Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: cBKvxrukyxD7BHaiXwNuPj7mAjcbC0k7AJjWv6R1l7I=
Subject key identifier: EC:62:8F:24:13:0D:F8:D5:9C:FD:35:E6:B6:34:21:53:87:AD:FB:8D
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01A0DFF394AAE93271B73D0385F42288A0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 23:01:17 +0000
Manifest this update: Sat 26 Sep 2026 23:01:17 +0000
Manifest next update: Sun 27 Sep 2026 23:01:17 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: Hk5p9LDDAza39KdMXWVplThgqnk+xFcwBP/7TDs3R88=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:94:aa:e9:32:71:b7:3d:03:85:f4:22:88:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Sep 26 23:01:17 2026 GMT
Not After : Sep 27 23:01:17 2026 GMT
Subject: CN=ec628f24130df8d59cfd35e6b634215387adfb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:37:5c:0b:97:9a:0e:4d:b2:89:c6:87:59:
67:0e:50:03:b7:34:c1:c4:86:81:f0:c4:95:12:02:
9e:89:de:5c:a7:30:c4:3c:7b:e8:6a:1d:86:56:ea:
b3:a6:8c:69:c4:ad:6f:a3:09:5b:86:48:b3:04:11:
ec:8c:f7:e9:fa:eb:d7:ef:f0:4e:51:25:5f:fe:a2:
2c:b8:54:57:21:69:10:6e:34:24:80:0f:2a:4d:d7:
7d:6e:38:bf:87:64:b0:f0:1f:ab:f4:31:8c:27:ba:
e5:09:54:a1:ed:1d:1d:28:af:c9:26:77:39:1d:76:
1d:01:a9:87:f5:58:bc:a2:f3:9e:5c:86:29:f6:b5:
e4:a0:2b:da:07:18:12:06:54:08:49:2a:40:e5:31:
61:07:74:19:12:71:26:8b:6a:be:fd:ae:23:cc:48:
60:1c:6a:de:25:cd:96:81:9d:9c:db:4a:bf:dc:34:
f2:6e:0e:f6:da:4c:94:6d:93:64:1d:72:5d:34:c0:
f7:d4:30:9e:67:b0:60:9d:86:c5:25:2b:48:56:63:
7d:db:60:c0:cf:35:64:1a:ca:91:00:68:2b:12:5e:
e7:5d:2d:6a:16:0f:e5:19:ba:c1:0e:da:c2:bb:b0:
4e:25:42:d5:2c:51:a3:d4:0d:67:04:20:04:73:f3:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:8F:24:13:0D:F8:D5:9C:FD:35:E6:B6:34:21:53:87:AD:FB:8D
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b5:5e:57:9d:d3:ae:68:a2:29:81:5d:50:37:73:e7:20:6f:
73:4b:be:b1:9e:e9:39:42:79:b4:dd:c7:c5:d9:8c:2e:86:99:
18:0c:0b:60:94:17:10:82:eb:4f:ba:1a:cc:12:8e:b1:cd:0a:
1f:7d:8c:90:3b:a4:7b:29:ed:e6:7e:e4:a3:88:4a:36:61:68:
29:da:f9:82:3b:ef:f2:08:eb:a2:a1:32:75:c6:dc:39:a4:ae:
d7:2b:24:2b:19:3c:63:64:01:71:17:4d:06:d4:55:e3:e2:1a:
cc:7d:98:ab:64:d9:9c:75:e7:e7:79:27:d4:a6:f4:cd:69:ff:
2c:5c:f9:4a:b8:34:49:be:58:c4:65:f5:b1:ab:09:ef:5f:2b:
49:96:4c:7d:94:41:7f:28:88:7c:db:4e:a2:7c:1b:21:56:84:
41:76:62:7a:ed:8f:76:a7:a7:fd:93:88:12:01:62:63:99:9b:
64:ce:ab:6a:34:d5:f5:25:7b:a5:5f:c1:a3:03:ee:ba:75:86:
bd:6a:df:fc:03:74:cc:bb:ec:1a:5e:94:d4:22:e6:58:57:55:
39:c8:30:16:64:81:17:8d:59:9f:19:9d:ee:5b:38:17:58:1a:
bf:50:75:75:2c:fd:9f:dd:23:10:ef:02:ee:2a:10:3c:9b:06:
de:bc:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:37:46 2026 by rpki-client