Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: wGZF+IQ0ZYnVChDTRHCXrC17+kM35pgGHvYfiUCSuDg=
Subject key identifier: 3F:BC:A9:AA:8A:45:3C:79:36:6C:7F:84:F9:D9:48:EB:43:AB:EF:9F
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019EC149BDFB47D93479AA8A1BAEC07C1889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 14:01:35 +0000
Manifest this update: Sat 13 Jun 2026 14:01:35 +0000
Manifest next update: Sun 14 Jun 2026 14:01:35 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: 8nmtdSzpBvz2DYnE343uxjkKq8/ljt6eXitW0oNWjv8=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:bd:fb:47:d9:34:79:aa:8a:1b:ae:c0:7c:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jun 13 14:01:35 2026 GMT
Not After : Jun 14 14:01:35 2026 GMT
Subject: CN=3fbca9aa8a453c79366c7f84f9d948eb43abef9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:e3:e6:dd:d2:24:f5:7d:6d:9c:31:e1:c9:
92:5d:84:f6:1a:d1:2a:35:f1:32:54:75:d6:53:98:
ec:03:8f:ab:06:19:4b:01:07:a2:47:bd:72:20:27:
2e:dd:3e:f8:f2:c8:f4:62:65:95:2c:d2:84:02:d1:
fa:92:bb:c9:d0:b1:43:f2:ef:7f:6d:e3:e8:f2:94:
c0:c5:26:14:b9:e7:0c:eb:06:5b:9d:db:e2:a1:c7:
0c:f8:e3:1d:54:9f:04:46:8e:4b:1c:88:e2:52:04:
e8:e1:2a:74:ab:a6:9b:33:0c:a3:3d:4a:f5:2d:df:
b6:7a:ee:28:be:1e:ad:a1:8c:ad:ba:ff:68:1d:b2:
fd:60:6c:8a:6c:c5:7e:57:1a:44:18:03:13:6c:ed:
25:d4:48:6a:da:e5:2d:59:38:3d:90:9d:81:df:96:
8b:19:32:bf:26:2c:06:a9:ac:ca:80:0d:cd:5b:84:
ef:ae:6a:e4:78:92:8f:a6:de:52:cd:c0:0f:e3:32:
d0:d7:20:ff:bb:c8:71:f2:83:4d:33:58:75:68:28:
eb:87:a9:f7:21:5d:1b:a8:b6:d6:e8:87:19:43:7e:
54:80:7c:d2:ab:f1:f0:10:64:87:4e:5d:c3:9d:4e:
a1:dd:8b:4b:33:99:48:23:79:af:08:54:db:ee:6d:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:A9:AA:8A:45:3C:79:36:6C:7F:84:F9:D9:48:EB:43:AB:EF:9F
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c1:6f:c4:05:12:fc:2c:1d:76:53:23:05:0c:da:ae:bf:63:
8d:47:77:50:ac:59:e8:0d:1a:dc:c0:9a:dd:c5:48:92:18:57:
a2:70:7f:60:7f:c1:ff:86:6b:cd:4b:fb:22:99:be:78:4e:40:
2c:ef:d4:12:fa:af:73:bf:e2:42:77:5e:c6:24:29:6c:a5:3d:
60:52:63:96:25:53:28:62:e6:0f:82:1d:dc:fa:5b:c1:74:e6:
97:aa:19:90:0b:65:10:1f:90:64:8c:81:7b:b9:5c:16:bc:ca:
bb:4f:10:6c:f9:dc:62:7b:ba:68:08:6c:1a:62:6d:e9:ac:f8:
fd:0f:ae:06:63:53:de:6f:6b:e8:8d:fc:f2:97:50:32:64:34:
56:f4:a5:01:2e:29:98:98:a0:84:fb:b7:b7:09:7e:c3:81:c5:
39:cf:e1:93:6e:0c:4c:0f:04:01:73:83:d9:8c:6e:a5:75:59:
f0:9a:c7:2a:8b:95:7b:88:b8:99:60:80:90:78:fd:49:69:cc:
97:ff:cf:b5:6c:9d:23:16:c2:e4:c8:f6:38:c2:eb:f7:85:ac:
ac:b5:50:88:87:8b:82:3e:86:8a:91:01:f6:42:41:69:29:97:
2c:ef:83:53:a3:a1:46:4f:67:d8:8b:87:db:cd:57:e3:b5:de:
c6:26:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:08 2026 by rpki-client