Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: 19jmxlkSi1bkHyPSoT6e+glHq1vJbIEHxgZs4xoDj6M=
Subject key identifier: 0F:9E:EE:82:89:AB:B4:FF:69:08:67:EA:66:62:A7:C3:AC:B3:5D:8B
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 01A134EC93727FBBF016A3AEFE165DAD31E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 028A
Signing time: Tue 13 Oct 2026 11:01:21 +0000
Manifest this update: Tue 13 Oct 2026 11:01:21 +0000
Manifest next update: Wed 14 Oct 2026 11:01:21 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: QXuVefiq8E0ruj98sbULHZGMBnA3gy5l+F2v2fKxEwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:93:72:7f:bb:f0:16:a3:ae:fe:16:5d:ad:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Oct 13 11:01:21 2026 GMT
Not After : Oct 14 11:01:21 2026 GMT
Subject: CN=0f9eee8289abb4ff690867ea6662a7c3acb35d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:c0:71:19:02:7a:d6:bf:82:95:51:fa:12:
5f:bd:24:3f:2b:36:dd:cb:37:13:d2:db:c5:6c:dc:
00:d4:2e:39:18:54:9f:75:0f:17:8e:f6:a2:50:30:
ab:cf:6b:4c:3d:d4:e3:3e:40:20:90:78:bc:07:6f:
f6:c3:5d:f9:8b:0c:8f:f0:ba:9e:ad:aa:7b:48:23:
98:b3:8a:13:e5:fe:28:d8:d9:8f:f9:e2:89:dc:41:
3f:74:b6:5b:5c:68:74:8a:c0:f4:aa:9c:e4:67:c6:
4f:e4:37:27:1b:a8:30:38:8d:df:55:d9:ce:d6:82:
57:70:aa:f8:ad:f1:6e:48:9a:15:44:0c:aa:22:8b:
ee:cb:81:ef:f9:83:1d:27:d7:62:a6:64:0d:18:1f:
d2:f7:33:bf:d5:18:d7:7a:e7:d6:6e:6f:23:44:47:
8c:0e:2e:79:79:dc:3c:b8:36:53:6a:ae:0e:bd:e0:
8e:c6:e0:85:23:fd:75:03:b2:2c:94:de:73:9e:0a:
a0:2f:10:b6:c7:42:0a:44:ef:73:ce:39:81:94:f5:
a2:a4:bd:bb:36:11:48:33:90:92:d9:c1:66:03:ee:
40:d3:3e:07:92:71:51:92:e0:3e:86:e9:96:11:86:
a5:7e:a6:6b:9a:54:92:f0:69:dc:e0:c4:7d:5f:56:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:EE:82:89:AB:B4:FF:69:08:67:EA:66:62:A7:C3:AC:B3:5D:8B
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:35:5a:a9:fe:8d:cf:6b:23:36:53:cf:1e:13:c6:cc:a9:19:
19:97:2b:ae:2c:63:65:c4:61:01:78:9a:b1:8c:ec:42:5b:41:
02:8a:0e:1f:a7:21:03:2e:3c:d9:37:9b:dd:66:4c:10:4e:57:
db:d9:8d:09:47:7f:4a:af:c2:ec:10:7d:78:6f:19:ea:93:79:
83:4b:47:1c:be:7d:37:7a:23:4b:36:24:28:80:e2:17:53:c5:
d4:be:88:bc:88:9c:ee:c0:86:8a:c7:b8:4b:e0:9e:69:b8:9c:
85:65:7a:df:7f:06:bf:58:48:9e:cc:48:db:c8:97:e9:4e:10:
22:8b:35:48:2f:01:eb:af:6c:e2:59:63:4f:87:f2:f7:dc:0e:
23:97:f4:a2:25:02:61:d4:31:1e:b7:1b:63:8d:e7:40:a2:c4:
fd:a7:e7:10:b5:37:74:98:e6:d6:e1:a4:ce:75:89:9e:9c:33:
41:a5:55:4c:cc:1d:ca:3e:93:e4:37:2a:76:8d:1d:a3:96:20:
d4:f6:0b:f8:d2:a5:c1:3b:70:f2:f9:79:1c:07:24:1d:32:f4:
c1:99:25:aa:96:29:92:2c:b8:ed:98:88:4e:95:0d:b8:ff:99:
02:55:2f:11:05:cd:75:7e:b6:2f:87:92:a3:4a:c6:21:36:f6:
bd:b2:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:33:52 2026 by rpki-client