Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: WmZUGG4Mn4Is1amWMe6g4ID4LueueGIp8XRJQuV13TA=
Subject key identifier: AB:37:6B:D5:67:5B:80:D0:3E:E0:B8:B5:E9:7A:9E:DF:1E:CB:31:28
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0C66A1D3C67369D5BC49D95DB4D541CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1A84
Signing time: Tue 22 Sep 2026 00:00:38 +0000
Manifest this update: Tue 22 Sep 2026 00:00:38 +0000
Manifest next update: Wed 23 Sep 2026 00:00:38 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa (hash: he75YWP6CSnWhVc2/UtLhyj8J3gpC2sQruvnzJGb/hw=)
3: 7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa (hash: 7Kjf7QXiHqRMdhYCby7XVrJVdqbbCVJGhej/irKWyFQ=)
4: CC-E9kDBg6k16GvFdXpt0v0N9c0.roa (hash: XoR9Xbt76Dj+y6aqOpHi+5O2JWpDsd3FUW+Ej0CkOKs=)
5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=)
6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: xfKwTcoA5Zq71LU82V02oCxohTMRts5dfdiaIBogpoE=)
7: ks4rcCnYGbAZseomOd2Yfr0zDxU.roa (hash: jhqTfs4Y7TCVLQDf9QvU6rDDBDK9avjiClsJAwUoI4s=)
8: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=)
9: v7RvCMDdWErq2gHhPzdgbrJTsQc.roa (hash: E7ugE/1PAPmkxbHvkS+3vDDe3Al8BCMsYCFX6+imnqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:1d:3c:67:36:9d:5b:c4:9d:95:db:4d:54:1c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 22 00:00:38 2026 GMT
Not After : Sep 23 00:00:38 2026 GMT
Subject: CN=ab376bd5675b80d03ee0b8b5e97a9edf1ecb3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:10:db:d5:ae:e4:cb:16:a6:c6:dc:50:8d:
b8:b1:3a:8a:4a:03:ef:ef:47:4f:a8:4f:11:62:a4:
b3:1a:4c:ad:de:7b:98:cf:34:c0:49:e7:d9:80:3a:
8e:48:9e:1d:70:55:02:58:93:66:95:21:ea:57:5a:
70:26:8a:0a:a6:c5:3f:5b:3e:e6:25:aa:02:c9:b5:
ed:6b:21:f5:43:a8:93:26:67:eb:7e:56:ae:79:82:
6f:ae:4f:0c:79:55:6e:aa:ea:a3:41:30:b3:67:b4:
39:70:f8:02:9f:18:e3:cb:fa:c5:c7:52:3e:b6:04:
de:2d:aa:ad:b6:4c:7b:1b:dd:19:ef:a5:a2:f1:40:
3c:2c:ae:45:6d:bb:cf:3b:b0:e1:82:ce:f0:b9:39:
56:0a:a0:e8:a3:32:a8:b6:3b:5f:01:f4:40:9b:1b:
a8:6b:6d:0b:47:18:e9:40:e1:64:ed:52:b8:09:8f:
83:7a:48:42:43:3f:d9:1f:10:d8:14:c6:a1:9b:e1:
f9:73:84:e5:ac:d0:8b:6e:80:64:d8:fa:ab:9d:65:
7b:76:a4:e2:01:93:97:34:1a:cb:c4:c3:2c:27:82:
f8:1d:ca:04:55:2a:e2:11:a8:66:3b:5f:da:30:b4:
ac:c0:25:89:86:31:27:d6:c2:73:40:8e:0b:fc:c8:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:6B:D5:67:5B:80:D0:3E:E0:B8:B5:E9:7A:9E:DF:1E:CB:31:28
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:46:68:b5:1d:9d:4e:3f:e6:47:84:64:66:35:cc:ec:80:70:
36:ef:58:b6:03:d7:ba:31:f3:08:10:a3:f8:ea:1a:69:f3:89:
42:12:08:d9:e5:25:4e:20:d7:2b:16:1b:76:46:02:19:13:40:
1f:06:83:cf:78:4e:0f:33:02:8f:09:ec:ba:91:68:99:fa:67:
99:fe:0e:c0:3b:1a:9a:9f:c9:b2:f1:8d:b5:31:0b:44:7a:d0:
90:7f:fa:ea:cd:34:2a:c3:67:ee:09:fb:ee:8d:0b:0c:73:b9:
8b:35:8e:3e:d5:5a:92:b9:1a:1f:55:98:82:a4:9f:91:d5:a5:
20:59:07:a9:f6:4f:c1:03:e0:7c:0b:20:05:97:64:73:f4:2e:
09:3b:ad:b3:f2:6e:79:0f:40:e4:bf:62:34:97:83:00:df:a2:
a2:bb:05:c6:21:3f:4a:c1:04:e8:3c:26:02:af:c4:52:68:74:
b9:32:f6:42:81:e5:86:af:82:c5:2e:fc:f5:fe:c6:03:5d:1b:
44:61:5c:2a:42:9b:b0:09:15:2a:4c:55:d0:2c:e9:77:da:7d:
e8:9c:4e:88:ec:bc:24:28:8c:d2:e7:75:7c:cb:7a:b0:e0:9f:
30:93:3b:ad:e2:26:13:0e:53:f9:64:e9:c2:1d:70:d4:51:f7:
61:ac:45:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGah08ZzadW8SdldtNVBz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwOTIyMDAwMDM4WhcNMjYwOTIzMDAwMDM4WjAzMTEwLwYDVQQD
EyhhYjM3NmJkNTY3NWI4MGQwM2VlMGI4YjVlOTdhOWVkZjFlY2IzMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PEQ29Wu5MsWpsbcUI24sTqKSgPv
70dPqE8RYqSzGkyt3nuYzzTASefZgDqOSJ4dcFUCWJNmlSHqV1pwJooKpsU/Wz7m
JaoCybXtayH1Q6iTJmfrflaueYJvrk8MeVVuquqjQTCzZ7Q5cPgCnxjjy/rFx1I+
tgTeLaqttkx7G90Z76Wi8UA8LK5FbbvPO7Dhgs7wuTlWCqDoozKotjtfAfRAmxuo
a20LRxjpQOFk7VK4CY+DekhCQz/ZHxDYFMahm+H5c4TlrNCLboBk2PqrnWV7dqTi
AZOXNBrLxMMsJ4L4HcoEVSriEahmO1/aMLSswCWJhjEn1sJzQI4L/MhuVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs3a9VnW4DQPuC4tel6nt8eyzEoMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUZotR2d
Tj/mR4RkZjXM7IBwNu9YtgPXujHzCBCj+OoaafOJQhII2eUlTiDXKxYbdkYCGRNA
HwaDz3hODzMCjwnsupFomfpnmf4OwDsamp/JsvGNtTELRHrQkH/66s00KsNn7gn7
7o0LDHO5izWOPtVakrkaH1WYgqSfkdWlIFkHqfZPwQPgfAsgBZdkc/QuCTuts/Ju
eQ9A5L9iNJeDAN+iorsFxiE/SsEE6DwmAq/EUmh0uTL2QoHlhq+CxS789f7GA10b
RGFcKkKbsAkVKkxV0Czpd9p96JxOiOy8JCiM0ud1fMt6sOCfMJM7reImEw5T+WTp
wh1w1FH3YaxFaw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:50 2026 by rpki-client