Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
File: okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft (raw, json)
Hash identifier: NrEHsS7OAMpbP360unrDChyWpLqJ9YbGfzE78eWLmfo=
Subject key identifier: 8F:50:EE:40:BD:FB:8F:07:FB:A0:8C:54:C3:BA:F2:17:8E:EF:80:55
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 019FAC76346AE4D4A1781AF37CDA79D3FFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
Manifest number: 048B
Signing time: Wed 29 Jul 2026 06:00:55 +0000
Manifest this update: Wed 29 Jul 2026 06:00:55 +0000
Manifest next update: Thu 30 Jul 2026 06:00:55 +0000
Files and hashes: 1: Cyd9epktZUP2NzDWt7kuBmj63qY.roa (hash: 4Hn7SVvllIET4/FJbhg9Vi4tqF9x0RkLIB5CUH+jolo=)
2: okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl (hash: zwHl/VV4hPByc77rQ93b2PrFT95snpYtxAeqkh8A0R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:34:6a:e4:d4:a1:78:1a:f3:7c:da:79:d3:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: Jul 29 06:00:55 2026 GMT
Not After : Jul 30 06:00:55 2026 GMT
Subject: CN=8f50ee40bdfb8f07fba08c54c3baf2178eef8055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:d8:bd:c9:98:d3:dc:6f:8a:3a:95:04:8e:
07:ae:b5:d8:65:ee:b7:8a:02:10:cb:3e:68:16:d3:
d5:ec:2a:78:33:d0:ee:cf:ed:8b:f9:07:72:ec:ae:
c1:79:82:d3:3b:89:6b:8e:34:ad:65:d3:92:5b:79:
03:c0:1a:07:29:b0:f5:6b:42:a9:05:59:25:6a:88:
21:ab:52:95:fc:7f:ba:ce:cc:e6:39:c8:c9:88:b8:
8a:aa:9b:59:68:37:cf:07:c1:35:52:a9:b3:65:5c:
a8:d2:4d:d2:61:ab:b7:ab:d1:db:b2:e5:7f:90:8c:
32:57:63:7d:a1:fb:2a:15:96:64:80:36:57:63:f1:
aa:b9:27:1c:16:b1:31:be:73:75:01:d3:93:08:73:
f6:30:3a:7b:d2:f3:97:35:84:1e:0b:fb:b3:d7:09:
86:62:f5:37:c5:36:b0:bf:65:49:37:22:04:fb:47:
a1:73:5c:c1:02:34:d6:94:f0:2f:22:47:0e:89:0d:
ba:74:ea:2e:aa:2f:47:61:5e:08:bf:97:20:6c:fc:
f5:a3:06:17:d5:a8:53:7c:ea:5a:b6:e6:33:9d:68:
82:c5:b8:97:d2:7b:70:c5:47:4b:c0:7f:ec:72:d2:
df:f4:a7:5d:8a:65:7f:ec:bc:a1:84:3f:bc:51:8c:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:EE:40:BD:FB:8F:07:FB:A0:8C:54:C3:BA:F2:17:8E:EF:80:55
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:3f:b9:ca:82:b1:77:76:39:c5:6d:4a:d7:72:89:bc:eb:69:
e5:12:1f:a8:af:06:45:9e:9f:24:46:60:92:6f:aa:84:85:7a:
35:1a:61:c7:08:c9:c4:78:7f:48:aa:7a:79:02:5d:8d:7a:e9:
20:ec:fa:ea:13:93:f0:8c:d4:73:03:f3:8e:ea:fb:70:3a:3d:
b7:7b:44:42:21:ef:63:b9:70:42:be:8f:45:2f:be:c2:0d:35:
df:2c:5a:c1:0d:d6:e1:2d:90:7f:5f:3f:69:ff:bd:51:f5:db:
c1:92:77:0a:b4:db:e0:2c:e2:aa:ab:2d:4b:01:45:28:31:c7:
5b:73:0a:98:8e:d3:44:43:fb:bc:0e:f3:3f:f4:f2:e1:c2:21:
5e:d2:75:45:b6:95:19:d3:67:7b:60:a2:e3:08:fd:b5:bd:8c:
0f:84:3e:31:1f:88:03:b2:74:4e:c5:b9:b2:a2:60:27:ba:b2:
7c:dd:40:5c:60:8c:87:f7:a6:81:17:37:d9:e8:04:20:72:be:
cc:5c:f7:bd:7a:10:17:0c:14:60:8d:be:45:0e:ff:9f:ae:b6:
1a:38:37:1b:c2:2c:45:80:9d:dc:fc:bb:59:85:1d:49:0f:10:
10:5c:16:4b:a9:b8:aa:b3:28:16:9b:99:46:06:47:47:e3:82:
1e:0a:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:55 2026 by rpki-client