Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: NPCiP31/5sWhhh/UTaQ0rzDz2gJ7UIx0cIZ/MAC1DCQ=
Subject key identifier: 40:E9:72:E2:1D:39:C1:C7:08:0E:21:8F:1E:70:FE:B4:7E:4C:60:9E
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019D99D08064505EC6B27EFAD5905E4960A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:01:11 +0000
Manifest this update: Fri 17 Apr 2026 05:01:11 +0000
Manifest next update: Sat 18 Apr 2026 05:01:11 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: VnUFW49zYNA/r+MF5eW7NiVL/em5UDJMJatTlsNnD5A=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:80:64:50:5e:c6:b2:7e:fa:d5:90:5e:49:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Apr 17 05:01:11 2026 GMT
Not After : Apr 18 05:01:11 2026 GMT
Subject: CN=40e972e21d39c1c7080e218f1e70feb47e4c609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:61:4c:94:4c:07:b6:04:a8:ca:4f:fb:ab:
9f:45:0a:57:84:46:74:05:f1:69:45:49:a7:72:ac:
12:b2:64:bb:81:ea:88:36:a3:0a:74:cf:b3:51:b1:
fe:7e:2b:31:cd:45:b6:de:7a:68:00:4b:2c:e9:f0:
a0:0c:d4:4b:22:f8:cf:e4:57:b6:33:b8:e6:6b:cd:
b9:30:11:34:ac:9c:ce:0f:e6:b8:f6:8b:46:ea:2b:
e2:b6:e5:ee:55:53:a7:eb:80:f1:03:75:f1:a6:00:
43:98:e1:cd:ea:c6:30:cc:b5:a1:a2:98:36:81:4d:
3d:fc:38:aa:56:2d:4f:73:02:68:4b:43:57:a4:ec:
f7:95:77:f9:f3:92:00:2c:13:fd:8f:69:93:5d:24:
a9:e2:c4:7e:93:4b:fc:62:8a:77:0a:8d:9b:0e:0a:
da:03:b0:25:5d:25:dd:84:f7:c0:cb:49:d2:30:b8:
fd:82:68:65:6f:6f:98:2b:fe:b1:cf:dc:d6:4e:0a:
41:62:98:09:a6:b2:14:33:0e:e8:59:80:99:93:fa:
e5:9d:b7:df:f3:e4:f8:03:ea:34:39:1d:6c:fe:e4:
59:7d:ed:a5:05:9b:28:3c:0b:a6:6b:39:79:b1:23:
4d:a2:63:41:7c:c4:75:8e:b2:58:2d:7f:48:62:a9:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:72:E2:1D:39:C1:C7:08:0E:21:8F:1E:70:FE:B4:7E:4C:60:9E
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:10:93:c3:67:f6:a5:3c:93:55:92:87:ce:c6:a1:e4:da:41:
27:ea:db:93:e2:4b:b7:1a:e5:82:f8:fd:30:52:2c:93:8e:96:
19:7e:e4:d6:82:69:ba:78:7a:4d:40:00:e4:3b:34:d9:46:2a:
f1:60:50:a7:d0:2e:61:58:34:7a:12:e1:59:fb:9b:8c:99:66:
08:b7:92:e4:ed:01:07:64:0e:a0:8e:f2:b0:b5:8f:a4:44:8e:
03:f2:3a:62:6d:83:8a:fe:33:83:08:50:71:7c:7d:e3:93:e3:
1a:16:84:fa:09:4c:01:0f:f9:d1:72:18:43:b8:c8:03:4e:93:
dd:99:13:ad:93:14:d7:1d:e8:55:50:c2:3c:a3:a8:1e:35:93:
1e:34:12:da:8a:d6:62:7b:34:37:ff:05:05:b2:23:2f:83:90:
74:51:41:dc:fe:54:f9:38:eb:59:4c:cd:30:87:a2:c9:fc:13:
0b:e8:27:23:c3:91:93:d0:60:e4:e0:63:18:17:7e:2b:2c:c3:
c8:16:cd:16:14:5d:61:64:7e:60:26:eb:46:68:ce:b6:2d:67:
e3:a9:f1:ac:98:41:0d:7d:73:f8:6b:4d:43:a3:4b:de:23:5e:
73:22:0d:1c:e3:7b:83:7f:5d:0a:c8:06:79:06:2b:4a:a6:d5:
29:99:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:57 2026 by rpki-client