Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: Xj5kB9M1TFpHo/whR/BJfG/ZsbZB0ugCFGbMygFtEVU=
Subject key identifier: D5:B2:47:05:48:7C:1D:85:1C:94:A1:05:80:28:7F:85:63:A3:65:8F
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01A06C4B1706679038C31963A45E11E3DFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 12:00:55 +0000
Manifest this update: Fri 04 Sep 2026 12:00:55 +0000
Manifest next update: Sat 05 Sep 2026 12:00:55 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: yNAGvwhhD9J7mah36VLT3mgXSUmBep0dTNsw2B5XlGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4b:17:06:67:90:38:c3:19:63:a4:5e:11:e3:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Sep 4 12:00:55 2026 GMT
Not After : Sep 5 12:00:55 2026 GMT
Subject: CN=d5b24705487c1d851c94a10580287f8563a3658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:bd:56:e2:41:6a:b1:c4:f4:58:31:86:c0:c9:
52:e8:3e:8f:23:49:89:36:da:ab:77:5a:b0:67:10:
3d:40:aa:f0:35:f5:28:9a:dc:6b:d1:39:5a:5a:7e:
0b:dd:ed:51:3d:43:a5:4c:c5:8c:be:f1:c0:6d:ee:
f7:e4:55:cf:57:34:aa:05:b4:5f:d9:bc:1f:7c:cd:
b9:bc:5c:7b:87:17:32:b3:2f:94:4d:f5:5b:0d:c5:
27:88:9d:3e:1a:f5:2e:96:a0:7a:f0:0f:a0:2d:1c:
c7:3c:de:d8:a7:cd:01:6d:bd:9b:40:31:82:f7:ab:
9b:d3:75:1f:3f:f2:af:e4:a4:54:77:3c:6e:d1:7e:
e9:94:5c:17:6a:c2:3d:88:2f:8f:65:bb:22:6d:9d:
af:42:d7:cd:e4:a6:7f:e0:c4:6b:8c:ce:7c:9c:ab:
a1:68:de:8d:dc:b2:db:f6:db:cd:a6:af:14:19:07:
29:ca:8e:14:ac:23:25:7a:a6:c1:bf:18:0b:4d:be:
44:65:3f:8d:a9:12:af:b7:89:01:1c:6d:56:cb:96:
ba:e9:d1:6b:45:5e:e8:44:47:84:9f:84:96:27:34:
9f:70:39:fe:f1:4f:54:be:da:4c:bf:a1:5d:f3:d0:
20:84:9f:26:c0:0f:e6:99:0e:b2:60:3b:4b:cf:f0:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:47:05:48:7C:1D:85:1C:94:A1:05:80:28:7F:85:63:A3:65:8F
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d4:36:7b:2f:88:d3:63:37:1e:2e:fb:a6:23:f3:79:c2:ab:
92:58:10:14:1e:60:7f:c2:b6:63:fa:86:91:94:87:96:2b:0b:
f1:c1:6f:ff:4a:1f:72:f8:4c:38:4d:fc:64:47:7f:81:b6:ea:
26:18:bd:db:cc:03:ff:fe:7c:b4:98:db:86:3c:af:e7:c0:5a:
b6:93:d8:0d:b0:6d:a6:4c:6f:1a:5c:b7:85:ba:cf:43:33:3d:
cd:20:99:2b:e1:a1:5b:9f:15:7d:a0:36:37:24:45:d3:37:7a:
21:31:41:45:26:35:e0:9a:b7:d9:ba:c0:d7:15:8b:f4:ef:e4:
0d:83:61:40:f4:88:92:8d:b5:bd:47:57:cd:35:ea:86:3a:39:
3e:a6:8a:99:80:65:f2:b4:78:41:bd:93:af:9a:33:f8:08:24:
1b:58:6d:5e:95:85:81:e8:47:5a:a4:18:c1:e1:d4:62:00:64:
7e:5d:d4:3f:de:29:1e:b2:4d:d1:36:88:68:13:36:9c:14:de:
9d:0d:68:d3:b1:f1:5b:a6:f6:d8:c4:70:e4:fe:0d:01:0d:70:
c3:1e:29:bb:5c:c5:68:3e:3d:18:82:99:47:44:ce:21:61:3b:
72:c8:d4:4c:1a:27:41:24:72:85:e0:4a:c7:2a:b1:d6:4e:75:
59:95:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:56 2026 by rpki-client