Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: NNFxqG8ZKQnDkDU1zT0cldg5v6TjIU/pdwR44e/zl7Y=
Subject key identifier: BD:77:1A:9E:A0:12:59:89:54:BD:BC:74:8B:2E:54:97:97:33:AB:7F
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 01A1863F164DD5385F20236456807A8F70B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1A5C
Signing time: Thu 29 Oct 2026 06:00:43 +0000
Manifest this update: Thu 29 Oct 2026 06:00:43 +0000
Manifest next update: Fri 30 Oct 2026 06:00:43 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: JXSGBBkGcLaSMpdmhGoveEaxPq2ifFPRy7WIttf/Sso=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:16:4d:d5:38:5f:20:23:64:56:80:7a:8f:70:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Oct 29 06:00:43 2026 GMT
Not After : Oct 30 06:00:43 2026 GMT
Subject: CN=bd771a9ea012598954bdbc748b2e54979733ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:7e:94:42:ef:d9:4e:0a:20:1f:8b:c0:d8:
99:90:0f:33:a8:81:23:60:59:c2:29:29:39:fe:2d:
d2:9e:7a:c7:4d:a9:3a:79:bb:07:d4:6f:f0:64:03:
ff:24:09:ee:cd:b3:2e:b9:1f:e0:2e:a8:d6:fb:2e:
70:f3:fb:3e:ca:93:4a:07:64:61:84:cf:84:ca:1f:
67:02:71:f9:cb:9f:90:36:62:41:b7:f9:30:91:20:
bc:b5:52:ba:48:2b:59:c4:89:47:d9:f4:74:7b:92:
dd:ff:7f:46:3e:83:5f:97:90:e3:28:f5:1a:cd:ef:
78:a9:e4:71:3c:d0:65:c6:fa:72:9f:ed:a8:cd:ff:
c8:74:68:97:aa:63:9c:90:f7:0f:62:31:17:4e:0a:
a0:b8:71:e1:91:30:08:64:a3:ed:df:1b:77:e5:96:
2a:a5:de:10:64:a3:6e:59:25:64:03:62:a8:d5:68:
cf:d4:d2:77:03:77:f4:84:91:97:11:2c:ba:66:16:
2e:00:f2:8f:b1:dd:42:a6:ed:25:53:ee:c8:ce:41:
3b:fb:b5:85:50:5d:bd:b2:1f:85:82:d0:95:4f:71:
27:31:06:19:c1:6d:b0:82:d0:d8:bc:09:ce:25:3e:
f4:05:ce:d1:88:e2:c5:40:9e:70:f4:aa:2d:3d:85:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:1A:9E:A0:12:59:89:54:BD:BC:74:8B:2E:54:97:97:33:AB:7F
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:71:5a:3b:be:bb:5d:26:72:df:9f:be:8c:28:8c:ac:99:22:
f8:5f:9f:0d:11:89:28:80:75:f3:20:79:73:55:b6:cf:b7:1e:
6d:05:e4:b0:c8:f0:71:7f:75:dd:f7:ae:1b:ad:68:2a:d5:24:
fb:d0:9f:dd:98:89:52:1a:a6:bb:0e:2b:e2:7d:31:ec:4f:bb:
cb:2d:62:ed:c6:bd:a6:fc:ab:de:78:74:95:3d:05:c2:ca:a0:
f8:90:4f:a2:bb:e1:96:97:b0:24:37:8b:e0:cb:aa:c2:b7:e8:
c3:a9:1f:48:00:9e:00:d4:94:9c:54:7a:29:21:1c:7f:c6:c5:
bd:b4:58:c9:1b:e0:3e:04:5c:62:61:79:19:2e:6f:0c:9b:77:
ce:15:30:28:74:2f:78:38:29:00:3f:be:04:6a:86:35:6b:6a:
35:e1:78:1c:c3:3b:8a:88:1a:ee:20:40:47:35:18:40:5e:2f:
ce:8d:e4:e0:da:56:c6:24:29:53:cc:00:46:e0:5a:7e:dd:ff:
22:9e:d4:ad:4a:37:ac:fd:a0:4d:99:55:8b:4e:0a:fd:49:fe:
76:ab:15:04:05:68:22:e4:2b:85:eb:f1:9e:cf:26:a9:e8:83:
f9:cd:dd:c3:30:28:94:4e:40:86:9f:da:fd:78:cb:db:06:42:
4b:7b:d3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGPxZN1ThfICNkVoB6j3C0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDhlMDMzZGViNjRhYzQyNDNjNzJjZTg5OWQ1MzgyMmRm
Njk5NmQwHhcNMjYxMDI5MDYwMDQzWhcNMjYxMDMwMDYwMDQzWjAzMTEwLwYDVQQD
EyhiZDc3MWE5ZWEwMTI1OTg5NTRiZGJjNzQ4YjJlNTQ5Nzk3MzNhYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RB+lELv2U4KIB+LwNiZkA8zqIEj
YFnCKSk5/i3SnnrHTak6ebsH1G/wZAP/JAnuzbMuuR/gLqjW+y5w8/s+ypNKB2Rh
hM+Eyh9nAnH5y5+QNmJBt/kwkSC8tVK6SCtZxIlH2fR0e5Ld/39GPoNfl5DjKPUa
ze94qeRxPNBlxvpyn+2ozf/IdGiXqmOckPcPYjEXTgqguHHhkTAIZKPt3xt35ZYq
pd4QZKNuWSVkA2Ko1WjP1NJ3A3f0hJGXESy6ZhYuAPKPsd1Cpu0lU+7IzkE7+7WF
UF29sh+FgtCVT3EnMQYZwW2wgtDYvAnOJT70Bc7RiOLFQJ5w9KotPYXD5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL13Gp6gElmJVL28dIsuVJeXM6t/MB8GA1UdIwQY
MBaAFDpI4DPetkrEJDxyzomdU4It9pltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZmE3YjAtYWNlNC00OTJkLThlOTEt
YzUzMjFkYzllNjRiLzEvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83ZmE3YjAtYWNlNC00OTJkLThlOTEtYzUzMjFkYzllNjRi
LzEvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXFaO767
XSZy35++jCiMrJki+F+fDRGJKIB18yB5c1W2z7cebQXksMjwcX913feuG61oKtUk
+9Cf3ZiJUhqmuw4r4n0x7E+7yy1i7ca9pvyr3nh0lT0Fwsqg+JBPorvhlpewJDeL
4Muqwrfow6kfSACeANSUnFR6KSEcf8bFvbRYyRvgPgRcYmF5GS5vDJt3zhUwKHQv
eDgpAD++BGqGNWtqNeF4HMM7ioga7iBARzUYQF4vzo3k4NpWxiQpU8wARuBaft3/
Ip7UrUo3rP2gTZlVi04K/Un+dqsVBAVoIuQrhevxns8mqeiD+c3dwzAolE5Ahp/a
/XjL2wZCS3vTYA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:02 2026 by rpki-client