Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: h1UoZxiVeMYr8hdrKN+c5b36/fWwFg+gQPkltNuQe54=
Subject key identifier: B5:B3:FC:FF:F8:80:84:8D:77:59:78:F2:F6:4C:46:53:4C:AB:4E:A3
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 01A0CEC81881D7AE4820841546827E207959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 1151
Signing time: Wed 23 Sep 2026 15:00:14 +0000
Manifest this update: Wed 23 Sep 2026 15:00:14 +0000
Manifest next update: Thu 24 Sep 2026 15:00:14 +0000
Files and hashes: 1: J7pOiHdYKd2j4ChTilTVhn454DE.roa (hash: hcNJP1cRdMhyS1Muhx9YTYmFbSp39gRRkj1KauS78s0=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: uQBW/ECXmrgV0lDwP261+kjsKQRhTmyj24YbljPY2NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:18:81:d7:ae:48:20:84:15:46:82:7e:20:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Sep 23 15:00:14 2026 GMT
Not After : Sep 24 15:00:14 2026 GMT
Subject: CN=b5b3fcfff880848d775978f2f64c46534cab4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:bc:0c:75:b3:9b:5e:a0:e3:a4:41:0d:06:
1a:a7:36:57:d7:21:c2:3f:b6:32:85:68:87:91:a4:
84:e0:02:32:c2:d0:bb:e3:0f:60:cc:81:10:54:02:
f1:17:ce:e6:c3:d9:65:15:f1:cf:21:2f:14:cd:a0:
50:8b:be:e1:5c:e0:d0:28:34:bf:c7:f4:96:71:08:
65:ed:22:f7:7e:b8:8c:f5:bb:de:2d:75:bb:36:3e:
f0:fb:30:76:87:8b:d8:df:ab:ec:66:a8:60:53:71:
cb:fe:04:2b:bc:96:f4:5f:e1:70:68:64:cc:c4:58:
63:b8:03:74:f7:70:59:42:01:b8:09:6c:2e:d5:c7:
b6:70:73:95:de:6f:e3:df:b2:17:8d:f1:a2:81:ff:
03:23:b1:c0:9b:7c:08:ff:8d:06:ea:48:44:5a:eb:
9a:57:7e:d1:67:d2:c9:9a:a3:04:e9:6d:77:c8:39:
76:2f:ad:6a:55:99:9d:41:fe:e0:69:1c:9c:9f:30:
53:c2:1a:e5:07:30:8c:c0:c9:39:4c:d6:b3:5e:ce:
5d:41:de:01:d4:47:55:88:36:6f:f3:2d:4b:a2:30:
10:85:f8:ff:da:37:fe:71:07:d2:b4:e2:dc:eb:a1:
d0:f2:02:76:09:0c:05:e4:f8:20:5d:2f:da:69:17:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:FC:FF:F8:80:84:8D:77:59:78:F2:F6:4C:46:53:4C:AB:4E:A3
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:a4:39:d2:dc:a1:12:33:9c:67:3c:f7:41:0e:95:03:c7:
1c:f9:ec:3e:8c:d8:be:9c:06:b6:3c:c6:25:cd:d5:e3:27:1f:
4a:40:ab:0b:91:f4:3a:ef:d7:3c:a5:cc:4b:10:21:fb:76:98:
9f:f0:5f:1c:36:2f:db:27:31:b4:2d:3d:a0:96:47:f7:05:97:
31:6c:de:56:3c:dc:0a:3f:a7:00:ab:30:c6:80:9f:48:fb:54:
c3:7f:ce:b6:61:b8:e2:9a:18:0b:9c:2f:39:fc:d2:1c:75:55:
b6:61:5d:5d:ae:5b:9b:e3:a3:0f:8b:cd:1e:a9:ed:14:f7:17:
1c:ec:d2:6f:2c:b4:c3:db:f9:b0:74:94:62:9a:51:b9:23:a5:
9c:d1:84:d7:8a:d5:2b:62:51:2a:be:93:24:24:f8:d3:93:4b:
72:4c:f7:b9:f9:a5:d8:e7:2a:95:70:9d:eb:cf:55:18:30:cd:
8c:51:43:a5:df:93:7a:1b:3a:13:ab:c5:f4:e2:da:73:99:2b:
3e:24:0f:fa:b2:ac:57:37:c7:8f:3b:e0:8f:db:19:e0:c0:37:
67:6c:7b:f9:3d:88:8a:b2:6d:56:13:b2:af:e6:e3:9b:e2:20:
e3:a4:c7:30:30:91:d2:fd:21:2b:9b:a5:6a:21:17:46:37:6f:
1c:ae:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:27 2026 by rpki-client