Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: KbYxncrFGkhDjDYKE2Lhf+e9znjn/605fNZyQuCTNPA=
Subject key identifier: F4:7C:FF:1B:00:55:82:A9:BF:58:78:A6:60:FB:05:19:C3:DB:D3:C1
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 019ED4628FA15EC0FED3D46D98CDEBB9A9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 147F
Signing time: Wed 17 Jun 2026 07:01:29 +0000
Manifest this update: Wed 17 Jun 2026 07:01:29 +0000
Manifest next update: Thu 18 Jun 2026 07:01:29 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: NrD/UWUFE4izE4i5CCpDTexvfyjp6EcKskDM1Nj5Xzw=)
2: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (hash: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY=)
3: kBXYGbTxdPtMX8674-LRTUc3syU.roa (hash: iVyxpIKZTeWiXDctlyE3ADiEgnIUxFQhQQ9pjma1pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:8f:a1:5e:c0:fe:d3:d4:6d:98:cd:eb:b9:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jun 17 07:01:29 2026 GMT
Not After : Jun 18 07:01:29 2026 GMT
Subject: CN=f47cff1b005582a9bf5878a660fb0519c3dbd3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:84:25:ce:fc:07:23:07:f1:2e:84:06:e9:
02:7a:41:79:8f:e6:d2:5c:94:d4:54:a1:1a:53:a1:
1e:bf:7d:a3:22:bf:f9:32:94:04:bd:54:b1:03:a0:
32:82:51:f1:4f:be:4a:e5:4d:7a:62:48:65:5f:d2:
d4:5e:7f:bb:bf:8c:d9:d8:db:26:9d:0e:55:cf:13:
de:2d:0f:52:e8:54:a6:aa:bb:7a:84:75:6b:51:04:
10:e4:5c:a2:56:55:a1:fa:ff:79:f6:a7:e2:e8:f2:
5d:6f:82:40:fa:e4:3d:f8:13:48:56:1b:86:b7:c4:
59:35:d9:97:bd:81:68:26:fc:3c:36:45:8a:1e:25:
2b:aa:8b:3b:e6:fe:6e:13:9a:2d:ea:e3:50:23:2d:
dd:01:3e:46:cc:3d:b0:38:23:34:fb:82:9e:45:7f:
6f:b1:c8:62:19:7d:d7:a5:79:94:ab:7b:9c:08:ff:
1d:a3:8b:00:69:3f:9a:c7:21:70:3d:88:f8:36:53:
a1:1e:4b:27:09:cd:61:3d:de:c5:e5:82:0b:c2:b8:
38:b8:e7:f9:35:6a:c9:49:e8:b3:d8:cf:bf:12:9a:
81:5c:50:32:83:9b:22:4c:ed:b7:b2:f3:65:48:fe:
fa:40:30:a7:94:dd:f2:b6:15:d4:fc:42:2a:d8:ee:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:FF:1B:00:55:82:A9:BF:58:78:A6:60:FB:05:19:C3:DB:D3:C1
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:23:30:a4:af:ae:23:c0:52:2e:a9:99:0e:f6:a2:d2:28:a4:
74:3e:fb:d2:1c:9f:1c:88:3a:80:c0:e9:f7:14:80:f3:ae:18:
0d:f2:db:a3:db:69:8e:26:8f:f3:d9:22:04:d2:3f:3e:c4:56:
d7:2f:ef:1b:13:1a:3f:51:c2:e1:b4:a3:1f:90:c8:5e:65:1c:
91:2e:05:ab:04:20:d0:85:b4:d6:5d:3a:a6:bc:10:92:34:21:
e9:c7:50:a1:16:37:cb:f6:82:d5:30:1e:db:50:63:9e:ac:37:
a6:4d:d4:aa:d3:f9:06:0e:b0:5d:47:0a:53:d3:fe:10:90:59:
3f:34:01:3c:67:50:b8:3a:09:9f:60:30:90:4c:76:f7:6e:93:
b7:09:f3:fd:86:dc:5b:9f:9f:4d:5d:eb:8b:d3:b6:ff:85:02:
f4:8d:4c:69:1d:9f:3a:1b:4d:7c:16:2b:af:3d:b0:2f:4f:3d:
84:75:b7:35:5f:b9:ca:4b:71:68:d0:b1:59:ac:fb:56:41:9d:
18:61:78:96:e9:d0:9b:3d:70:ae:e9:04:f1:93:1b:b9:96:50:
81:2c:02:9b:8e:b0:a5:da:94:61:26:a0:49:a7:96:8a:65:bb:
2f:2d:b2:80:44:98:9c:e4:0a:29:a0:31:23:2d:f2:5f:03:17:
0d:a8:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:41:22 2026 by rpki-client