Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: WYnP+CnenCbTOQJ9a1T6lXs3I7DFc09RbdHSw40nx3o=
Subject key identifier: F8:B2:E5:9A:BD:3F:69:78:0F:78:5C:0E:D8:A3:DA:0F:98:50:ED:1E
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019CACB4EF68B277D2B944313F6EB73EBD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 04:01:04 +0000
Manifest this update: Mon 02 Mar 2026 04:01:04 +0000
Manifest next update: Tue 03 Mar 2026 04:01:04 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=)
3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=)
4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=)
5: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: i0ovBlLPTL0bxJ+TpjA7kBDhdoyKgpfbVD9Jz7SFMHo=)
6: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=)
7: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=)
8: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ef:68:b2:77:d2:b9:44:31:3f:6e:b7:3e:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Mar 2 04:01:04 2026 GMT
Not After : Mar 3 04:01:04 2026 GMT
Subject: CN=f8b2e59abd3f69780f785c0ed8a3da0f9850ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:b0:a1:53:e8:82:de:d6:14:d7:10:a1:9b:
0d:22:4c:82:cc:9f:f0:31:e3:06:44:07:4d:a7:96:
38:3b:9c:6e:53:ec:2c:e7:50:d6:ec:22:6e:94:c3:
71:cb:a8:da:13:9e:6b:bb:19:e2:a6:a2:09:55:47:
61:0e:93:69:89:ea:d1:07:18:53:7c:98:4b:23:94:
1a:18:18:28:de:55:22:e9:93:74:e1:4f:b4:1e:43:
9e:ff:c7:8f:a8:33:78:4a:78:cd:59:27:76:bf:cd:
aa:de:e5:9e:61:c9:a8:5e:84:0b:e2:e3:72:29:ab:
18:e1:e9:0e:d6:91:90:c7:37:f3:a8:55:d8:3e:85:
d5:4b:37:14:ba:ef:49:14:9c:97:c5:f0:e3:41:8c:
d5:69:74:5c:7e:81:00:9e:b4:cd:08:94:e5:7d:8c:
cd:bb:10:50:5d:0a:23:f7:a2:4f:0a:85:48:76:63:
ed:fe:7c:f0:37:e6:a6:53:7d:ae:40:09:dc:01:bd:
c6:14:e0:75:83:78:0e:68:4d:8c:27:70:09:66:1f:
c3:0b:8a:7a:38:1c:68:b0:71:4b:b6:eb:ea:88:08:
14:a3:8e:e4:e3:ca:02:ff:e2:20:5c:9e:ea:77:44:
bc:0a:d0:94:25:aa:1e:5c:46:66:13:51:22:cb:67:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:E5:9A:BD:3F:69:78:0F:78:5C:0E:D8:A3:DA:0F:98:50:ED:1E
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:fd:4c:3a:19:62:9f:86:ad:6e:21:95:a8:dd:b2:e2:6a:
b5:3d:c3:c9:b6:a9:41:4f:e0:e3:18:e4:02:5b:f4:13:c7:43:
4f:b0:72:a5:8f:bb:06:64:7f:a7:0c:9a:89:0b:48:03:8f:9c:
e8:25:57:76:c2:0e:12:7a:ab:d7:c5:d3:72:4c:1d:96:fa:8a:
0b:4c:5a:bf:80:34:77:4f:c6:35:ba:94:09:86:a2:9b:9d:67:
27:38:51:0a:7b:59:53:e3:20:39:5a:4e:c3:da:6c:db:da:66:
d7:6a:04:51:40:ea:2c:b4:1b:74:c8:2e:1b:8a:60:41:a4:d0:
7c:77:0e:75:02:1a:99:34:59:60:ed:14:4a:6e:aa:d9:e5:6c:
35:c7:86:87:aa:56:90:cb:4e:33:63:01:ad:1a:2d:15:10:2c:
02:a0:5d:6f:54:15:16:16:b8:9f:5e:cf:aa:e1:f7:44:3f:9d:
95:65:db:c4:97:9e:34:cc:c1:42:a9:4c:a4:5c:84:8e:d8:64:
6a:cb:4d:94:09:86:f6:1a:bc:81:2f:59:35:8e:67:2e:43:1f:
8c:48:f8:d4:a5:65:f9:e9:4f:8a:b8:a5:ba:53:f5:b4:66:15:
a6:15:4e:e0:3d:65:fa:03:ae:5e:ad:98:35:09:b5:ff:64:6b:
b9:cd:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:17 2026 by rpki-client