Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: jgAqe3NgDuPm6pKPa/ADNHlQNWfPw7PyJf45RLg110M=
Subject key identifier: 78:4D:C9:F6:C8:34:66:66:CD:53:80:97:D3:F1:88:8C:21:59:C8:D7
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 019FAB2C5B84E52FFE62179F0FB1F3E05436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 00:00:38 +0000
Manifest this update: Wed 29 Jul 2026 00:00:38 +0000
Manifest next update: Thu 30 Jul 2026 00:00:38 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: DTWUc6Oi/TsaAQX4gUbbP8krwodX4cfLgQ56f9Fb3fg=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:5b:84:e5:2f:fe:62:17:9f:0f:b1:f3:e0:54:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jul 29 00:00:38 2026 GMT
Not After : Jul 30 00:00:38 2026 GMT
Subject: CN=784dc9f6c8346666cd538097d3f1888c2159c8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:d9:a2:55:f7:6c:6b:48:28:e9:92:74:03:
75:b6:b5:6d:7a:7e:1e:b1:2f:c4:aa:7f:e1:26:91:
de:2e:d3:b9:dd:9c:27:b7:07:8d:1f:1b:46:ab:21:
91:ed:65:05:b1:57:e9:65:77:2f:81:5d:dd:59:16:
d8:42:8b:fa:94:e8:41:43:c7:8f:47:9a:de:f8:78:
70:b8:46:0f:e6:ff:87:23:8b:f6:18:f9:7b:a8:76:
3e:86:1b:32:14:86:96:28:c1:7e:79:0b:d7:69:4d:
de:09:f9:95:59:a4:61:ca:0d:8a:13:42:57:88:e2:
52:8e:8e:ff:02:f3:c3:b5:3b:7d:34:cd:e5:a2:c9:
f7:ad:d3:6c:be:39:14:bf:06:d1:e4:53:d6:ab:88:
9b:17:00:b3:5d:46:4b:87:12:43:c5:02:dc:2b:68:
a9:ff:31:41:4a:62:b1:bd:7f:dd:f8:84:ce:27:95:
c0:59:1b:4f:b2:bb:16:91:19:b8:c6:28:63:f2:41:
e0:25:de:6f:11:0c:08:3e:3f:2b:9a:ff:09:10:27:
77:70:2b:6c:6d:4e:ae:0c:82:da:2c:eb:b0:b8:aa:
b6:27:70:2e:a9:f6:65:ad:37:da:a2:3f:a2:37:ce:
a4:a2:7c:63:dc:25:f6:f4:cd:e0:e9:ad:87:be:88:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4D:C9:F6:C8:34:66:66:CD:53:80:97:D3:F1:88:8C:21:59:C8:D7
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c8:76:21:87:7c:c1:9a:29:2c:6e:7d:90:91:f3:d2:7c:70:
0d:2f:51:b6:c4:ff:11:e8:70:45:95:b1:39:4a:a2:ca:16:97:
2b:d5:ec:8e:de:bb:09:7f:ea:fe:11:81:a3:5b:ea:3b:d6:3f:
85:4a:5f:2e:6e:4d:99:0b:a8:e3:67:0e:44:7b:18:e7:77:ec:
d0:cd:a3:17:16:15:74:ed:10:ca:ca:09:35:32:23:90:69:c2:
ea:fd:0f:2f:db:19:73:4b:af:a4:2e:ec:98:29:c9:f4:5a:da:
68:99:ef:fc:cb:49:03:54:6f:2a:dc:43:d8:06:80:34:de:80:
ed:1e:b6:db:00:67:2f:c5:c5:9d:b4:a8:79:61:5e:b2:10:2f:
fa:f0:89:41:3e:09:7e:06:dd:02:8a:a9:41:c9:45:35:c9:e3:
97:7a:5a:80:fd:47:5b:5d:a4:d1:9a:ce:c4:c2:34:9b:6a:80:
aa:7e:18:5d:3b:8d:7d:2e:ec:9b:ae:4a:ba:16:5d:38:95:88:
c2:7e:a3:2e:fe:7a:8c:64:6d:4a:d6:37:36:a4:2c:07:79:18:
88:af:5c:b1:5f:54:0c:85:13:98:5b:a5:f5:06:cd:d7:b9:d6:
d3:20:61:57:56:47:49:18:89:04:1a:5b:9c:3f:37:76:23:c8:
63:0a:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:53 2026 by rpki-client