Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: f+iyqEbuOPgOL/rNnVi/EStMpmxNfLsT5jrqVVKbiXQ=
Subject key identifier: 57:20:39:86:AF:FE:7C:40:9C:BC:34:78:EA:24:23:78:C4:99:AC:7B
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019EC148AE165D969A3F6C07989E824761D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 14:00:26 +0000
Manifest this update: Sat 13 Jun 2026 14:00:26 +0000
Manifest next update: Sun 14 Jun 2026 14:00:26 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: 1KDhSbeyE6qYQ2LS/315V6H4uLKkM3JEFEhu73b5Yrc=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ae:16:5d:96:9a:3f:6c:07:98:9e:82:47:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jun 13 14:00:26 2026 GMT
Not After : Jun 14 14:00:26 2026 GMT
Subject: CN=57203986affe7c409cbc3478ea242378c499ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:57:a9:21:51:59:d7:9c:e7:ed:44:37:3d:
95:f7:34:f1:c9:83:b6:d0:b3:8e:16:01:bf:d5:a6:
5e:dd:e9:58:7d:d3:08:b4:81:4f:32:e9:ce:98:5a:
5e:25:f2:7d:13:26:8c:49:36:a3:6c:e9:63:1d:57:
e5:1e:7b:ee:0a:84:f4:9a:9a:14:c6:61:d0:7b:80:
2c:59:b7:af:f2:57:6c:22:f7:41:52:fc:72:ce:52:
f2:3e:91:18:9d:9e:01:53:81:9a:2c:7e:ec:ea:7f:
37:23:94:e8:6b:2c:ae:17:6d:d4:c1:8f:8a:15:6a:
7a:df:ca:a6:8c:c2:eb:15:b7:33:35:54:bf:3e:93:
de:4a:d2:83:8b:37:db:40:29:26:63:93:05:f0:0a:
b2:b4:be:9d:0a:1e:49:08:14:26:77:67:cd:84:88:
ed:05:5d:a6:05:75:04:6d:11:c6:d3:96:f8:1c:21:
f7:25:31:dd:02:db:38:b8:e7:16:2b:d5:34:c7:06:
49:dc:21:a9:e9:e5:ec:df:a9:04:fb:00:02:02:09:
be:69:31:5d:71:f0:21:6c:ca:94:bf:54:d8:80:3d:
ac:58:af:f9:ea:34:66:09:07:67:2b:3d:e3:59:85:
d9:13:42:92:b3:5d:f2:1c:d0:48:8d:68:6a:d1:25:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:39:86:AF:FE:7C:40:9C:BC:34:78:EA:24:23:78:C4:99:AC:7B
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:51:58:1e:19:55:0c:8c:05:38:d6:53:ac:07:0e:ba:6e:e1:
ac:83:92:d2:7b:a9:fe:9a:ef:78:d2:a4:68:24:24:eb:3c:4d:
3c:9f:56:76:1e:0c:73:1d:b5:0b:30:ec:3f:1f:de:04:ac:27:
52:7f:3b:06:5a:33:ad:8d:59:18:1b:2d:6b:44:bc:5d:06:81:
89:4e:bd:d5:d9:cd:6d:a4:48:3f:f4:92:29:33:16:04:c9:7b:
fb:cd:8e:1f:12:e5:c0:6a:37:90:7b:8d:a2:2e:92:1c:df:bd:
55:1f:6e:ac:e7:78:46:c1:24:ec:db:d7:9e:35:d8:7c:1b:0e:
00:fc:eb:02:d6:df:2a:46:f2:bb:0e:07:cd:f3:f6:3d:5d:f4:
14:cb:f3:14:76:6b:71:cc:61:63:9b:66:2c:8e:83:1a:66:22:
d5:0a:1b:d4:72:cd:26:ef:e9:f7:02:3c:e1:32:a3:cf:65:38:
3e:25:ff:d3:59:8c:4d:91:d8:99:6e:e1:e8:43:2b:ea:b9:dc:
30:92:e5:38:af:b7:53:73:4d:59:4e:61:63:fe:b1:64:64:3e:
f5:5c:ab:07:36:8e:d4:17:e0:16:4b:90:9e:b3:e6:a7:02:d0:
6a:bf:b7:22:a5:36:01:c1:1d:57:79:97:8f:49:83:2e:05:28:
a3:21:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:26 2026 by rpki-client