Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: OOk3gr29j+PXHfRSjf0WlO5UaPDNHzu0H3M4R+UPlQM=
Subject key identifier: CA:E7:95:AB:67:05:DE:20:0E:06:82:2D:C7:70:04:B1:DB:73:97:30
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019CAC46EA39566135C17748AB75F06902E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: ebmjyApe1ohAv4hQd9c3Fn9Zqag9hu/l8aKsYFWujVA=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ea:39:56:61:35:c1:77:48:ab:75:f0:69:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=cae795ab6705de200e06822dc77004b1db739730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:bb:95:1b:0c:05:04:de:e8:98:3d:20:b7:
28:03:b2:4d:4f:e6:9d:7c:46:6b:6e:f9:e2:e9:53:
b1:83:28:f1:0e:4b:69:73:b9:4e:c0:48:57:f2:8a:
62:3a:66:82:9c:8d:87:31:f7:04:f5:2c:9d:0f:52:
e3:66:fb:17:18:22:56:54:b9:bf:b3:37:a5:b0:a2:
32:f7:60:57:d8:96:6a:6b:cf:74:7d:74:de:8f:c4:
bc:41:4e:34:f6:71:80:c6:6d:f5:dd:35:30:5d:a0:
ad:27:b3:63:65:d0:2b:14:1f:34:24:cb:5c:bb:0f:
c9:ca:a3:bf:c3:16:f8:cb:2b:b7:3b:b6:ae:d2:bb:
23:92:72:e9:f1:c5:dc:e9:61:ca:d3:23:dd:46:c9:
63:e9:00:58:db:71:b5:4f:c3:f8:c8:6b:b7:0d:44:
65:70:2b:a4:31:ad:15:37:5c:78:e2:5e:b6:15:98:
bc:21:ec:65:ef:55:f5:f0:a8:62:26:4e:51:20:d8:
c2:7e:38:03:e0:69:5b:6f:0b:b7:a0:f5:d0:a2:e3:
5d:cd:1e:fa:5e:0f:e8:b4:1d:80:66:cc:12:84:0b:
52:89:9b:7a:ee:10:33:c6:61:81:81:0f:72:ab:d8:
00:f6:a8:ed:ca:84:1e:b3:27:0e:31:51:f4:2b:cc:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:95:AB:67:05:DE:20:0E:06:82:2D:C7:70:04:B1:DB:73:97:30
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f7:86:d9:ec:05:08:f3:34:bf:1b:90:7f:6d:4e:79:5d:49:
63:10:eb:8d:aa:da:86:34:91:db:c0:6b:16:81:c3:a1:0d:85:
7a:bb:18:e5:06:d2:97:ce:73:21:f8:0e:73:c1:53:53:22:97:
54:51:68:e1:18:60:f0:84:16:c2:f6:07:fa:94:ae:02:84:c7:
4c:d5:32:35:c9:36:aa:c4:57:8d:dc:09:5b:c0:72:16:91:12:
de:10:ee:72:c1:24:3d:3f:a6:b7:f0:90:3a:e0:ae:1e:ab:82:
a0:94:97:d6:0a:6e:b5:32:49:77:2c:14:06:09:c2:29:31:24:
0b:5a:7a:2f:b4:62:e2:56:5a:4f:e5:96:07:ec:71:0e:7f:6e:
8e:a4:ff:e0:44:a7:62:7d:d8:4e:7f:12:22:80:c7:7b:cf:1f:
41:4a:e8:f0:b9:f4:f1:f2:3f:c6:c4:df:a0:47:42:d4:2b:00:
0c:a5:0b:11:07:ae:b4:7f:ac:26:55:b8:e9:5b:60:ee:ce:f6:
ca:c4:5c:01:7f:6a:23:15:52:6d:64:72:9e:70:66:6f:5e:2c:
7d:45:70:a8:22:cd:a3:44:2c:98:58:f1:3d:23:89:38:48:c4:
8d:fb:45:7c:72:83:3a:25:f7:70:7c:ec:4d:b3:17:f0:5c:de:
64:89:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:55 2026 by rpki-client