Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: MVLu2ABuyb470LMOb/BV0yDQWATZSokvugiKPpIk5HM=
Subject key identifier: AE:FC:7B:E1:FD:C1:33:AD:C8:58:FE:33:47:72:0E:0F:C1:0E:CB:95
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A164C63238CEF9A52D7BCEDED76C8B8FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1ADA
Signing time: Thu 22 Oct 2026 18:01:12 +0000
Manifest this update: Thu 22 Oct 2026 18:01:12 +0000
Manifest next update: Fri 23 Oct 2026 18:01:12 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa (hash: he75YWP6CSnWhVc2/UtLhyj8J3gpC2sQruvnzJGb/hw=)
3: JKUeD9Y_DYWzwIgnnR5SK1096p0.roa (hash: viibffM+FBdTp9HKwIvDiMb102oaNg4WwHccGoK3rYI=)
4: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: Irrj0pIIZkxWmydesiSsTL6K7cpT15L/TRMyNTl/C3I=)
5: ks4rcCnYGbAZseomOd2Yfr0zDxU.roa (hash: jhqTfs4Y7TCVLQDf9QvU6rDDBDK9avjiClsJAwUoI4s=)
6: n2xBwpnSaV28EjpZ4lrRbsl97Vc.roa (hash: FDnLj6zPn3dKdyYxvW77+Dt7vnZnD6HiaNp++MfHD2c=)
7: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=)
8: v7RvCMDdWErq2gHhPzdgbrJTsQc.roa (hash: E7ugE/1PAPmkxbHvkS+3vDDe3Al8BCMsYCFX6+imnqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c6:32:38:ce:f9:a5:2d:7b:ce:de:d7:6c:8b:8f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Oct 22 18:01:12 2026 GMT
Not After : Oct 23 18:01:12 2026 GMT
Subject: CN=aefc7be1fdc133adc858fe3347720e0fc10ecb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:99:4d:27:c4:32:06:55:65:a9:06:c6:5d:
97:4f:c9:fa:cb:ed:bf:aa:b2:1c:b3:97:de:5e:cd:
09:df:65:69:48:ed:5e:98:1c:f7:ab:62:63:71:39:
4f:09:58:50:32:ba:be:57:fd:fe:cc:5a:db:8d:0b:
79:c0:6e:bf:0d:f4:c1:01:f2:6c:dc:1d:50:c7:60:
61:a1:1c:d5:41:0e:cd:2b:5a:fe:95:c6:1a:7c:99:
ca:c6:e4:67:1b:7f:b2:30:66:6e:7f:82:dd:c0:4e:
7c:c8:24:08:7a:f0:73:12:15:53:91:13:5e:c2:76:
f1:f2:25:6d:d4:11:2a:a0:b1:ce:54:08:1c:2e:1f:
2a:ee:f2:23:16:8e:11:a3:67:f3:72:9e:98:6b:94:
4e:14:9f:3b:9b:cc:3d:87:1f:c8:d1:57:8a:4e:3a:
08:46:46:37:ff:dd:c1:8a:21:18:0e:3c:a4:29:51:
14:6f:b8:90:4c:3b:96:ea:56:ca:fb:95:6a:18:47:
40:24:12:ed:0a:cd:71:26:bc:14:36:0f:5b:15:5c:
2f:f4:53:37:05:fe:5e:b6:9c:a1:41:ec:3e:4a:73:
4f:62:a9:28:9e:0c:d3:f3:ce:48:2b:4b:2f:ee:d6:
5c:13:3e:72:96:49:95:eb:25:17:f0:ac:f7:61:90:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:7B:E1:FD:C1:33:AD:C8:58:FE:33:47:72:0E:0F:C1:0E:CB:95
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:b3:02:67:14:ce:e2:69:1a:a8:9b:89:52:77:0b:02:f1:
5f:2f:e1:fe:df:f7:8c:46:5b:13:09:7e:80:fb:03:07:dd:14:
b2:0d:f1:ab:7a:a2:c0:6b:af:6b:42:58:2d:b1:ce:ec:2c:25:
64:d7:6a:76:77:2a:7f:1b:0b:31:22:e3:fa:00:d2:b3:d9:6f:
65:2d:02:5c:f5:1e:c8:f9:e5:93:8e:01:0f:20:51:46:cb:6d:
7f:04:3b:07:7d:5b:dc:ff:e6:e6:c5:c8:00:c2:13:4e:6a:64:
ba:0e:0a:c9:8b:c0:c0:a1:74:16:ac:10:c5:ae:59:ce:fd:52:
4d:18:cd:87:08:87:3d:c7:fd:b0:cf:11:64:a0:f1:e2:e5:68:
49:42:88:b1:5f:b3:78:78:3a:c9:7f:96:f1:92:e3:aa:e4:44:
8e:81:ba:72:18:78:df:a0:ce:ca:fc:23:6f:5e:d4:38:e3:34:
90:cd:7d:77:32:01:94:59:b8:bc:0d:c6:18:c9:92:f3:28:fa:
7a:1d:08:b2:76:4c:ef:6f:94:fc:a7:45:e5:1d:e7:00:64:47:
65:9f:f4:d4:d4:c3:76:52:b9:eb:4c:32:f8:d9:b7:b6:d4:fa:
f5:6b:15:2f:ee:57:4e:8f:72:50:ec:74:f8:cd:d9:1e:7a:8b:
22:6a:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 22:59:53 2026 by rpki-client