Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: 5NKkqjRD7Byb7953jyv4tIevru/b37/ZmNjEghRKz9M=
Subject key identifier: 3E:3B:33:F1:17:98:3F:D5:02:6F:39:00:66:2A:1C:50:4C:5E:64:89
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 01A146849C779FF1374D6B8F04A24DBF97B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 118F
Signing time: Fri 16 Oct 2026 21:00:58 +0000
Manifest this update: Fri 16 Oct 2026 21:00:58 +0000
Manifest next update: Sat 17 Oct 2026 21:00:58 +0000
Files and hashes: 1: J7pOiHdYKd2j4ChTilTVhn454DE.roa (hash: hcNJP1cRdMhyS1Muhx9YTYmFbSp39gRRkj1KauS78s0=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: uktVLVz2/JJTQM/5qx9p8Cqwy00vBBng/s5PWSAgK0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:9c:77:9f:f1:37:4d:6b:8f:04:a2:4d:bf:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Oct 16 21:00:58 2026 GMT
Not After : Oct 17 21:00:58 2026 GMT
Subject: CN=3e3b33f117983fd5026f3900662a1c504c5e6489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:8c:a5:e3:82:1b:26:8d:1b:05:05:1e:1f:
e6:bd:52:b0:5b:20:a6:d0:17:a6:84:44:3e:1e:2d:
40:fa:5b:53:28:70:63:ee:78:af:29:f5:14:e2:cb:
ea:c4:51:c7:27:55:50:c5:00:f3:8d:c9:f1:4e:fe:
25:7c:61:26:0d:1d:de:3d:74:8b:6d:3f:54:c6:b2:
b3:2d:ad:32:25:ed:ba:63:db:7b:ec:45:75:04:32:
f8:81:b9:8e:01:8f:3a:87:8b:35:f6:40:50:bc:99:
c0:a0:8d:52:ab:38:8c:e2:d1:2b:c2:56:e9:be:27:
6c:46:57:2f:e8:67:fb:1e:9d:4d:3e:22:17:2d:a4:
83:4d:36:2f:bc:ea:a2:21:cc:d6:8f:03:25:eb:57:
2a:c1:ee:d9:d3:8a:0d:5b:1c:6f:28:46:43:f7:d9:
53:22:35:63:47:fa:a8:fd:43:6d:c7:9f:72:48:fb:
aa:46:62:95:23:a4:16:06:63:48:2d:3f:d3:35:de:
e3:29:af:79:22:55:3f:20:2a:c0:0a:ca:44:a2:48:
25:93:21:d1:08:45:62:91:4e:47:e0:0d:36:95:4a:
fe:6b:2e:89:87:db:dc:5c:c8:f8:bd:66:33:10:67:
f6:4a:63:21:70:c9:c9:d0:fc:d0:fd:93:43:71:6d:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:33:F1:17:98:3F:D5:02:6F:39:00:66:2A:1C:50:4C:5E:64:89
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:b7:87:03:bb:69:cc:7a:9d:ef:fb:08:32:de:2f:db:a7:
94:03:97:27:e6:13:00:d8:1c:3b:be:a0:79:3a:e3:4d:e8:a5:
fe:71:35:8b:1d:58:75:aa:a9:f1:77:72:9f:21:77:e5:17:ef:
2d:19:44:e1:89:26:b8:15:9a:27:e0:73:24:84:46:4c:ba:81:
44:0b:dc:6e:60:63:c4:9f:78:45:aa:3f:f8:91:ef:a1:3c:d2:
9b:d1:78:a3:39:4d:ee:6e:11:f3:a1:e0:3e:8e:9d:06:28:00:
57:be:0e:39:4c:c3:2e:e2:6a:ea:cf:9b:bf:74:06:00:40:fc:
bf:c2:40:15:1e:3b:56:89:e0:0b:f7:55:69:67:f0:74:9f:9f:
91:6a:f7:a2:11:46:40:87:8f:4b:9e:2e:16:05:f6:d9:12:41:
83:00:99:47:5e:08:74:6f:a6:f4:d3:fd:24:50:c0:86:d3:04:
76:c5:e8:4f:43:f3:53:97:1e:57:cb:4f:06:3d:ae:ed:f7:17:
ca:81:2f:bb:fe:e5:17:81:7d:81:99:e8:a9:63:8b:92:2d:ca:
68:f3:c1:1b:71:30:87:13:a3:5b:4f:7c:2a:37:f6:76:f0:5b:
d1:d9:5d:96:a2:93:ea:ac:f4:a5:7f:d6:5d:46:77:8d:59:ab:
35:36:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:48:51 2026 by rpki-client