Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: hGHVx1eF4yvTlot3fufVEHU9PUTJ7a6X0cKx7o2/TZM=
Subject key identifier: 8D:79:98:68:A5:C2:C3:DE:61:04:AC:09:52:E4:F9:97:22:9D:BD:26
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 01A0021416DDD8082D07422BECB1868D3369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 10E7
Signing time: Fri 14 Aug 2026 21:01:06 +0000
Manifest this update: Fri 14 Aug 2026 21:01:06 +0000
Manifest next update: Sat 15 Aug 2026 21:01:06 +0000
Files and hashes: 1: J7pOiHdYKd2j4ChTilTVhn454DE.roa (hash: hcNJP1cRdMhyS1Muhx9YTYmFbSp39gRRkj1KauS78s0=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: w/Ikz+PNCBf2aaQlcGn0V9A1/Ntqc0EP1N1b+R3qIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:16:dd:d8:08:2d:07:42:2b:ec:b1:86:8d:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Aug 14 21:01:06 2026 GMT
Not After : Aug 15 21:01:06 2026 GMT
Subject: CN=8d799868a5c2c3de6104ac0952e4f997229dbd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:b0:2b:a3:ad:55:d0:66:0e:46:e8:f3:da:
92:f0:ef:33:47:22:87:6a:73:a4:8d:41:c0:c1:a2:
1d:14:a7:75:69:e6:96:14:31:9a:bb:88:b6:f2:6c:
11:27:16:e0:a7:32:34:64:05:24:4b:97:d0:49:a4:
9d:e4:52:4b:28:a4:b4:6a:a4:c8:89:d2:91:0b:a9:
b1:5b:52:13:e1:85:64:7a:10:e6:c5:76:e6:2a:e4:
bf:40:82:0b:0a:d9:b5:f4:61:c6:83:cd:7a:dd:b9:
13:65:34:58:d3:fa:d9:92:63:7e:06:52:6d:1a:24:
f6:96:76:a0:32:6e:66:f6:fb:54:53:13:7f:7c:cd:
62:f1:c9:e9:9e:d8:3e:37:ea:55:43:6a:9c:63:d0:
f5:b3:40:a3:79:2c:4c:09:0d:bf:06:ae:d6:65:2d:
84:64:9a:75:53:fc:31:36:aa:e3:4b:b9:48:f5:b1:
6a:4d:07:78:97:b4:e3:15:29:9b:ce:4c:0b:8e:50:
96:2d:d7:1c:90:88:08:24:de:1c:89:c2:ae:07:b8:
2d:0d:89:00:d8:05:12:89:2c:f4:61:e7:be:1b:0d:
53:04:c0:ac:c9:f8:5a:0e:48:86:fa:fb:bf:9e:26:
34:34:63:f8:36:78:67:ab:7a:08:04:2e:1c:2f:b4:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:98:68:A5:C2:C3:DE:61:04:AC:09:52:E4:F9:97:22:9D:BD:26
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:40:c1:38:0f:2b:73:25:d8:84:f5:4c:fd:ac:f2:9f:44:
5e:08:dd:d3:cd:38:e4:6d:82:4f:11:54:d6:29:1f:1c:34:34:
34:bf:d9:e9:a6:7a:00:60:60:9a:be:e4:54:29:0a:09:30:c0:
9e:d8:a4:7a:f0:b6:40:70:79:b7:f0:6c:c5:2a:74:e0:18:fc:
94:cb:5c:66:dc:9b:2f:6d:b0:72:48:0a:f2:de:9c:78:9e:2c:
dd:69:68:3e:22:f0:f1:c6:14:73:c0:ad:1e:f9:c6:e5:6f:2c:
6e:c4:1c:41:34:37:f9:d6:74:d5:0a:eb:87:94:09:f7:25:eb:
d8:a3:6a:2a:fb:16:76:8c:12:2d:4b:75:b1:22:b7:d9:72:10:
fa:32:79:d1:56:00:a2:f4:0b:9a:3e:33:aa:0d:a7:d5:98:87:
ab:15:1c:5e:82:47:f6:0f:b4:68:0a:49:ff:85:f5:e2:4b:86:
df:26:a2:e5:58:36:bc:97:b3:c8:be:d5:1c:c1:96:24:0b:0f:
39:0f:46:e7:89:8c:31:bd:a0:77:4d:b0:a2:55:a7:85:28:b6:
43:c3:5a:85:88:df:b0:1f:9f:9d:29:db:ca:ac:8f:33:ce:7a:
88:16:e5:a7:d7:30:cd:65:25:1e:70:76:68:ce:65:27:7b:81:
05:a5:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:04 2026 by rpki-client