Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: FEt0AnohCeFJ8DcXSe9u/GIsgywadifHBqTsLFc6uHM=
Subject key identifier: 9D:EC:9D:34:76:42:E0:29:B4:E1:CE:CE:98:F4:4F:A5:A7:88:02:5A
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019CAAC68603825791C68F35D60E62F53BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=)
3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=)
4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=)
5: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: Pe4qb95ojobDNyH3O6Gb2Bvxylx94pJw7qeEz7KROLs=)
6: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=)
7: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=)
8: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:86:03:82:57:91:c6:8f:35:d6:0e:62:f5:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=9dec9d347642e029b4e1cece98f44fa5a788025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:55:2b:7f:56:2b:cf:28:9a:26:e5:aa:37:
14:17:36:05:73:21:77:c8:de:9b:a5:18:3c:9c:07:
e6:44:68:72:54:f5:a5:f4:43:40:04:f5:83:88:bd:
a1:b5:b6:88:98:8f:7e:25:75:0d:18:49:a4:e6:48:
a2:56:50:1c:93:a5:15:81:eb:03:3c:34:d6:33:33:
00:2e:b8:94:56:98:75:ec:28:14:43:fa:c6:27:95:
76:47:85:46:89:ed:f4:38:f2:fc:36:d0:73:bb:2a:
39:06:81:49:2d:56:d2:65:33:cd:d6:6e:e0:28:87:
da:7d:ea:cf:a2:db:6f:8c:5d:78:6d:e6:3c:05:66:
f5:ec:9a:e4:7f:3a:52:dc:4c:25:f2:7b:36:21:11:
e3:fa:e4:35:e3:37:6f:3c:5f:5e:f9:f7:50:c6:f9:
0b:49:db:07:82:81:c4:fe:e6:74:e5:1d:4c:ae:3e:
86:2f:ef:cf:de:16:6c:32:a8:c8:fa:0c:2e:68:d4:
44:ea:fb:de:ae:15:cf:77:bb:5f:93:30:cf:36:a6:
62:c0:bb:89:1a:0b:49:53:a1:32:8a:01:73:7d:8a:
e2:4e:d8:0b:8a:94:4b:b2:c2:47:3e:af:4a:ee:a5:
24:35:3d:18:8d:44:97:01:76:0a:4e:f7:18:76:0b:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:9D:34:76:42:E0:29:B4:E1:CE:CE:98:F4:4F:A5:A7:88:02:5A
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:dd:81:65:ff:5a:eb:d4:55:8f:6e:21:65:6f:71:bd:b3:
da:77:02:70:15:79:ae:90:fc:b4:b1:f6:23:e9:07:26:28:a6:
46:77:26:a4:05:03:eb:b2:80:bd:a8:35:11:7c:ee:38:24:ce:
da:52:f5:f9:65:52:f6:41:5e:cf:0d:c7:b6:61:81:e3:32:7e:
9d:9b:3d:d9:cc:59:23:40:d2:3d:12:30:0e:c8:12:2c:cf:fe:
36:44:9d:a2:25:e8:36:25:3d:4c:7f:99:73:c5:e3:dd:0c:1b:
44:c4:ae:e0:f4:2e:f5:17:cc:46:8d:b1:ee:34:42:af:1d:e2:
be:e1:71:d2:74:b8:94:d8:27:98:bb:3e:bd:df:f7:a8:67:5b:
d0:d5:4c:53:ed:3b:ec:75:f4:13:24:70:70:05:0c:1a:ef:ec:
43:1e:ff:26:37:db:d2:c3:db:b8:07:2e:ba:b7:19:97:29:83:
63:9b:d7:7b:ad:ac:a1:af:77:fb:57:64:45:b2:36:c6:de:0d:
84:83:13:00:aa:2b:2f:c2:48:1b:37:26:12:01:80:6e:3a:49:
27:82:e5:cc:d9:32:7b:53:b6:1a:32:75:59:ec:f6:25:78:84:
94:69:5b:15:d3:a9:c6:59:f5:fc:93:0f:5b:0a:0a:e7:b8:35:
3f:55:f5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxoYDgleRxo811g5i9TutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwMzAxMTkwMTAyWhcNMjYwMzAyMTkwMTAyWjAzMTEwLwYDVQQD
Eyg5ZGVjOWQzNDc2NDJlMDI5YjRlMWNlY2U5OGY0NGZhNWE3ODgwMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uZVK39WK88omiblqjcUFzYFcyF3
yN6bpRg8nAfmRGhyVPWl9ENABPWDiL2htbaImI9+JXUNGEmk5kiiVlAck6UVgesD
PDTWMzMALriUVph17CgUQ/rGJ5V2R4VGie30OPL8NtBzuyo5BoFJLVbSZTPN1m7g
KIfaferPottvjF14beY8BWb17JrkfzpS3Ewl8ns2IRHj+uQ14zdvPF9e+fdQxvkL
SdsHgoHE/uZ05R1Mrj6GL+/P3hZsMqjI+gwuaNRE6vverhXPd7tfkzDPNqZiwLuJ
GgtJU6EyigFzfYriTtgLipRLssJHPq9K7qUkNT0YjUSXAXYKTvcYdgstuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3snTR2QuAptOHOzpj0T6WniAJaMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX3dgWX/
WuvUVY9uIWVvcb2z2ncCcBV5rpD8tLH2I+kHJiimRncmpAUD67KAvag1EXzuOCTO
2lL1+WVS9kFezw3HtmGB4zJ+nZs92cxZI0DSPRIwDsgSLM/+NkSdoiXoNiU9TH+Z
c8Xj3QwbRMSu4PQu9RfMRo2x7jRCrx3ivuFx0nS4lNgnmLs+vd/3qGdb0NVMU+07
7HX0EyRwcAUMGu/sQx7/Jjfb0sPbuAcuurcZlymDY5vXe62soa93+1dkRbI2xt4N
hIMTAKorL8JIGzcmEgGAbjpJJ4LlzNkye1O2GjJ1Wez2JXiElGlbFdOpxln1/JMP
WwoK57g1P1X1uA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:30 2026 by rpki-client