Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: zqRx5EwCj61wmurytHVM7/qkWVSfJjHdiyfgL6X90jk=
Subject key identifier: 5C:2D:FA:96:FE:E3:5D:CD:1B:CB:BA:E0:02:15:88:33:DA:ED:6F:62
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019FAAF52FA2B105E1B19B3D857E8679EDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:00:22 +0000
Manifest this update: Tue 28 Jul 2026 23:00:22 +0000
Manifest next update: Wed 29 Jul 2026 23:00:22 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: BkHX+XmyB8hMUTAf7Y/r6NTmG8bqKd0LGw5wrs0lLcw=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2f:a2:b1:05:e1:b1:9b:3d:85:7e:86:79:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jul 28 23:00:22 2026 GMT
Not After : Jul 29 23:00:22 2026 GMT
Subject: CN=5c2dfa96fee35dcd1bcbbae002158833daed6f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:b6:73:71:97:75:41:de:f8:3b:8e:e8:60:
81:b5:27:2d:d6:78:ec:63:ec:8e:44:f3:7d:1b:09:
cd:6e:7d:75:fb:c1:46:2e:b6:30:11:38:1a:71:fc:
32:4a:17:8a:3c:12:f0:41:98:32:97:0e:1d:98:c8:
22:f9:65:d0:9b:d3:77:ca:aa:d0:82:04:57:d1:fe:
cb:e8:38:82:25:ec:41:b0:ee:2e:1c:95:b9:44:fc:
5b:48:ca:69:a1:ec:74:24:d0:74:bc:96:11:af:3f:
95:1d:b5:18:ce:a7:f9:81:e0:1b:94:0b:2e:a1:58:
2a:f7:67:03:91:44:b5:e8:7e:aa:f3:c5:fd:83:ce:
36:55:7f:ce:e3:35:07:1b:f6:b2:d1:5f:38:56:90:
7f:a5:b7:63:b5:dc:2a:b5:66:19:6a:71:a0:2e:f1:
2e:12:7f:70:d0:39:4b:3c:4c:21:7b:d0:57:6f:16:
50:8b:ff:1c:fe:36:74:25:71:46:4f:76:8d:22:fa:
28:4e:d6:80:65:91:f4:09:d4:1c:2d:4d:b8:59:cd:
7f:be:3a:ab:ee:af:dd:b7:61:6e:94:d4:1b:a3:cd:
e8:34:37:85:08:f4:43:49:e5:49:78:3c:e9:6b:10:
cc:2b:d9:8f:10:97:78:cc:a0:ed:74:fb:80:0d:22:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:FA:96:FE:E3:5D:CD:1B:CB:BA:E0:02:15:88:33:DA:ED:6F:62
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:bd:a8:d7:17:f1:9b:c8:6a:d3:10:09:cb:01:b1:2b:26:
5c:af:59:ce:50:b2:1f:6c:9d:35:ee:7b:e2:4b:7a:6f:bf:8a:
e8:d5:e0:b5:73:5c:2c:e6:2b:7b:71:91:86:84:b7:01:ed:59:
14:2e:cd:0f:f4:84:52:d6:7d:ef:a6:ec:a5:e7:47:30:96:13:
25:b2:14:21:99:07:08:dd:b1:aa:0a:2c:96:69:23:42:09:12:
84:88:4c:65:ea:a0:d5:f8:fb:fa:d7:75:ff:7b:77:c9:c1:5d:
8a:10:29:7b:e0:f1:45:91:11:c2:ae:b1:38:e5:88:00:eb:18:
15:ec:9d:92:29:05:c6:61:93:d8:6f:fd:2f:72:a6:7f:30:f3:
70:fc:a8:65:36:27:f2:5a:93:01:57:9c:9f:a5:85:cb:c7:92:
5f:97:0b:72:05:80:31:5c:63:04:0c:1d:9e:ee:77:f9:4e:b4:
53:d5:53:28:b9:d6:e2:53:a2:ae:be:82:50:27:4d:b8:ef:28:
c0:00:f9:d0:85:c1:84:19:cb:47:b6:4e:b1:aa:e0:81:39:14:
b0:28:8f:20:cd:d4:7d:2f:74:8a:1b:46:43:d0:78:e2:1a:1e:
a0:4c:a4:81:ed:4d:05:7a:21:3f:8d:1c:ce:7e:e5:bf:85:b2:
59:1a:1b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9S+isQXhsZs9hX6Gee28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk
ODI0MGIwHhcNMjYwNzI4MjMwMDIyWhcNMjYwNzI5MjMwMDIyWjAzMTEwLwYDVQQD
Eyg1YzJkZmE5NmZlZTM1ZGNkMWJjYmJhZTAwMjE1ODgzM2RhZWQ2ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lS2c3GXdUHe+DuO6GCBtSct1njs
Y+yORPN9GwnNbn11+8FGLrYwETgacfwySheKPBLwQZgylw4dmMgi+WXQm9N3yqrQ
ggRX0f7L6DiCJexBsO4uHJW5RPxbSMppoex0JNB0vJYRrz+VHbUYzqf5geAblAsu
oVgq92cDkUS16H6q88X9g842VX/O4zUHG/ay0V84VpB/pbdjtdwqtWYZanGgLvEu
En9w0DlLPEwhe9BXbxZQi/8c/jZ0JXFGT3aNIvooTtaAZZH0CdQcLU24Wc1/vjqr
7q/dt2FulNQbo83oNDeFCPRDSeVJeDzpaxDMK9mPEJd4zKDtdPuADSK4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwt+pb+413NG8u64AIViDPa7W9iMB8GA1UdIwQY
MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt
MWQ3MDNiNDk2NjM0LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0
LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARU29qNcX
8ZvIatMQCcsBsSsmXK9ZzlCyH2ydNe574kt6b7+K6NXgtXNcLOYre3GRhoS3Ae1Z
FC7ND/SEUtZ976bspedHMJYTJbIUIZkHCN2xqgoslmkjQgkShIhMZeqg1fj7+td1
/3t3ycFdihApe+DxRZERwq6xOOWIAOsYFeydkikFxmGT2G/9L3KmfzDzcPyoZTYn
8lqTAVecn6WFy8eSX5cLcgWAMVxjBAwdnu53+U60U9VTKLnW4lOirr6CUCdNuO8o
wAD50IXBhBnLR7ZOsarggTkUsCiPIM3UfS90ihtGQ9B44hoeoEykge1NBXohP40c
zn7lv4WyWRobrg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:11 2026 by rpki-client