Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: rbm2T6hYU9AIWvYIh3jG5wrAhvrjqECEKk7As5VMoHg=
Subject key identifier: CC:80:5D:EE:25:AD:3A:A3:DE:72:DD:54:F8:96:70:24:40:27:B0:E3
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 01A12F214E41D51D6C2675C7A2682BD38864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 0287
Signing time: Mon 12 Oct 2026 08:01:14 +0000
Manifest this update: Mon 12 Oct 2026 08:01:14 +0000
Manifest next update: Tue 13 Oct 2026 08:01:14 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: 9uKJ3VOQhH9m0xcQEAxK3PkY3DCZ619w/HXHIxzVi0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:4e:41:d5:1d:6c:26:75:c7:a2:68:2b:d3:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Oct 12 08:01:14 2026 GMT
Not After : Oct 13 08:01:14 2026 GMT
Subject: CN=cc805dee25ad3aa3de72dd54f89670244027b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:22:9b:65:1c:10:eb:3b:cb:3c:d9:6e:a3:
55:aa:70:b3:49:ce:4f:b3:7f:e3:70:cb:fa:99:f7:
69:f4:8a:0d:ae:36:c2:f4:5a:df:04:e4:ef:b8:fe:
99:ea:94:45:04:be:00:7f:c3:27:2c:ae:2d:46:9f:
df:36:4d:f5:24:10:29:b2:10:5c:af:77:97:cc:27:
f3:9d:88:37:87:d9:ab:60:9c:f0:e6:7c:a4:b8:a3:
ed:5e:d1:0b:e9:81:a3:4b:c0:bc:27:a8:2b:c8:04:
37:f3:97:d4:15:79:15:d6:e5:8b:ef:c7:49:48:8a:
67:7a:5c:08:c6:7a:5e:40:76:48:ea:8d:f0:75:e3:
2a:ae:e6:97:39:a4:05:1b:57:30:49:d7:61:b8:0c:
e5:6d:da:2d:91:f5:1b:fe:df:0b:ee:6a:c3:49:0e:
97:ff:44:1e:df:16:4a:05:ab:f8:b7:23:65:ad:36:
c9:fb:83:b2:46:09:2e:1f:f5:e0:1f:7e:c7:6c:b7:
57:f2:e4:85:27:71:08:72:e7:62:f0:4d:9f:d0:5c:
aa:12:51:9b:31:c8:ce:65:c4:0b:a0:56:bd:79:9d:
bc:da:bc:dd:e3:f0:fa:83:a9:d8:87:6b:32:8f:ab:
a5:29:4a:ae:da:41:62:93:16:8d:0f:80:83:95:84:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:5D:EE:25:AD:3A:A3:DE:72:DD:54:F8:96:70:24:40:27:B0:E3
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:65:95:e1:ab:43:45:f9:a7:1b:9e:86:9f:91:3b:d8:eb:
2e:5c:5e:07:47:bb:c4:bc:3f:31:bc:7b:16:0d:b5:05:f7:68:
ab:46:c9:74:8c:57:9c:ea:a8:7a:74:ce:5b:c1:b6:c5:cc:07:
72:1c:38:a0:86:5d:d4:18:1a:7a:63:77:02:d4:22:10:3c:28:
02:b5:9d:a0:06:4c:c0:54:dc:c0:81:f5:0b:f0:a8:fc:9b:63:
51:aa:ab:9c:e2:4d:78:0f:76:64:90:29:32:d1:e0:cf:6a:8b:
f8:00:37:00:3f:95:f2:d5:b6:e9:6f:2f:d6:8b:cd:23:9c:88:
ad:25:d9:c1:d4:91:5f:7b:44:37:f8:34:c8:16:7d:33:6d:9d:
77:59:2d:eb:79:1f:8f:81:a6:7a:81:a7:e7:f9:a3:23:05:65:
fe:44:29:7b:3a:96:44:53:b8:c7:2b:9d:de:44:e3:84:cd:01:
1f:62:23:67:96:95:a4:54:75:75:75:5a:54:ee:fe:48:2c:29:
76:6a:b0:95:07:3f:f4:7f:ad:7e:10:94:6f:3a:00:07:d0:8d:
5b:0f:a9:45:a4:a6:4d:36:3c:6b:4e:f8:2c:95:85:97:00:2d:
f5:98:63:ae:df:1a:af:c3:e8:de:87:93:53:d3:94:76:62:db:
e5:d0:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:15:08 2026 by rpki-client