Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: 42xTU6Oc2/SnW3t568OPK10G3aZBqC1QIKJ86T5xEXY=
Subject key identifier: 70:DD:A5:A8:77:DF:6F:1A:44:9A:D8:7F:B5:76:4F:9A:C6:89:04:4F
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 01A0D07FE691DC681797484BE9C6735B827C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 0256
Signing time: Wed 23 Sep 2026 23:00:38 +0000
Manifest this update: Wed 23 Sep 2026 23:00:38 +0000
Manifest next update: Thu 24 Sep 2026 23:00:38 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: v/mJOIiJ7xadRkpvIIlx5OT3fJa+pJs4aaGX54dvL3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:e6:91:dc:68:17:97:48:4b:e9:c6:73:5b:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Sep 23 23:00:38 2026 GMT
Not After : Sep 24 23:00:38 2026 GMT
Subject: CN=70dda5a877df6f1a449ad87fb5764f9ac689044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:6b:cc:bd:0b:1b:ea:6a:25:58:66:c3:fd:
78:ce:49:10:69:6b:4f:3d:5c:44:0f:49:ff:1d:92:
e1:72:42:04:bd:8d:b4:c5:5b:96:2c:0e:98:9b:ca:
01:64:f7:5b:5b:da:1a:11:f4:1a:db:46:2c:ed:bf:
b5:a6:e9:3b:0f:22:b0:98:3c:51:77:ba:1d:08:25:
cf:78:55:ae:b7:0d:26:df:6a:3d:48:d2:75:71:b1:
7f:4e:d9:dd:e0:ed:98:00:93:51:62:c1:53:08:c2:
ac:85:c9:48:2a:bd:97:00:29:af:2b:42:de:71:52:
f7:b8:37:fc:99:b1:8d:47:e6:8a:6b:78:5d:c5:e2:
05:d8:0f:9f:be:a9:6e:b2:d5:17:1a:b1:f0:a7:80:
b0:59:8a:4e:2c:17:75:1d:5e:a5:22:bc:26:a5:6b:
73:e0:45:b4:87:b0:1e:9f:33:9a:9c:b4:53:00:48:
a1:a7:03:3f:cd:af:09:ab:a0:97:11:99:dd:1c:04:
ef:64:14:be:35:be:97:5a:e5:11:75:cc:ec:ab:47:
77:5e:90:ba:72:be:11:65:e5:d2:61:e5:1c:24:69:
42:e5:2e:f0:8b:84:be:bf:73:27:bf:67:48:6f:76:
2b:45:ea:dc:7f:04:e1:64:db:39:d5:17:a0:08:04:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:A5:A8:77:DF:6F:1A:44:9A:D8:7F:B5:76:4F:9A:C6:89:04:4F
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a5:45:e5:dc:11:57:91:43:97:ef:ba:38:65:9a:0e:13:fb:
5f:59:26:97:46:29:da:e5:eb:f5:6b:60:54:0c:5b:b4:7e:28:
be:3e:8c:ef:de:a1:c2:e8:c0:22:f1:f7:3e:f9:ed:99:01:64:
c5:e9:6f:91:47:12:d3:9d:ef:f3:a8:c9:ef:15:b9:64:65:2d:
52:13:d7:16:fa:60:a2:db:36:ec:d4:e6:7a:90:ca:de:3b:d2:
de:3b:41:4a:da:cd:3a:89:ce:60:34:31:bd:8c:cb:d9:4b:f9:
08:5d:5f:94:61:55:67:e2:bf:41:33:7a:98:f1:61:5a:42:02:
51:4f:0f:9c:da:1c:19:cb:2f:24:8b:e2:aa:d8:46:df:38:7e:
d1:97:67:de:eb:c6:07:d1:bb:14:cd:6e:a8:bc:d2:cc:9f:84:
db:88:1c:21:70:5e:b8:22:ff:12:46:9c:57:37:d7:60:52:d9:
9f:4e:22:af:48:e5:97:44:aa:28:a3:2e:bb:e8:c7:a3:58:55:
ab:0f:34:6f:5d:49:0a:cc:10:5e:63:d2:0b:99:ba:14:e5:85:
a2:a0:4a:39:bc:b3:88:0a:78:64:c5:78:fa:f8:bc:eb:c4:95:
37:22:e9:06:fe:3e:ec:77:20:90:ea:09:70:be:58:47:e3:58:
c2:97:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:04:12 2026 by rpki-client