Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: mgT4aNgEPX+xAOztxJfldyYUDy0cjwMQQhw5h3x5s60=
Subject key identifier: 2A:FB:00:1A:31:DF:F7:AB:D8:C2:6D:BC:49:3A:58:62:08:F5:77:3F
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019F848D12DFFBFD247DE91D9508C24079A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 12:01:05 +0000
Manifest this update: Tue 21 Jul 2026 12:01:05 +0000
Manifest next update: Wed 22 Jul 2026 12:01:05 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: 1LIuP4mxJDQJ8cTNcKU3QuSrLzibxMGc0GokF+gtr80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8d:12:df:fb:fd:24:7d:e9:1d:95:08:c2:40:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jul 21 12:01:05 2026 GMT
Not After : Jul 22 12:01:05 2026 GMT
Subject: CN=2afb001a31dff7abd8c26dbc493a586208f5773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:78:71:5f:ce:4d:38:90:20:3f:70:c6:58:
ec:3d:5f:1e:5c:6c:a8:61:86:73:e2:37:e6:a3:04:
1d:c3:70:63:7c:79:d8:5c:55:9f:a9:c3:10:4f:03:
aa:38:64:50:3b:98:7b:4d:02:cb:2f:73:db:e7:b0:
09:5d:ee:1b:10:3a:3f:37:e8:82:33:58:ee:99:6f:
8c:5e:e5:76:e4:7a:d0:27:e5:b6:54:66:9a:5b:0b:
7e:13:e7:03:dd:ad:9b:0b:a3:23:22:b2:c9:8d:6c:
59:ca:1c:0b:58:6c:d4:64:0a:aa:a3:f8:a3:3d:bc:
27:8c:e3:19:60:53:e1:68:e0:3b:c6:73:16:b9:a2:
cb:d5:f7:b0:d2:f0:c9:56:8a:2a:90:1c:04:f2:d1:
17:ac:e6:30:f6:b2:ae:85:b3:f1:57:db:33:bc:f5:
c5:72:19:7c:d8:e7:76:51:45:c1:98:e1:99:0b:b6:
39:90:93:8a:e0:69:3e:e9:38:82:8f:f5:1a:d5:2a:
ec:e2:c1:2e:be:47:a7:74:3e:87:86:c0:46:7c:1a:
56:aa:c4:38:fc:58:0a:b1:ee:65:a1:ef:a5:e3:4d:
a3:02:9e:bf:15:69:7c:5b:19:17:ee:d3:15:27:68:
11:58:e5:6a:41:bf:e5:f4:bd:89:df:fb:7d:78:2c:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:00:1A:31:DF:F7:AB:D8:C2:6D:BC:49:3A:58:62:08:F5:77:3F
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:69:fa:60:9b:16:34:6f:15:78:0a:2c:94:e2:b9:1e:c8:
96:c8:dd:40:2a:79:60:58:a3:cf:a3:35:0d:9d:69:98:43:c2:
39:40:3e:2c:4b:e3:53:c6:d5:53:90:15:29:6b:e7:60:0a:fb:
4d:85:f0:40:aa:62:ff:da:c2:d2:10:42:cc:29:65:3f:4e:aa:
33:51:a9:f4:2c:90:a2:99:e0:4a:34:cc:46:00:a0:fd:4b:b0:
c8:f5:8c:2d:1f:c4:f1:4e:24:ea:29:5e:80:b5:39:b7:27:53:
0c:08:fa:5f:b2:6e:1c:ed:67:3c:30:6b:c2:2d:38:58:a0:fd:
20:61:a5:8b:e1:50:24:27:0c:a3:33:b1:e5:65:61:e3:6d:8c:
34:90:d3:28:b2:7d:24:65:d3:cc:21:91:7e:5b:f4:87:6b:a3:
41:ac:6e:b7:f5:fb:9c:e0:98:06:65:6e:4f:fa:98:99:41:b2:
27:ee:5d:8e:2a:0f:da:ec:fd:29:9c:af:b9:a8:7e:d3:2b:75:
8d:41:df:34:a9:f7:c6:af:6c:4e:d1:5f:26:33:b4:a5:32:db:
57:de:ac:18:b0:1e:67:74:40:2b:36:35:71:eb:aa:6c:4d:3d:
77:24:8e:8a:93:12:be:3d:66:30:0e:98:d6:67:09:56:92:64:
96:e6:b9:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EjRLf+/0kfekdlQjCQHmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3
YjU5NTUwHhcNMjYwNzIxMTIwMTA1WhcNMjYwNzIyMTIwMTA1WjAzMTEwLwYDVQQD
EygyYWZiMDAxYTMxZGZmN2FiZDhjMjZkYmM0OTNhNTg2MjA4ZjU3NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWV4cV/OTTiQID9wxljsPV8eXGyo
YYZz4jfmowQdw3BjfHnYXFWfqcMQTwOqOGRQO5h7TQLLL3Pb57AJXe4bEDo/N+iC
M1jumW+MXuV25HrQJ+W2VGaaWwt+E+cD3a2bC6MjIrLJjWxZyhwLWGzUZAqqo/ij
PbwnjOMZYFPhaOA7xnMWuaLL1few0vDJVooqkBwE8tEXrOYw9rKuhbPxV9szvPXF
chl82Od2UUXBmOGZC7Y5kJOK4Gk+6TiCj/Ua1Srs4sEuvkendD6HhsBGfBpWqsQ4
/FgKse5loe+l402jAp6/FWl8WxkX7tMVJ2gRWOVqQb/l9L2J3/t9eCwqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr7ABox3/er2MJtvEk6WGII9Xc/MB8GA1UdIwQY
MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt
MzM5ODVkYjgwNDdhLzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh
LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd35p+mCb
FjRvFXgKLJTiuR7IlsjdQCp5YFijz6M1DZ1pmEPCOUA+LEvjU8bVU5AVKWvnYAr7
TYXwQKpi/9rC0hBCzCllP06qM1Gp9CyQopngSjTMRgCg/UuwyPWMLR/E8U4k6ile
gLU5tydTDAj6X7JuHO1nPDBrwi04WKD9IGGli+FQJCcMozOx5WVh422MNJDTKLJ9
JGXTzCGRflv0h2ujQaxut/X7nOCYBmVuT/qYmUGyJ+5djioP2uz9KZyvuah+0yt1
jUHfNKn3xq9sTtFfJjO0pTLbV96sGLAeZ3RAKzY1ceuqbE09dySOipMSvj1mMA6Y
1mcJVpJklua5Pg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:20:14 2026 by rpki-client