Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier: Rs2WctCmcpn8aYMaZ9otPa0VATARz+pLQ7VVkbFg/Cc=
Subject key identifier: 5D:A4:67:EC:E2:52:7E:63:79:29:C9:71:88:15:34:A2:11:15:A2:66
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 019D9DACE9B79F23EB97E56B5A8C4014679C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number: 13CD
Signing time: Fri 17 Apr 2026 23:00:48 +0000
Manifest this update: Fri 17 Apr 2026 23:00:48 +0000
Manifest next update: Sat 18 Apr 2026 23:00:48 +0000
Files and hashes: 1: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: 1jMioC2KRvTWvXT1s3O92sQrIVVMtDMSM5bC33HuD88=)
2: txYriZmrTJ3bD1WGwvSJz3PN5-8.roa (hash: A2tg+Z/JBJAfJTZjVLLXsxPFu9O91MnbBF/Cx3C/GE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:e9:b7:9f:23:eb:97:e5:6b:5a:8c:40:14:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Apr 17 23:00:48 2026 GMT
Not After : Apr 18 23:00:48 2026 GMT
Subject: CN=5da467ece2527e637929c971881534a21115a266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:5d:e0:e8:1c:29:1f:25:1a:0f:48:73:ac:
d1:35:c3:a3:ce:56:fb:02:66:b0:fe:07:d5:c2:13:
21:8e:1f:fc:67:26:0f:be:ac:92:a2:46:e5:1a:d0:
39:e6:3c:3f:a6:53:4b:aa:4d:8e:ef:57:7b:96:9a:
6f:20:55:a6:e1:85:0a:05:40:0c:43:f0:e9:4b:76:
7b:e4:46:4b:ce:a6:fe:9f:eb:de:65:97:22:7c:73:
fe:96:4e:9b:9e:7a:97:44:d4:ff:8c:36:09:9c:2b:
5c:9e:08:07:9b:a9:ff:72:03:be:91:75:8c:be:19:
db:6d:1d:f2:45:e0:a9:fc:95:b7:be:68:32:5f:2e:
59:5b:0d:02:26:5b:f7:c3:06:1a:89:f6:6a:8b:96:
93:26:92:9e:46:86:19:ad:6f:5d:c3:38:c7:8e:a3:
93:49:20:69:ed:13:11:e8:dc:76:c1:cf:eb:dc:7c:
65:ca:ae:18:cd:88:e8:19:e5:61:1b:5a:68:da:92:
0a:30:6f:2a:b6:46:49:d4:15:66:c6:c9:12:fb:c9:
6b:bd:ed:27:31:06:19:02:64:4a:22:e0:7b:a8:ff:
f0:74:ab:0e:c5:fe:8f:40:14:a3:6c:eb:ff:12:f1:
00:bb:f9:4c:7c:bb:64:39:30:77:25:f0:3f:1e:0e:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:67:EC:E2:52:7E:63:79:29:C9:71:88:15:34:A2:11:15:A2:66
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:45:fd:a5:95:1e:53:3c:ed:6d:db:af:60:8e:2c:05:33:11:
f5:58:a1:81:8c:3c:b6:ff:c4:45:81:33:ea:14:38:98:7e:ab:
d5:9b:d9:84:1c:67:7d:2b:57:65:95:02:6d:7f:d7:5c:2d:dd:
a9:91:f5:14:06:98:c1:df:94:c5:24:b7:c4:b0:9a:99:f9:66:
79:1d:25:f7:ee:6c:c5:13:3c:94:a9:cf:de:95:95:2f:f4:90:
73:25:7a:c8:c9:8b:88:9e:61:d9:8f:7f:8e:39:af:a7:71:35:
d8:76:fe:ad:21:81:b5:48:7f:8d:17:f1:3b:29:f1:18:c0:03:
f8:55:b2:72:63:2f:13:f6:45:2b:0b:d3:7b:c0:71:04:e0:35:
39:90:d3:f4:49:d0:41:30:67:c0:e5:89:a6:46:9b:b9:c0:72:
77:0e:8e:3c:1c:d1:53:b9:df:b9:b3:60:95:ea:32:ad:b9:93:
9e:de:69:4f:8a:73:a9:34:7a:20:b9:4f:df:84:75:fb:32:e4:
02:81:a6:ee:61:e8:11:46:58:a0:e2:ba:de:3e:eb:e5:61:a8:
f2:ac:41:cf:ed:3c:95:ea:03:05:17:77:d3:cc:12:3a:34:54:
1c:af:b3:0b:b0:91:39:43:39:aa:b2:69:78:25:72:30:c9:0d:
b5:a6:e1:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drOm3nyPrl+VrWoxAFGecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDFiMTU1YWFiNmQxMjI5ZmQzNDhlYWEwM2QwZjc5MDNm
MTI2N2EwHhcNMjYwNDE3MjMwMDQ4WhcNMjYwNDE4MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZGE0NjdlY2UyNTI3ZTYzNzkyOWM5NzE4ODE1MzRhMjExMTVhMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDBd4OgcKR8lGg9Ic6zRNcOjzlb7
Amaw/gfVwhMhjh/8ZyYPvqySokblGtA55jw/plNLqk2O71d7lppvIFWm4YUKBUAM
Q/DpS3Z75EZLzqb+n+veZZcifHP+lk6bnnqXRNT/jDYJnCtcnggHm6n/cgO+kXWM
vhnbbR3yReCp/JW3vmgyXy5ZWw0CJlv3wwYaifZqi5aTJpKeRoYZrW9dwzjHjqOT
SSBp7RMR6Nx2wc/r3Hxlyq4YzYjoGeVhG1po2pIKMG8qtkZJ1BVmxskS+8lrve0n
MQYZAmRKIuB7qP/wdKsOxf6PQBSjbOv/EvEAu/lMfLtkOTB3JfA/Hg42uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2kZ+ziUn5jeSnJcYgVNKIRFaJmMB8GA1UdIwQY
MBaAFDpBsVWqttEin9NI6qA9D3kD8SZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUt
MmIzYjRjNzgwNDE5LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUtMmIzYjRjNzgwNDE5
LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkX9pZUe
UzztbduvYI4sBTMR9VihgYw8tv/ERYEz6hQ4mH6r1ZvZhBxnfStXZZUCbX/XXC3d
qZH1FAaYwd+UxSS3xLCamflmeR0l9+5sxRM8lKnP3pWVL/SQcyV6yMmLiJ5h2Y9/
jjmvp3E12Hb+rSGBtUh/jRfxOynxGMAD+FWycmMvE/ZFKwvTe8BxBOA1OZDT9EnQ
QTBnwOWJpkabucBydw6OPBzRU7nfubNgleoyrbmTnt5pT4pzqTR6ILlP34R1+zLk
AoGm7mHoEUZYoOK63j7r5WGo8qxBz+08leoDBRd308wSOjRUHK+zC7CROUM5qrJp
eCVyMMkNtabh3w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:11 2026 by rpki-client