Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: NADV7i7ZOyoh1+H7CtPlpp7diToEttR7vU9YwgjRCUA=
Subject key identifier: 2A:A6:8C:30:04:06:B1:5C:73:73:47:8D:19:E0:D9:FC:D4:B7:83:7B
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01A0024AF34EE93BE85E1DF29B9D81FE76FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 22:01:01 +0000
Manifest this update: Fri 14 Aug 2026 22:01:01 +0000
Manifest next update: Sat 15 Aug 2026 22:01:01 +0000
Files and hashes: 1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
2: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (hash: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg=)
3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: gxOTgh6k0az8aXbWPzvQBS0Vqmei4AjGM2/IMy+92aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:f3:4e:e9:3b:e8:5e:1d:f2:9b:9d:81:fe:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Aug 14 22:01:01 2026 GMT
Not After : Aug 15 22:01:01 2026 GMT
Subject: CN=2aa68c300406b15c7373478d19e0d9fcd4b7837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:78:ef:ec:c1:ff:1e:43:2e:fb:5f:d8:ca:
02:67:6b:e7:1f:a1:71:7e:48:17:db:89:3a:c0:d9:
9c:ea:82:15:1d:de:92:34:70:f5:fa:43:03:88:b2:
38:42:11:f9:83:6a:b3:fc:56:b0:7f:6b:34:b5:d5:
46:82:5f:e1:9a:65:1c:b1:32:f8:2c:bc:45:36:dd:
f7:09:be:7b:f3:f8:fc:81:3f:d2:31:b3:64:19:bc:
b4:33:57:ec:e5:ee:5e:60:4b:ad:dc:43:2f:53:e8:
ef:d3:0d:62:9e:4a:65:db:85:c8:aa:ad:48:eb:fd:
ee:f5:27:25:f7:e5:f6:25:6a:6a:67:6f:a4:07:d0:
fd:75:22:d1:65:ce:c4:73:27:13:4f:fd:ae:c6:ae:
df:37:4d:5b:44:6b:58:87:e1:f4:54:61:67:91:bf:
f2:24:9f:8a:72:98:34:91:ae:9f:b0:a3:06:fd:2b:
40:5a:95:8f:4e:80:a5:b8:ea:a5:f0:b0:2a:55:64:
aa:8d:1a:1b:a4:30:f5:d3:1d:42:60:ff:e7:57:db:
51:37:2c:61:58:7c:0c:8a:d8:2c:9c:97:20:23:08:
3c:ce:2b:82:8c:89:df:f7:53:03:96:ba:05:38:ca:
a5:38:af:80:df:14:26:12:cb:93:79:33:b2:24:d4:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:8C:30:04:06:B1:5C:73:73:47:8D:19:E0:D9:FC:D4:B7:83:7B
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:97:ab:ba:09:8e:68:eb:01:b0:e1:52:41:59:0a:28:1d:
c0:ec:2d:44:bf:63:35:a5:e5:e7:25:6f:99:6f:5c:98:c1:73:
56:ff:6f:15:f9:23:26:8d:19:69:6e:97:7d:b9:13:cc:8c:48:
19:1d:a9:04:9b:99:f6:59:53:8f:48:e4:5d:3c:7f:b9:2f:72:
30:5b:bc:b3:9a:23:da:98:3b:1e:cd:05:89:b9:ed:a1:dd:4e:
2e:5d:fc:5b:9d:fa:3f:9f:de:d5:8f:c7:3b:34:ae:4a:97:01:
e3:c9:8b:31:99:f4:0b:27:92:ab:41:e9:4f:f9:66:cc:c3:9a:
0f:19:06:36:4d:82:36:85:18:d5:b3:89:de:a7:fe:b9:7c:d1:
8c:ae:d6:0a:8c:21:54:4e:f8:95:64:3b:82:2b:8a:a4:6b:b2:
ba:6d:aa:1f:5b:56:d3:0a:93:d8:1d:79:46:9d:b2:a3:7a:4b:
2b:61:57:ae:04:ff:6f:0f:07:2e:de:1b:e8:27:ca:bc:b5:29:
97:78:78:f3:ef:2c:ae:20:66:25:5b:2c:62:6e:7c:09:75:21:
95:8b:67:44:40:86:70:ea:8a:ca:61:f6:61:98:2e:4a:ad:b4:
3c:c3:8c:b7:be:8c:5c:f2:1c:f4:e7:a0:2c:4e:fb:06:b6:8b:
3b:41:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:54:43 2026 by rpki-client