Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 3nHwckicz07GnOHnkV74p31/PTGCmjzufepAis6m7hc=
Subject key identifier: 72:33:0E:D1:0E:D9:BE:C4:0A:B3:E6:5D:0A:F1:96:C4:7E:52:19:52
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019D9BBF1369A7EA09D775DA567F44191368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:01:23 +0000
Manifest this update: Fri 17 Apr 2026 14:01:23 +0000
Manifest next update: Sat 18 Apr 2026 14:01:23 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: gxv+QhNJA9QX8D2wa/9FbtCctDycKgsKEMq179+/x2g=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:13:69:a7:ea:09:d7:75:da:56:7f:44:19:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Apr 17 14:01:23 2026 GMT
Not After : Apr 18 14:01:23 2026 GMT
Subject: CN=72330ed10ed9bec40ab3e65d0af196c47e521952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:85:3b:c3:ab:f1:3f:7b:1b:39:70:d5:05:
87:1f:57:3c:44:b2:5b:62:49:0d:ea:c8:df:81:37:
a8:d4:87:2a:c8:4a:9e:80:1c:70:39:93:6f:ec:bb:
74:fe:49:08:a1:7a:8a:4e:3e:cc:9f:45:29:24:81:
1d:7a:eb:a7:98:c6:28:e2:e8:dd:59:0b:86:85:23:
fe:43:66:7d:05:9e:c5:f7:3b:e6:30:09:42:fc:81:
0f:88:6a:61:89:68:46:28:af:4e:5f:fd:cb:26:3f:
a5:e5:12:bb:a8:bf:e5:b9:87:42:ad:0a:34:7f:17:
12:1c:c9:d9:dd:93:bb:72:c2:04:d2:61:f1:1c:28:
06:55:a2:aa:36:f8:fd:d1:9e:b1:9a:2f:38:06:95:
11:e8:80:d1:f7:c2:6d:9f:97:53:f6:71:b5:b4:d3:
fc:05:d1:16:01:f9:70:4a:ae:f1:cb:3b:e1:9d:9d:
1a:92:d9:79:9a:c6:8c:f6:d0:bf:33:f5:4e:da:2e:
60:6d:49:95:06:a1:60:1b:bd:92:6f:a4:d1:b3:e5:
de:5c:a6:df:57:3f:c9:0d:00:f8:27:78:0a:64:92:
3d:ba:08:08:10:c7:f0:5b:62:44:a5:fa:f3:77:b1:
6e:04:73:53:c8:b6:fa:81:1e:c9:99:93:8d:8c:55:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:0E:D1:0E:D9:BE:C4:0A:B3:E6:5D:0A:F1:96:C4:7E:52:19:52
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7f:57:be:5a:8b:e4:cd:10:09:c6:92:d7:7b:40:3e:72:1d:
e8:97:7a:65:9a:b7:6b:f1:65:fe:7d:21:52:37:95:93:82:54:
ea:e2:56:0e:7a:ad:77:43:2f:e6:a7:46:f2:ee:94:bf:e6:29:
73:92:1e:76:90:8b:2e:a3:c1:97:2c:2d:0f:4e:70:f3:c0:01:
1a:a7:eb:3b:5f:be:74:2b:45:04:8d:9f:f4:8a:7e:80:b9:aa:
92:bd:4d:6f:49:cf:d5:a6:d6:6f:4f:58:18:fc:30:ee:0f:64:
6e:08:96:bd:2a:ab:af:9e:a0:6f:48:18:9a:e0:a6:83:1f:76:
3d:aa:95:c1:42:cd:43:fb:fa:0a:e6:16:75:89:7d:ca:93:09:
5c:e4:ad:ba:f1:37:bb:f5:62:d8:9c:32:80:0e:17:c3:7a:e5:
a4:45:de:c3:6f:11:6b:ed:bd:fd:00:b2:a1:1b:db:c7:3e:ea:
f6:10:a9:bb:4c:a9:27:15:6c:b0:1f:1c:61:8d:d4:69:cf:67:
f1:a3:fc:f8:a1:c8:a0:8a:6a:7a:51:8b:0b:d2:71:b0:93:55:
51:b8:25:f2:87:90:0e:81:1d:dc:bd:df:11:9c:48:fd:35:6f:
29:f7:33:94:bb:0f:fc:a5:21:44:70:e7:61:93:cb:ba:81:ab:
45:86:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:24 2026 by rpki-client