Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: 3u+kQf61wu5NUqgBDXbI6E55YMy14RMCconB3tJka2k=
Subject key identifier: 7B:1C:EF:09:C6:8B:F8:89:5D:3B:23:FA:C8:2D:D2:47:70:6F:60:E2
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01A10090DEBC3F9509D0B3D2352E53B9C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 159F
Signing time: Sat 03 Oct 2026 07:00:56 +0000
Manifest this update: Sat 03 Oct 2026 07:00:56 +0000
Manifest next update: Sun 04 Oct 2026 07:00:56 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: dhw2m+KW6AkNv7IExjVZ/4nXFPL5UwcCuFugG6CdZjQ=)
2: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (hash: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY=)
3: kBXYGbTxdPtMX8674-LRTUc3syU.roa (hash: iVyxpIKZTeWiXDctlyE3ADiEgnIUxFQhQQ9pjma1pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:90:de:bc:3f:95:09:d0:b3:d2:35:2e:53:b9:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Oct 3 07:00:56 2026 GMT
Not After : Oct 4 07:00:56 2026 GMT
Subject: CN=7b1cef09c68bf8895d3b23fac82dd247706f60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:20:76:f4:89:ee:63:11:41:55:c3:28:2d:
87:30:cf:db:5d:eb:4e:db:a3:e6:6f:a5:26:55:df:
f0:12:f3:46:85:ec:ff:66:4d:1a:dd:af:8f:ff:c1:
89:b9:c0:f2:63:2a:37:88:05:b4:56:bf:a2:1b:8c:
c8:d7:50:89:6a:dd:c8:9d:c5:11:df:8e:a5:18:b8:
a6:03:08:60:0e:95:7b:ee:de:7a:a6:55:1c:b7:9c:
18:71:23:7f:48:c6:15:e2:19:e4:cc:c8:b8:f9:fc:
5b:d6:90:66:a7:96:0b:09:1b:c8:95:0a:21:7c:4c:
70:c2:26:22:43:85:f6:28:f2:82:6a:60:47:7e:b7:
24:05:14:0c:ba:5e:f9:3d:6d:77:e0:ab:8f:63:55:
28:62:2a:63:e0:17:9d:f4:a4:e5:ba:48:6e:60:c2:
e3:2b:0b:d6:4a:b7:a0:26:e3:b1:56:6e:b6:0f:86:
d5:24:e3:08:65:dc:9b:65:33:00:f5:ba:51:75:b6:
c8:a3:29:9d:8b:54:cc:9e:6b:f9:d6:a5:71:4f:9e:
98:9a:f7:3e:09:71:2e:72:cd:b8:81:8b:23:30:e1:
1e:27:17:6f:cd:4e:32:9b:2e:c6:5e:09:2e:d0:7e:
9e:bf:01:8d:3d:e6:c0:c9:1d:36:cd:08:c9:20:8e:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:EF:09:C6:8B:F8:89:5D:3B:23:FA:C8:2D:D2:47:70:6F:60:E2
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:07:cd:c0:1e:5e:b0:fa:24:d6:1e:33:29:5e:6c:e9:2b:d4:
73:81:8c:cb:b5:bc:5e:cf:b3:b2:67:81:e1:56:b2:aa:f7:1d:
29:90:c6:a9:fa:e0:69:3a:39:13:61:f9:69:79:25:e2:c7:3a:
3a:c0:76:41:11:a4:1f:5d:86:1a:e9:13:1f:b4:4d:46:8b:33:
c2:9f:f0:b1:ed:dc:f4:a1:a6:c8:8a:dd:cd:82:e1:f3:71:08:
71:09:48:c6:e4:6e:f9:09:f1:e2:cf:98:ef:98:b8:97:d5:c5:
ac:61:2c:77:bf:ba:da:88:3e:6b:cf:9e:37:c8:d8:ad:e5:1c:
14:9c:5f:04:41:26:7d:06:4a:ea:9b:6f:4d:6e:b0:c6:8e:f0:
32:24:bd:bb:25:8b:ca:ac:99:a7:ab:30:14:ee:12:4e:8e:2a:
67:bd:e3:a3:14:1e:14:e4:0d:e5:64:fd:ae:16:49:3e:ac:14:
69:dd:35:ae:61:33:ed:36:37:f5:be:ef:3b:a2:b0:45:7a:e4:
57:4b:03:d7:ee:ce:e7:c9:23:ed:b4:70:b5:64:dc:b2:60:95:
5c:d9:1e:3e:4f:e6:4c:9b:ec:0c:72:53:13:a5:1e:e2:d2:8d:
26:16:a3:bf:c7:0b:d8:e1:6f:9a:f6:3b:8e:68:2b:6f:0e:1c:
a5:15:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:07 2026 by rpki-client