Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier: QLfGgnIwiQWJNpyFJnUMNLRMqzMm2uaivNXp+6y8usE=
Subject key identifier: 31:B5:1A:42:8D:5B:46:FC:38:97:D0:D6:FB:EC:0A:0E:03:E1:D5:67
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 019D3909FA7ABCDF9F3472CD20FC9AE3B6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number: 17F6
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: I5suLRJMCcD3Q-LkLgkHzGSULk4.roa (hash: lLdnBAzP++nZyrTcfhQAr6iSYGM9RrOFuFX70aI206Q=)
2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: zjqb8z9CYDZ4+uWoIQ/7vLFV5uOg/4VY7MykoG3ZPfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fa:7a:bc:df:9f:34:72:cd:20:fc:9a:e3:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=31b51a428d5b46fc3897d0d6fbec0a0e03e1d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:0b:ba:ae:e4:38:f2:97:3a:9e:54:88:b7:
ea:b6:b9:50:8a:36:34:68:9c:cc:66:b1:c7:24:cc:
af:dd:b6:e9:5a:d2:ef:68:c5:a7:1b:f2:9a:ef:c7:
f9:4c:39:6b:77:c7:4b:bf:62:60:a7:f4:22:19:2c:
bf:3a:0c:6c:1f:af:9f:ac:f8:9f:23:c8:34:28:20:
c5:4a:01:f8:95:b2:c2:ef:2c:54:c2:8d:f1:6a:3e:
84:07:fa:66:2f:9f:53:ce:90:21:cf:14:be:2b:b2:
6a:76:82:02:a9:57:ce:20:a3:72:4b:8b:55:b1:ae:
bf:01:f7:1c:d3:37:14:68:63:4c:e8:d3:a1:ba:ce:
0c:b8:cf:10:44:e8:ca:6d:11:2d:fa:5d:13:b3:6d:
34:d0:29:56:60:de:e3:83:bb:f8:d5:8c:8e:db:c7:
c7:00:ec:ab:54:b1:dc:e6:f4:f1:39:da:f5:88:77:
d4:1f:a4:b9:bb:cc:95:57:09:1a:4d:da:42:bc:eb:
63:cf:54:0f:75:e8:8d:57:94:75:2a:27:0c:e9:d6:
f4:a1:c3:c7:34:1a:2d:e4:b1:cb:35:f4:2a:2b:73:
a1:83:5d:fb:a2:65:94:1b:ba:12:8f:77:6a:ef:fb:
43:fd:bc:ac:b6:89:01:17:30:a7:65:87:04:0f:2e:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:1A:42:8D:5B:46:FC:38:97:D0:D6:FB:EC:0A:0E:03:E1:D5:67
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:ec:d0:d4:ed:e8:82:f2:78:b5:d6:7c:e8:ed:18:d2:38:
da:84:6f:a4:14:49:6b:7e:0c:1d:23:aa:2a:9e:00:84:c1:9a:
a2:9c:fa:e6:e5:4c:b8:3b:af:91:f8:5d:2e:16:e7:3e:c3:01:
4b:c5:3b:ba:33:38:e0:00:2c:b0:3c:85:c1:dd:f9:41:81:43:
f4:0c:ca:a4:bd:ca:b2:f5:79:21:e7:ff:45:50:05:6c:fd:0f:
77:36:8c:55:80:e6:bb:8d:ac:8d:a9:d9:ce:1f:7d:ae:5d:a8:
01:7e:b7:e1:4b:44:94:66:e8:a6:03:15:cd:7a:14:61:e9:f5:
1f:2c:d4:e8:32:4c:62:55:0e:88:8d:2f:8f:ab:7d:4a:a4:6d:
5a:c6:7e:89:9d:84:15:c8:dd:70:84:c0:eb:a3:58:aa:a5:6e:
c8:fe:c8:3a:0f:52:db:47:57:5d:c0:63:30:24:ff:a9:35:e1:
b0:8f:39:31:16:9c:73:83:ab:c3:f6:b5:86:00:a2:14:82:15:
e1:fa:f3:5e:de:29:e4:4c:24:b7:66:74:1b:35:67:c6:4e:7b:
7a:27:13:77:2e:75:c7:4d:38:da:17:d9:da:e4:1c:9a:cd:09:
9f:34:d0:19:ea:ba:27:83:3f:6f:5c:98:f9:ad:3f:76:3c:81:
aa:a6:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:47 2026 by rpki-client