:3b:54:
20:bd:62:36:4d:d6:32:5e:64:55:4c:4c:7c:fc:50:
ad:30:27:97:28:ff:04:19:0f:ca:70:e8:e3:39:63:
5b:fd:9f:7d:8e:e1:fc:7a:6c:77:7b:cf:9b:4f:e4:
16:27:15:08:fb:30:2b:e8:d4:1d:10:5e:b7:85:5a:
bf:6f:32:bd:d2:47:09:c9:44:32:e1:fc:77:78:b6:
9b:a5:79:ad:8d:d1:ce:a1:6c:f0:53:8c:d1:e0:f0:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:6A:28:EC:81:52:55:D3:0A:96:42:90:C8:7D:48:4E:13:83:4B
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:ee:68:7a:6e:96:33:4b:b7:aa:15:2b:4c:d7:98:e8:6b:
b3:f8:c4:1d:d0:a4:6d:30:14:f2:91:4c:fd:d1:92:46:32:99:
9e:a2:38:3e:d5:44:ad:a9:cb:71:bf:5b:d9:18:b8:97:b1:84:
41:80:2d:67:f8:ee:0e:62:9f:7a:c8:fe:f7:7c:87:00:7c:49:
be:51:fa:12:25:27:26:af:23:12:c5:5c:bb:b6:d2:7e:1a:86:
61:2a:24:a1:ea:7d:5c:92:44:9a:c4:c0:9a:1e:3e:3f:fb:98:
cf:56:82:0e:fd:96:e6:e1:bf:8f:66:a5:8e:31:f1:34:87:af:
fe:80:bc:7a:aa:5b:6e:ac:05:93:47:15:d6:ac:a1:1b:f1:7a:
f4:bd:e6:d7:a4:a9:01:95:bf:11:53:68:3b:51:fb:13:df:d4:
6b:4b:27:8c:fa:a5:03:78:ed:fc:96:82:f4:f7:b2:a6:dc:b6:
7d:4f:2a:31:09:c0:29:f3:60:c5:28:f7:fe:13:bb:ce:71:62:
0c:39:0f:c8:5a:e4:35:82:6f:d3:d1:d5:c1:d2:75:9b:76:e4:
c9:6b:25:eb:35:b2:6a:d3:3b:c0:30:56:81:ee:0c:ff:0a:29:
2a:49:29:bf:f0:79:4c:18:83:2c:10:d1:b4:f0:df:a3:37:1a:
32:f8:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:42 2026 by rpki-client