Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: onmylGtsYFsN53j+qClm4JguXQJnIm0UhA7lFFKH8v8=
Subject key identifier: 2F:D4:BC:F6:6B:0E:45:8A:12:20:55:70:2F:FA:A3:A5:5C:3B:ED:8B
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019FAAF5D0B1EA5095B21146332B326A9691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 23:01:04 +0000
Manifest this update: Tue 28 Jul 2026 23:01:04 +0000
Manifest next update: Wed 29 Jul 2026 23:01:04 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: tWBZ93dikWrupa2AvbbwqTypEL6KgcDijW/a0UdQjBI=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d0:b1:ea:50:95:b2:11:46:33:2b:32:6a:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jul 28 23:01:04 2026 GMT
Not After : Jul 29 23:01:04 2026 GMT
Subject: CN=2fd4bcf66b0e458a122055702ffaa3a55c3bed8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:03:6e:e6:18:9b:0e:c2:a4:f4:0e:e4:e0:
d1:a9:2e:41:7d:a6:5a:6d:35:64:1e:42:0e:f3:fb:
a8:86:39:86:e8:6c:f7:b3:e4:fe:1a:b4:9d:a2:75:
36:3d:ed:51:d0:54:c9:46:3a:13:78:28:6b:4e:f3:
d4:e5:6c:37:d8:19:e7:6d:1f:30:47:5f:25:43:58:
ea:d8:32:93:27:a0:6a:a6:db:e0:d9:b0:69:74:43:
4d:81:bf:db:83:44:33:46:d6:b1:d2:a9:a5:67:d2:
bf:63:85:fb:9b:91:ef:ca:3f:8a:c7:5f:72:de:2c:
7b:04:a1:ce:c5:26:54:bf:0c:47:2d:21:d5:96:02:
b5:27:6b:4e:2f:93:f2:38:ae:d0:77:71:de:fe:76:
52:c8:ca:6e:da:5d:22:25:6e:e1:88:a1:bf:07:43:
94:be:7c:8b:49:63:92:13:5c:f4:26:d5:30:a8:e7:
5f:5c:ea:53:04:ce:55:45:a3:21:8b:2e:35:15:d2:
08:35:36:f8:c8:1b:87:33:c6:22:b7:d0:7f:2e:79:
40:07:07:ea:57:f3:53:3e:f9:50:fc:74:e7:b1:c9:
0c:b7:a8:b3:84:6c:49:e6:19:c8:03:e1:f9:14:60:
4a:1b:31:0a:23:aa:02:1b:f1:5c:9c:e4:14:ae:7e:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:BC:F6:6B:0E:45:8A:12:20:55:70:2F:FA:A3:A5:5C:3B:ED:8B
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f2:5d:2d:09:ef:77:39:b5:da:aa:d4:06:e3:c7:91:b5:10:
1c:5b:19:1e:a6:b3:dc:60:0a:82:5b:e5:d0:9c:05:f4:5e:42:
ce:df:ec:84:e0:83:29:47:85:ff:b5:e2:22:a4:56:d8:e2:b2:
27:47:a5:60:29:38:f9:e4:01:c5:22:01:08:fa:4e:5e:c7:6a:
f7:d5:ab:96:1d:2b:61:08:ab:07:6b:bc:74:01:cb:bc:ba:ae:
6f:ee:74:d7:cc:86:3e:ae:63:b0:13:88:3e:08:1d:73:2c:cc:
36:ad:85:b8:85:cd:cd:5e:9b:08:5b:54:a8:99:80:80:ab:ba:
a4:d0:7f:1a:8a:24:68:c3:18:ee:9d:27:30:78:1b:a1:0a:95:
48:11:f3:c9:d4:a7:fc:f4:53:75:19:d1:67:e6:ac:d7:d0:fb:
15:fd:3a:99:0e:c2:cc:2f:d6:19:d6:1f:42:16:53:b1:1d:80:
7f:7c:68:02:2a:2b:11:47:99:53:a7:ea:5c:3b:39:29:7a:7d:
ff:35:83:82:aa:72:a8:ca:da:df:86:ff:ba:ac:10:1d:2b:40:
23:aa:c8:13:07:88:ed:ef:49:51:b3:da:c1:b1:18:58:e0:04:
d6:dd:8c:3f:1a:d4:c7:a9:b4:5b:f6:21:18:92:e5:df:e2:4e:
52:b2:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:30 2026 by rpki-client