Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: IiSmee5H0eZp7ZvTfEnspwqno+JhBu79K/dQo+G2z9w=
Subject key identifier: 8A:E7:CC:2F:DA:7F:1A:68:F7:51:A5:DA:83:CC:36:B1:26:79:0B:23
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019F189ED16CD301BE51809224C3C6825FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 13:01:29 +0000
Manifest this update: Tue 30 Jun 2026 13:01:29 +0000
Manifest next update: Wed 01 Jul 2026 13:01:29 +0000
Files and hashes: 1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
2: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (hash: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg=)
3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: ZcErt0hbfnd1+D8Qaw5WKsNr2bUhcW1Wvi4bX/HySro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d1:6c:d3:01:be:51:80:92:24:c3:c6:82:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jun 30 13:01:29 2026 GMT
Not After : Jul 1 13:01:29 2026 GMT
Subject: CN=8ae7cc2fda7f1a68f751a5da83cc36b126790b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:71:81:0f:d1:19:02:bf:2f:43:cb:62:05:
b9:c9:5b:7f:84:75:46:a0:88:84:45:0f:79:49:57:
e5:c0:22:4d:4d:d0:f0:c4:89:9b:6f:68:c3:72:07:
04:3f:4a:30:82:1e:ed:04:2e:57:04:74:ae:14:af:
b5:b6:72:eb:b7:e6:2b:43:a9:39:b5:b5:20:81:bd:
2d:b3:80:05:82:47:da:50:47:b2:f3:38:3b:d1:63:
2a:9e:af:4c:a5:29:8d:1f:ff:ae:fe:08:f7:e2:9d:
ab:f2:b1:6c:06:3f:2e:fe:e4:47:9a:dc:6b:dc:89:
06:ab:91:9e:a2:05:be:d7:09:f4:ce:b6:72:15:dc:
91:ca:fa:33:00:33:6b:28:d8:d5:66:84:18:37:ad:
e2:cf:63:1f:d8:b0:05:39:62:d7:da:c8:13:8e:15:
3e:04:34:8e:86:41:5c:58:59:33:c9:76:78:83:5e:
ff:bb:ba:8b:aa:d0:f0:65:70:bb:dc:e8:f8:cf:b4:
72:79:3b:dd:5f:7c:f5:f8:fe:ae:6d:3e:a2:4a:73:
2a:37:50:4e:91:95:5b:3b:53:c0:ab:84:03:5a:9a:
3b:39:d1:db:a5:81:d2:e1:5d:11:f9:94:14:4b:12:
cc:b3:3f:96:73:88:c2:b1:63:50:90:80:e1:e3:50:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:CC:2F:DA:7F:1A:68:F7:51:A5:DA:83:CC:36:B1:26:79:0B:23
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:ef:80:80:4e:46:2f:22:0a:1b:24:67:10:9f:b4:f2:a9:
1f:63:e8:d3:58:0f:8f:a7:27:2c:6a:46:9e:23:3a:c0:7a:62:
ff:c0:f5:7b:c8:ad:08:3e:21:de:7d:81:3b:bb:8a:a1:f3:21:
fa:24:40:e3:a2:ad:76:6d:f8:e2:56:08:7b:4c:b6:13:93:13:
f1:89:ec:9a:01:e0:0f:35:13:bc:37:31:62:16:94:6a:a9:3d:
7d:58:ad:10:aa:69:bd:e3:a6:5c:6a:26:9a:eb:42:12:4e:fd:
93:5a:49:bf:85:94:7c:b8:d0:7e:03:7f:dd:4c:86:e5:5b:0f:
de:ea:0c:1d:a7:c1:2e:82:aa:e1:ee:69:fa:b8:28:a6:06:87:
c3:45:d8:d6:f1:58:31:0a:22:91:0f:81:57:51:3a:96:4e:ee:
50:48:a4:b1:a2:56:d5:87:c3:f3:f0:21:3f:87:ca:0c:76:e5:
ca:92:d2:ff:c8:3f:b5:dc:49:e4:70:86:a1:4c:2b:da:31:fe:
68:e9:8c:40:dd:1b:20:4e:b6:4f:52:e2:d8:19:bf:06:a2:50:
30:35:c8:32:b5:3e:5a:07:9b:a5:37:49:9b:2b:05:1c:ec:a3:
c7:c9:95:73:48:d7:fc:76:c0:18:9d:80:29:78:14:53:5a:b4:
f7:c8:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:33 2026 by rpki-client