Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: yS4jTD3WOXQyNtjLQ7D1d4HK1Z+GBR2ET1hTyagHb6I=
Subject key identifier: 23:7C:7E:9F:73:E8:CF:65:40:A0:4B:C8:89:02:C0:65:E6:DE:8C:A2
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 019FA372B24D7AD721F6EC94F8644E5ED628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 12:00:30 +0000
Manifest this update: Mon 27 Jul 2026 12:00:30 +0000
Manifest next update: Tue 28 Jul 2026 12:00:30 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: Ut7KH7s0fLtHGeE7NVOncVbtcWX84nj5YoFIbH1k1q8=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:b2:4d:7a:d7:21:f6:ec:94:f8:64:4e:5e:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jul 27 12:00:30 2026 GMT
Not After : Jul 28 12:00:30 2026 GMT
Subject: CN=237c7e9f73e8cf6540a04bc88902c065e6de8ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:55:09:60:73:74:88:99:6d:62:39:c6:21:
5b:8b:85:ba:f9:70:a4:a5:38:8e:d1:9c:8b:84:f0:
f6:8e:af:ae:47:75:c1:5f:b6:6d:c3:b6:9d:23:49:
dd:f0:b4:58:3f:45:75:0d:36:9c:ae:01:65:0f:72:
7c:5d:ff:6c:5b:a4:18:0e:3b:98:6d:a9:a3:2e:f2:
b2:76:8e:16:eb:e4:f8:9a:1d:f9:0a:63:6e:5a:cd:
5e:86:1e:59:41:ac:25:4a:cc:36:16:de:17:61:63:
55:e7:d5:ed:e7:e7:cd:30:c8:d0:23:04:72:05:7e:
70:38:69:e9:b4:42:ee:48:34:0d:e0:f8:4d:2e:8c:
c4:61:a0:cf:a4:13:c9:77:d9:59:99:be:a5:be:b4:
01:65:22:ab:01:3e:2d:5b:ce:8a:1f:5e:c7:37:b3:
0b:60:86:00:48:fb:e4:46:a9:2e:49:e2:19:61:01:
58:69:98:83:87:7e:91:0c:83:72:7d:e2:d0:1a:38:
3f:2a:d3:c2:29:e8:34:7f:dd:fd:a2:58:bd:7b:7e:
7a:d4:2d:67:28:e3:4d:b2:a2:11:59:8e:c8:08:8b:
5c:f6:17:6a:8d:c0:8d:0d:71:0d:8f:6c:91:22:a5:
09:89:8e:dd:f1:80:c2:c0:b3:b5:86:a2:8d:82:22:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:7E:9F:73:E8:CF:65:40:A0:4B:C8:89:02:C0:65:E6:DE:8C:A2
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a5:af:d6:26:33:7e:aa:25:7e:4f:f0:a6:29:af:8c:86:02:
3c:55:45:73:d9:4c:54:4e:85:e9:5c:27:d6:52:55:01:d7:d0:
3c:58:cc:58:8d:8e:99:8b:40:36:64:26:e0:4e:f0:0a:f6:f8:
f5:1e:be:67:1d:3e:a0:05:b2:ca:fa:62:91:a8:a0:b7:9c:70:
c5:e3:f8:54:ff:d9:be:8b:e3:dd:74:5b:35:ff:35:27:85:f4:
86:ae:b6:9f:2a:64:12:5b:cd:76:0e:b0:b9:08:ae:dc:c6:0c:
65:ef:43:2b:1e:59:c4:e5:47:90:51:f5:44:7c:e0:a9:f9:13:
1c:a9:32:ea:66:94:17:5d:44:f3:65:fe:3d:68:c4:5c:b2:d5:
cd:ce:a3:4b:8c:85:67:94:ca:c5:3b:dc:5e:de:34:5b:c4:41:
00:fd:ea:f9:16:e7:d6:94:b3:b9:c5:22:e5:18:a0:84:c2:2a:
bf:4e:a4:e5:64:76:df:2f:b2:b0:3c:64:a1:45:50:7b:63:96:
0c:ad:78:de:11:9b:da:f2:45:4c:f5:df:d4:c2:9e:15:5a:ab:
65:79:34:61:31:31:ce:ba:0b:ba:9a:a8:6b:20:0b:09:e0:4f:
24:cd:21:6c:65:10:73:63:fc:20:c7:66:89:a9:15:a5:bf:d1:
da:46:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:42 2026 by rpki-client