Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier: qx2MefrijObWejls4U2ajpIOGZjvVnQ8JQ6gIOdxc7M=
Subject key identifier: 1F:9F:DD:24:92:1E:B6:D3:ED:30:66:D2:14:C4:31:45:6B:D0:7E:34
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 019A72266F15B73A52AC08D6CD63814AECBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number: 1685
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: KBKNSo54C-UjedwUMFB9xB41sio.roa (hash: EOnhGNtgG2NlhPSt6QkJfBoHbT869foRrNlEhdeoqqA=)
2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: XN+C691sSPAdoTNN9WO5nvXxz4rlQoNKQSkGMhOP8jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6f:15:b7:3a:52:ac:08:d6:cd:63:81:4a:ec:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=1f9fdd24921eb6d3ed3066d214c431456bd07e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:15:f6:c1:fa:25:73:e5:c4:c8:78:d3:bf:
cf:12:59:70:9c:9e:75:05:b7:1f:9d:aa:12:76:85:
ae:56:8a:5b:e6:bf:b8:58:f3:d2:45:e3:6f:a6:af:
3d:97:16:64:ab:b2:75:4b:f4:17:53:bf:f2:00:03:
cc:9b:10:d7:6d:f8:72:88:a3:74:f4:01:f9:a6:17:
16:3e:9a:51:b8:11:a2:d1:b9:9f:e5:49:49:a8:2a:
d1:8c:17:63:57:8b:e3:94:ab:4d:3c:ac:3e:14:43:
3e:04:7a:2c:c6:cc:6d:04:78:3d:42:e9:32:8f:ba:
04:f7:17:09:f0:b5:c8:9f:d7:dd:9f:a2:ad:b0:96:
4b:a3:6e:8f:e6:c6:65:78:73:57:d9:ed:76:93:89:
5e:8a:18:cc:c1:3b:d4:21:5e:e3:13:e6:00:f8:b6:
e7:e2:63:e4:9f:62:0e:5b:fc:49:07:57:62:7c:01:
6c:58:b2:80:64:af:b5:50:aa:47:5d:f5:95:e2:46:
72:0f:fa:37:a9:a3:c4:5d:d7:b9:3f:03:0f:e5:98:
bc:04:4e:8f:b6:fe:c9:72:4f:02:0e:dd:d8:e6:ef:
e6:70:88:ba:23:07:05:65:b7:8a:6e:7c:9f:48:d0:
7a:4d:4e:0b:a1:4a:c4:41:7a:ed:b2:4f:fd:32:6a:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:DD:24:92:1E:B6:D3:ED:30:66:D2:14:C4:31:45:6B:D0:7E:34
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:b1:3d:34:8d:85:67:72:e8:a6:7a:ef:b0:c6:38:9a:0c:
a2:cd:9f:bf:43:8d:e4:2e:b5:90:6c:aa:97:1d:35:ce:9e:88:
f5:a3:24:b1:62:f9:ee:33:2f:8a:80:44:fa:82:74:65:55:c6:
02:fb:ab:98:75:97:cc:24:96:3e:0e:f3:da:47:10:b9:5a:02:
e3:ff:3e:2a:f5:3c:81:8a:3f:dd:b3:63:8e:03:d2:be:32:fa:
3a:b5:ef:64:3a:e1:59:40:18:17:e8:3c:7a:5c:75:35:1b:7b:
80:0b:db:b1:b5:10:cf:64:21:ea:d5:64:7a:0f:d1:2c:b6:ad:
2d:49:0a:4a:5d:80:87:d6:e5:6d:b3:81:d5:12:67:76:76:59:
e5:da:a5:7d:cd:93:62:e7:e1:e9:f5:68:f5:c6:20:79:a1:c1:
f0:cb:23:28:5e:bf:1d:a9:52:ea:f3:dc:d6:37:3c:93:12:67:
4e:8e:d6:e1:7f:d6:24:28:c0:65:4b:bc:5d:2b:b3:43:d4:43:
4c:62:f9:fe:8c:44:2f:d5:66:50:05:84:90:8c:d2:09:77:8f:
65:37:a6:4f:2b:24:b1:1a:7e:c2:9b:0d:eb:15:e1:f7:b0:5d:
74:a2:10:cd:9e:e3:1a:86:94:58:27:6b:99:89:c5:84:3c:56:
6a:a4:44:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJm8VtzpSrAjWzWOBSuy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YTBjODgyNmMxOGJjZDUxM2FhYTdlNTIwODFmZjlmZDM3
OTE5ZmIwHhcNMjUxMTExMDkwMTUyWhcNMjUxMTEyMDkwMTUyWjAzMTEwLwYDVQQD
EygxZjlmZGQyNDkyMWViNmQzZWQzMDY2ZDIxNGM0MzE0NTZiZDA3ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6oV9sH6JXPlxMh407/PEllwnJ51
BbcfnaoSdoWuVopb5r+4WPPSReNvpq89lxZkq7J1S/QXU7/yAAPMmxDXbfhyiKN0
9AH5phcWPppRuBGi0bmf5UlJqCrRjBdjV4vjlKtNPKw+FEM+BHosxsxtBHg9Quky
j7oE9xcJ8LXIn9fdn6KtsJZLo26P5sZleHNX2e12k4leihjMwTvUIV7jE+YA+Lbn
4mPkn2IOW/xJB1difAFsWLKAZK+1UKpHXfWV4kZyD/o3qaPEXde5PwMP5Zi8BE6P
tv7Jck8CDt3Y5u/mcIi6IwcFZbeKbnyfSNB6TU4LoUrEQXrtsk/9MmrcTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+f3SSSHrbT7TBm0hTEMUVr0H40MB8GA1UdIwQY
MBaAFDigyIJsGLzVE6qn5SCB/5/TeRn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTkt
MDUwMmE2YTU0YWFiLzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTktMDUwMmE2YTU0YWFi
LzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK+xPTSN
hWdy6KZ677DGOJoMos2fv0ON5C61kGyqlx01zp6I9aMksWL57jMvioBE+oJ0ZVXG
AvurmHWXzCSWPg7z2kcQuVoC4/8+KvU8gYo/3bNjjgPSvjL6OrXvZDrhWUAYF+g8
elx1NRt7gAvbsbUQz2Qh6tVkeg/RLLatLUkKSl2Ah9blbbOB1RJndnZZ5dqlfc2T
Yufh6fVo9cYgeaHB8MsjKF6/HalS6vPc1jc8kxJnTo7W4X/WJCjAZUu8XSuzQ9RD
TGL5/oxEL9VmUAWEkIzSCXePZTemTysksRp+wpsN6xXh97BddKIQzZ7jGoaUWCdr
mYnFhDxWaqREfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client