Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: oFKF+3M5nWogY6T2JRCpSu+GdZVosp7klvKqTgFlR3M=
Subject key identifier: BE:0C:78:BB:EC:88:5F:5C:46:9B:07:05:28:32:D0:5A:D7:10:4E:5A
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 019FAAF5B019FDE62E2772AAB1E70CB2F2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 01BE
Signing time: Tue 28 Jul 2026 23:00:55 +0000
Manifest this update: Tue 28 Jul 2026 23:00:55 +0000
Manifest next update: Wed 29 Jul 2026 23:00:55 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: kMMx680lLDaMJol30QnUgCVDYv7Ic4vMBadv2jZxzik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:b0:19:fd:e6:2e:27:72:aa:b1:e7:0c:b2:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Jul 28 23:00:55 2026 GMT
Not After : Jul 29 23:00:55 2026 GMT
Subject: CN=be0c78bbec885f5c469b07052832d05ad7104e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:a6:11:4d:5e:a9:2b:e5:62:4f:07:82:a8:
89:ac:b3:ff:21:1e:5a:7b:10:ad:c2:0b:bf:e8:96:
df:0e:e7:51:40:8e:d3:d1:4f:98:de:d8:d8:3c:6f:
0b:4e:d3:17:20:ed:88:57:06:0f:e0:9e:44:29:06:
cf:81:26:d5:a8:35:db:dc:d3:e7:10:43:2a:e6:c1:
9a:67:13:79:6c:cd:d4:e5:07:08:35:bb:a1:1a:c6:
1c:9a:24:f6:ae:49:1e:a4:3c:23:60:bb:6f:35:7f:
d8:b3:e5:3b:1f:15:e2:96:4d:3e:dd:ea:8f:49:a3:
b0:16:64:aa:ea:d0:26:a9:2c:20:f0:0c:ea:0f:9a:
94:cd:2e:66:c4:0d:bd:3c:c7:1c:06:d8:fa:38:c3:
83:04:71:85:00:71:ea:c4:8d:8e:94:3d:06:8b:ae:
c7:1d:04:0e:74:4e:55:68:fd:30:1b:40:96:7e:44:
14:2b:43:9d:7a:a7:07:fb:c2:63:12:42:90:29:9a:
c4:f2:c6:68:2a:ea:f7:4d:35:71:f9:a9:e6:32:67:
c9:6d:ba:e0:b0:32:85:24:c3:a4:5a:8b:8a:57:a1:
4e:aa:5b:17:62:0f:d1:34:5c:47:4a:8d:39:f1:a6:
64:b5:12:72:5b:da:81:13:c9:67:81:29:c6:e5:bf:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:78:BB:EC:88:5F:5C:46:9B:07:05:28:32:D0:5A:D7:10:4E:5A
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:4c:81:32:9a:be:ee:bc:21:ea:46:b8:9a:ef:e8:b1:f8:
84:ea:e1:9a:13:db:1c:d1:3f:f6:09:c8:35:76:75:75:b0:75:
10:0b:71:05:47:f7:43:cd:b6:5e:f3:b8:b6:07:38:d2:b4:81:
f1:63:f4:b3:21:76:e0:84:ae:22:99:2e:f7:eb:22:f7:63:af:
17:ac:fa:cc:8f:ff:3b:8a:44:86:25:95:c6:95:73:6d:1b:ca:
fb:2d:47:88:7a:80:ad:59:b6:f5:69:55:44:4c:75:34:43:01:
a5:6f:5c:26:53:64:2d:78:0e:10:4c:ea:28:9b:5b:9a:dc:69:
85:95:c4:04:ab:7e:e3:63:bc:50:5c:45:3c:e3:07:37:13:34:
53:d4:7d:ba:6e:52:1e:d9:51:1d:9f:92:dd:10:73:e7:47:a6:
f9:84:3c:81:db:64:2d:70:1b:a2:6a:03:27:a4:7c:1a:49:c9:
77:62:c7:ea:5e:4c:c2:1d:b7:ba:b8:be:86:05:98:ad:a6:92:
de:ed:d3:7c:fe:49:54:6a:27:4e:f5:32:f7:d4:bb:e2:49:31:
4d:9e:d3:87:b8:43:48:a0:50:52:f2:b9:95:ed:3f:14:b4:94:
a8:b6:49:2d:ae:5f:ae:78:30:05:d6:8a:c7:0f:80:53:b2:24:
71:1a:8e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9bAZ/eYuJ3KqsecMsvLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGZhZjYzNTIwZjdlZmY2YzkwODM0ODljOGI5NTQzZjVj
NDFlNmIwHhcNMjYwNzI4MjMwMDU1WhcNMjYwNzI5MjMwMDU1WjAzMTEwLwYDVQQD
EyhiZTBjNzhiYmVjODg1ZjVjNDY5YjA3MDUyODMyZDA1YWQ3MTA0ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B6mEU1eqSvlYk8HgqiJrLP/IR5a
exCtwgu/6JbfDudRQI7T0U+Y3tjYPG8LTtMXIO2IVwYP4J5EKQbPgSbVqDXb3NPn
EEMq5sGaZxN5bM3U5QcINbuhGsYcmiT2rkkepDwjYLtvNX/Ys+U7HxXilk0+3eqP
SaOwFmSq6tAmqSwg8AzqD5qUzS5mxA29PMccBtj6OMODBHGFAHHqxI2OlD0Gi67H
HQQOdE5VaP0wG0CWfkQUK0OdeqcH+8JjEkKQKZrE8sZoKur3TTVx+anmMmfJbbrg
sDKFJMOkWouKV6FOqlsXYg/RNFxHSo058aZktRJyW9qBE8lngSnG5b/vvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4MeLvsiF9cRpsHBSgy0FrXEE5aMB8GA1UdIwQY
MBaAFKJPr2NSD37/bJCDSJyLlUP1xB5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2stdlkxSVBmdjlza0lOSW5JdVZRX1hFSG1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMmM3MzUtYjNjOC00NTdhLWFiZmIt
NzExNzEyNjBkYjM0LzEvb2stdlkxSVBmdjlza0lOSW5JdVZRX1hFSG1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMmM3MzUtYjNjOC00NTdhLWFiZmItNzExNzEyNjBkYjM0
LzEvb2stdlkxSVBmdjlza0lOSW5JdVZRX1hFSG1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUBMgTKa
vu68IepGuJrv6LH4hOrhmhPbHNE/9gnINXZ1dbB1EAtxBUf3Q822XvO4tgc40rSB
8WP0syF24ISuIpku9+si92OvF6z6zI//O4pEhiWVxpVzbRvK+y1HiHqArVm29WlV
REx1NEMBpW9cJlNkLXgOEEzqKJtbmtxphZXEBKt+42O8UFxFPOMHNxM0U9R9um5S
HtlRHZ+S3RBz50em+YQ8gdtkLXAbomoDJ6R8GknJd2LH6l5Mwh23uri+hgWYraaS
3u3TfP5JVGonTvUy99S74kkxTZ7Th7hDSKBQUvK5le0/FLSUqLZJLa5frngwBdaK
xw+AU7IkcRqOIg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:44 2026 by rpki-client