Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: KhsIBsd0Lohh+dbHgA12YCqe14JiabNINHRHYEnzRxQ=
Subject key identifier: EE:80:DA:99:DC:73:AD:24:AF:94:3C:74:B6:AD:87:6A:76:4E:C4:31
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019CAC46CE5CA198A26367975553D6B7731D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: xZGXfd79rRfZKcTY1SC0u2lsVhm9e+FeavSkgKdIZYE=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ce:5c:a1:98:a2:63:67:97:55:53:d6:b7:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=ee80da99dc73ad24af943c74b6ad876a764ec431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:a5:36:03:ea:3d:88:a3:a5:20:d9:ed:db:
f2:9d:d8:c5:67:9e:fb:14:f5:6f:75:a1:3b:4d:86:
66:37:78:79:01:a2:e6:25:25:de:87:c2:06:dc:da:
5f:08:5c:a4:b3:07:ec:61:cf:18:ab:9a:af:d5:85:
cc:b5:ca:bc:dd:56:bf:57:4a:47:c4:1a:4d:9b:24:
90:16:39:3e:30:de:e9:2a:0e:5d:f3:fa:ae:c2:04:
1b:4e:a7:31:8f:f0:59:49:02:fc:8c:f2:a9:64:f5:
da:f8:9e:85:50:d3:25:88:69:1e:26:5d:a9:47:78:
65:97:c8:81:03:2e:dc:ca:7e:22:5f:8d:c4:89:fe:
ed:47:30:1f:fe:c6:32:42:92:d6:39:d8:55:21:1d:
d0:06:5c:4b:fe:e8:e4:9a:ef:f8:25:84:08:63:77:
16:d5:d9:d8:e8:c1:79:00:46:e6:98:eb:d0:66:de:
1f:97:e8:d5:9c:c2:5c:68:bf:81:41:bb:00:7e:00:
95:56:0d:de:99:5c:4d:7f:92:9b:4b:71:c4:d4:a8:
ef:d6:21:6a:f8:0c:77:42:26:b7:96:a0:8b:78:23:
27:ae:7e:17:b9:52:fe:89:b8:a3:d0:fe:d1:ed:e8:
30:c8:56:00:b8:10:42:84:02:de:13:0c:ff:46:9e:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:80:DA:99:DC:73:AD:24:AF:94:3C:74:B6:AD:87:6A:76:4E:C4:31
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:96:80:26:65:da:01:e0:ea:73:0f:ee:8e:c0:c1:1a:7a:6b:
32:b9:93:bd:c6:b3:94:4f:4c:68:b3:2e:32:06:cd:17:15:fc:
1c:f5:f0:bc:76:68:50:79:b2:7b:a8:ae:77:fb:b1:1e:60:52:
c7:b4:cf:dd:86:17:ea:bc:cb:e8:bb:3f:85:9f:d7:76:4e:5b:
5f:03:2b:92:ab:82:10:ed:76:bd:ab:53:46:1c:05:91:42:17:
ad:5e:06:5f:09:28:5d:d9:7d:73:a7:94:a3:dd:37:e4:bf:c1:
60:b8:e6:5c:10:bd:17:34:6c:84:31:44:bc:92:23:9a:f3:1b:
fa:43:0b:98:a5:97:bc:38:37:d8:89:9b:f5:09:62:d9:ce:ab:
26:cd:9f:23:a4:73:c8:07:67:69:d5:b4:66:6e:13:62:08:4f:
c7:23:a4:3e:eb:d0:a4:cd:eb:a5:fd:71:e2:b0:de:d4:77:01:
2a:e1:53:ca:04:fd:26:e0:97:75:67:76:31:a3:e7:e5:20:67:
2c:bd:21:bf:b6:f8:9c:de:b3:68:10:a8:21:ae:da:a2:d3:dc:
ef:e1:7c:a3:ac:66:dc:ab:17:bc:b1:61:26:71:4d:10:3c:a8:
8a:1b:27:06:28:7c:af:0d:a5:0d:5f:94:aa:76:b2:a2:8e:3b:
09:93:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:26 2026 by rpki-client