Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: J0LkFEVHJDRUKECnXxvA682QAHi4mY9s2C03dseQ2eM=
Subject key identifier: 95:52:A4:54:61:12:A2:7B:62:22:80:3F:31:DC:CD:25:55:AF:CE:A9
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 01A0D2A5E5F1CBE7F626814CEDA8A959E4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 09:01:22 +0000
Manifest this update: Thu 24 Sep 2026 09:01:22 +0000
Manifest next update: Fri 25 Sep 2026 09:01:22 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: 6pYY3SYnL2yKu9CQaPw6DRy4nLwyWB4SQuFOaIfdHno=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:e5:f1:cb:e7:f6:26:81:4c:ed:a8:a9:59:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Sep 24 09:01:22 2026 GMT
Not After : Sep 25 09:01:22 2026 GMT
Subject: CN=9552a4546112a27b6222803f31dccd2555afcea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:3d:5f:93:a2:ac:b6:4b:d6:0e:af:8b:49:
ef:d6:ae:51:80:e2:0b:2e:cf:14:0f:65:6d:fc:17:
60:58:47:33:7e:4c:c4:94:ba:76:6a:9b:d4:3b:ea:
9a:4f:cc:17:ac:76:0a:65:0a:aa:b2:bc:9a:87:dc:
65:d6:dc:93:7b:1c:60:21:59:e7:a1:dc:4c:2c:cf:
da:18:b7:55:80:3a:86:bb:0b:48:d6:54:ef:43:32:
d4:a8:87:82:2d:f6:01:8b:0e:bc:be:16:53:4f:cd:
2a:0a:58:d0:14:8d:4f:37:01:61:ca:09:23:93:81:
9c:5d:66:ba:45:0c:21:ee:88:c8:cf:a8:94:32:32:
9e:df:3e:2c:bd:fa:5a:02:3b:4f:39:7c:46:ab:48:
53:1a:cd:0e:27:7f:1e:66:54:61:c4:e1:38:94:ca:
a1:73:37:a1:9f:90:c7:2d:ab:6f:8f:5b:93:f0:61:
df:3a:4f:a1:9b:e1:d2:f0:97:e6:32:c7:f8:e2:b6:
38:38:4a:7a:47:1b:71:54:36:1c:c2:31:e2:ed:f3:
97:f0:3a:af:30:26:a0:bd:f5:e5:7e:7b:b1:f1:d0:
6d:43:42:73:b4:ea:2d:c1:3d:d9:55:c4:c0:fb:68:
04:3e:2a:49:0e:dc:7a:58:2e:83:25:e7:03:42:34:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:A4:54:61:12:A2:7B:62:22:80:3F:31:DC:CD:25:55:AF:CE:A9
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:04:ba:5f:99:e5:83:ab:d1:93:52:c4:24:33:46:e2:65:73:
d9:eb:62:9b:98:13:ac:f6:f9:0a:04:eb:52:8e:44:0d:8c:c8:
35:cb:f6:ac:19:bc:68:8d:ff:77:96:73:3d:66:37:88:58:5c:
3a:7c:4e:1d:ef:0f:a9:ce:b5:cf:ee:7d:c0:2b:79:73:5b:1b:
a5:a1:44:43:ee:54:85:65:58:80:1e:14:08:94:06:6a:ea:f6:
0d:6c:8c:9f:ca:56:d2:f1:62:a5:9c:b0:8c:f0:45:80:91:c1:
35:cf:78:40:6b:78:07:f1:b3:03:79:ab:f0:b9:fd:dc:f7:30:
39:19:49:84:7b:12:2c:d0:b6:6e:9d:d6:58:9b:c0:d3:39:9e:
6d:6d:00:b5:f7:30:0c:98:08:bc:ca:5b:f6:69:6a:cf:13:75:
78:56:85:3c:70:8e:81:e0:8a:f8:a0:91:8a:cc:22:bb:ad:a3:
b4:77:65:4c:a2:c9:ad:da:1d:4d:c6:8f:44:6b:9f:71:5c:71:
30:49:89:5f:06:e5:ae:f8:f7:be:41:3e:b5:93:ce:b7:99:29:
00:3d:82:d6:00:ee:30:d3:58:97:76:b5:ee:a2:b5:96:87:cd:
cd:5a:6a:f2:c4:ce:59:a7:e2:1f:89:dc:a9:45:02:42:47:ab:
0a:fb:e9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:00:18 2026 by rpki-client