Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: dzzUEfiHKxVkNWh9uIO0EjeHP/8UMdZMI+d9NGzN468=
Subject key identifier: 61:12:87:D4:24:06:36:46:26:05:A7:7A:05:1B:C3:0E:0E:2F:8E:A9
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0C47BA836747197A747981181670D8173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1A83
Signing time: Mon 21 Sep 2026 15:00:33 +0000
Manifest this update: Mon 21 Sep 2026 15:00:33 +0000
Manifest next update: Tue 22 Sep 2026 15:00:33 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa (hash: he75YWP6CSnWhVc2/UtLhyj8J3gpC2sQruvnzJGb/hw=)
3: 7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa (hash: 7Kjf7QXiHqRMdhYCby7XVrJVdqbbCVJGhej/irKWyFQ=)
4: CC-E9kDBg6k16GvFdXpt0v0N9c0.roa (hash: XoR9Xbt76Dj+y6aqOpHi+5O2JWpDsd3FUW+Ej0CkOKs=)
5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=)
6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: KoYjXMTkS3gYRBTFShDqYjqo3uvh32LUx4Y623kXbZ0=)
7: ks4rcCnYGbAZseomOd2Yfr0zDxU.roa (hash: jhqTfs4Y7TCVLQDf9QvU6rDDBDK9avjiClsJAwUoI4s=)
8: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=)
9: v7RvCMDdWErq2gHhPzdgbrJTsQc.roa (hash: E7ugE/1PAPmkxbHvkS+3vDDe3Al8BCMsYCFX6+imnqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:a8:36:74:71:97:a7:47:98:11:81:67:0d:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 21 15:00:33 2026 GMT
Not After : Sep 22 15:00:33 2026 GMT
Subject: CN=611287d4240636462605a77a051bc30e0e2f8ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:e9:2e:48:c4:e6:f6:d0:a6:19:6f:1c:55:
ca:de:30:c4:30:d1:e6:9e:13:57:25:49:55:be:8b:
b3:47:ed:1a:b1:0e:b6:41:ed:8f:3b:49:02:0e:76:
f6:b4:a1:d0:1f:ba:04:50:d4:9b:53:e8:dc:62:9b:
9f:e6:b9:87:e4:ec:ea:07:d1:77:cc:fd:7f:bb:a3:
eb:fd:a2:d9:6c:75:79:96:89:45:1a:44:a9:45:84:
eb:58:87:ab:00:d4:64:cb:d9:60:f5:4e:55:21:0e:
2e:a7:70:ee:da:41:d7:c2:d0:81:07:a1:49:94:d0:
8c:70:34:cc:c9:c1:71:a5:e8:35:b1:7f:00:09:85:
d8:2e:b6:f1:f4:f7:48:50:16:d8:58:02:46:0c:89:
fb:2a:61:f0:b2:bc:52:d1:0a:62:e1:9a:f0:98:38:
47:41:cb:13:22:39:03:e9:21:99:01:e6:b0:fc:b5:
5b:d8:a0:cd:4b:c1:17:e1:74:e2:57:4a:9f:ea:29:
c5:9b:6f:b4:93:80:50:db:fe:ae:eb:bf:8d:28:2c:
14:19:1e:52:37:28:6c:65:12:58:86:9c:ab:0c:5f:
24:7c:55:90:74:21:8d:7d:d2:ea:79:83:2d:ea:b2:
d2:ca:5a:15:d2:c7:ca:11:c4:05:5d:ca:fb:9a:21:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:87:D4:24:06:36:46:26:05:A7:7A:05:1B:C3:0E:0E:2F:8E:A9
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e0:e7:63:37:0f:f0:4c:4b:94:95:a6:4f:51:d8:ea:d8:bd:
a7:dc:2f:cd:ce:d0:53:e5:35:a4:51:a3:63:7b:fe:6b:8e:0a:
de:1c:b8:62:38:cf:26:6f:d1:da:87:3d:58:83:51:b7:64:80:
8e:97:45:68:6d:87:6f:bf:29:f7:dd:99:70:8a:59:5e:49:0b:
52:95:ec:20:af:ee:09:09:61:d3:a2:ab:c5:b1:bf:6c:48:66:
6c:09:a6:e1:7b:ce:7d:b3:80:6d:22:22:ac:e0:eb:b4:00:09:
1d:f1:d2:d5:94:e0:2f:37:cf:a2:e0:f7:d0:d8:13:a1:93:f7:
c2:44:5b:67:b3:7d:01:74:61:06:2c:0b:23:30:7c:4a:69:45:
78:12:a0:36:bf:d5:6e:32:2f:73:2a:c4:86:d4:f6:8a:28:30:
b7:0a:ce:3e:54:95:e1:55:59:5a:aa:98:cc:3f:c7:a7:80:45:
ad:7c:db:11:c6:e9:59:77:51:5e:6e:d8:4f:d2:ae:b4:92:34:
53:9f:97:da:bd:3f:ed:31:6f:3f:05:ae:2e:f1:59:c7:5b:c2:
fc:9f:68:99:66:6d:b5:8c:9c:cd:07:14:72:3e:1d:96:01:50:
ca:4c:77:5e:5b:86:cc:c2:be:b8:a4:1f:25:e5:5e:1d:c4:77:
9c:07:86:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe6g2dHGXp0eYEYFnDYFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwOTIxMTUwMDMzWhcNMjYwOTIyMTUwMDMzWjAzMTEwLwYDVQQD
Eyg2MTEyODdkNDI0MDYzNjQ2MjYwNWE3N2EwNTFiYzMwZTBlMmY4ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPpLkjE5vbQphlvHFXK3jDEMNHm
nhNXJUlVvouzR+0asQ62Qe2PO0kCDnb2tKHQH7oEUNSbU+jcYpuf5rmH5OzqB9F3
zP1/u6Pr/aLZbHV5lolFGkSpRYTrWIerANRky9lg9U5VIQ4up3Du2kHXwtCBB6FJ
lNCMcDTMycFxpeg1sX8ACYXYLrbx9PdIUBbYWAJGDIn7KmHwsrxS0Qpi4ZrwmDhH
QcsTIjkD6SGZAeaw/LVb2KDNS8EX4XTiV0qf6inFm2+0k4BQ2/6u67+NKCwUGR5S
NyhsZRJYhpyrDF8kfFWQdCGNfdLqeYMt6rLSyloV0sfKEcQFXcr7miF4ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGESh9QkBjZGJgWnegUbww4OL46pMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeDnYzcP
8ExLlJWmT1HY6ti9p9wvzc7QU+U1pFGjY3v+a44K3hy4YjjPJm/R2oc9WINRt2SA
jpdFaG2Hb78p992ZcIpZXkkLUpXsIK/uCQlh06KrxbG/bEhmbAmm4XvOfbOAbSIi
rODrtAAJHfHS1ZTgLzfPouD30NgToZP3wkRbZ7N9AXRhBiwLIzB8SmlFeBKgNr/V
bjIvcyrEhtT2iigwtwrOPlSV4VVZWqqYzD/Hp4BFrXzbEcbpWXdRXm7YT9KutJI0
U5+X2r0/7TFvPwWuLvFZx1vC/J9omWZttYyczQcUcj4dlgFQykx3XluGzMK+uKQf
JeVeHcR3nAeGGA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:23:10 2026 by rpki-client