Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: NlnwfHYRqzTxXG/PufXT8JGVTAYuOpZd27VmNshtKZw=
Subject key identifier: 54:11:76:A5:08:1F:41:74:02:AB:04:73:E3:12:2D:76:96:98:57:A0
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01A0C8C6E9F09B0DD69FD2C2203FA448A83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 11:01:14 +0000
Manifest this update: Tue 22 Sep 2026 11:01:14 +0000
Manifest next update: Wed 23 Sep 2026 11:01:14 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: trIPXyZI1isDKRJ7XVnbVghd+eY0cVTSgVj3E0RZlbY=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:e9:f0:9b:0d:d6:9f:d2:c2:20:3f:a4:48:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Sep 22 11:01:14 2026 GMT
Not After : Sep 23 11:01:14 2026 GMT
Subject: CN=541176a5081f417402ab0473e3122d76969857a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:ce:fa:03:ba:a7:ad:f0:af:84:9d:9a:80:
ee:5b:81:b0:56:ff:ec:bf:b9:c1:5d:ad:3d:cd:1f:
10:47:1b:f5:61:dd:a2:2a:87:20:15:8e:8c:22:20:
b6:43:43:85:9c:ca:61:1a:4b:e2:b5:e0:ae:63:51:
11:19:d9:0b:04:18:79:c1:c2:92:9b:c1:37:74:60:
18:35:2e:17:6e:80:01:1d:2d:b2:08:71:b3:e9:07:
45:3c:df:78:42:e8:1f:bf:f3:7e:9b:c4:0f:df:6d:
f9:8a:3f:b1:8f:a3:38:fc:63:87:bf:c0:81:7e:90:
c6:fd:b9:0b:22:2f:f9:6f:6b:3e:95:ed:c3:4a:29:
55:91:07:83:44:10:c5:9f:f7:fb:95:f9:c3:86:8f:
69:40:51:e5:3d:7b:bd:6d:20:4b:e5:b3:70:db:2e:
82:cb:9e:9a:f2:e3:75:38:94:c7:85:c7:8e:87:80:
9c:2d:b4:83:39:83:e3:4e:52:b4:7c:8d:ec:35:4c:
a5:9b:e2:c3:f9:72:0c:4a:6a:24:d3:68:ab:f0:bf:
c7:ae:6d:c3:7d:f7:d3:09:d6:6f:57:8d:c5:0d:68:
e6:d7:7b:0c:fd:34:2d:e9:fa:e8:28:86:46:3b:23:
14:15:38:55:93:38:72:af:90:f0:19:c9:c3:ff:38:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:11:76:A5:08:1F:41:74:02:AB:04:73:E3:12:2D:76:96:98:57:A0
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:09:61:3c:36:b9:e2:55:87:08:1c:0f:ec:30:ab:78:48:d6:
57:a1:06:5b:65:ae:3e:9c:cf:04:e7:46:38:9c:1d:d0:cd:14:
d6:f4:3e:a2:a1:ca:9d:96:8b:27:9d:60:8b:91:3c:e4:ca:35:
8f:ef:4d:35:ee:b0:01:15:89:a0:10:3b:a7:75:83:c2:35:90:
f0:6a:1c:a0:cd:9e:29:43:75:9b:62:cf:05:f0:d6:bb:3f:87:
b3:42:b1:45:60:8c:4d:b2:fb:94:41:8a:57:1d:99:28:b6:58:
0a:1d:28:ea:5b:dd:c6:0b:32:57:83:c4:cc:f9:da:4b:9e:d9:
50:60:8d:65:82:ae:07:47:01:1e:e3:c9:a8:70:0e:52:a8:b4:
1b:8b:70:19:e7:80:98:3c:08:31:5e:3c:2f:3d:b8:62:3d:c9:
c8:80:25:11:b5:80:5b:d8:b8:97:a5:00:a8:7e:7e:77:94:90:
40:bb:21:21:dd:d3:06:f1:51:ef:1f:0f:fe:39:ef:13:6d:b5:
22:c0:ca:a2:fc:3a:35:c8:dc:d1:da:79:b4:51:ad:2d:f6:53:
78:55:ce:4c:56:17:f1:8f:35:7a:1b:7d:99:7c:55:db:6e:ad:
ca:1b:8e:f1:19:12:40:18:f1:d3:23:d4:f1:01:fe:88:e0:f5:
20:85:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:27:25 2026 by rpki-client