Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: jYAmygA73uEJHAewtQNMUSB1jjwZYOuSJosS2hol3v0=
Subject key identifier: 6F:BD:11:61:39:41:B7:03:79:C6:23:CD:3B:C7:4A:42:C1:07:81:64
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019E326143701EB72BD0F8DFD58635113B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 20:01:35 +0000
Manifest this update: Sat 16 May 2026 20:01:35 +0000
Manifest next update: Sun 17 May 2026 20:01:35 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: qgH2M7vrmQhUiyXD4e1V7GKPNi5q9Tq/UXOHFPHqGEU=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:61:43:70:1e:b7:2b:d0:f8:df:d5:86:35:11:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: May 16 20:01:35 2026 GMT
Not After : May 17 20:01:35 2026 GMT
Subject: CN=6fbd11613941b70379c623cd3bc74a42c1078164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:10:74:c7:ca:11:eb:51:2f:94:d7:cf:1c:
ca:5d:1e:19:b8:79:b1:50:8d:bf:f8:db:a6:52:60:
04:3d:85:61:1a:db:1a:df:bc:7b:d0:e0:b5:57:dc:
ad:4f:5c:52:bb:68:16:96:2a:27:31:55:60:d1:5d:
c6:82:d7:2a:b1:7e:51:2d:06:7c:0f:d1:4c:07:bf:
00:01:b9:73:4f:7d:9e:9a:b6:43:b9:92:2c:db:82:
97:8e:e1:b3:82:a1:0c:f5:6e:5e:f2:11:ad:70:51:
b1:71:07:ed:c8:cb:4f:4a:a0:f5:51:ee:84:79:8d:
b9:be:f8:58:f5:69:bb:74:0e:f2:79:b7:40:40:a0:
bc:be:3f:7a:45:5e:6c:1a:bf:2f:55:1c:a9:d0:33:
f3:2f:cd:26:e2:40:d3:d7:99:c6:03:09:09:96:68:
83:69:73:f4:cc:59:fe:4d:44:0f:ea:04:4f:33:83:
aa:c3:1f:7f:e9:49:3a:91:26:0d:89:57:84:1f:f3:
ce:33:e9:23:93:4b:93:f1:f7:a8:34:29:ab:ab:3d:
cf:76:2c:1d:f3:ed:65:80:02:a5:ee:b8:28:97:41:
16:7d:50:86:2c:3a:7c:85:41:2c:6f:4f:a8:d0:82:
a0:bb:06:38:14:b4:2f:e2:0f:57:c5:29:14:95:84:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:11:61:39:41:B7:03:79:C6:23:CD:3B:C7:4A:42:C1:07:81:64
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:a6:10:c0:40:ff:f2:06:73:34:e5:e2:d3:db:c6:6f:22:
e5:8a:aa:4b:cf:c5:b9:0c:c6:ce:4b:e8:b8:a2:d6:38:9b:96:
c9:e0:75:28:63:e6:16:be:bb:3d:cb:4f:16:4a:fc:f8:33:fc:
52:42:b7:ea:5e:69:1f:31:9b:83:03:84:50:09:92:e0:ac:fe:
0d:4e:c9:72:1b:1e:36:90:c2:ef:df:a8:c5:d2:3f:b9:2f:14:
3c:a0:84:fb:5d:a8:c3:13:d2:11:6c:12:5c:c8:33:69:31:00:
86:cf:ea:3f:fa:fa:ed:e1:11:5e:17:47:2f:04:83:b7:c4:72:
25:40:2c:3c:27:ad:36:21:12:b0:f0:ef:de:9e:b1:29:f5:a4:
5a:60:e9:79:76:29:e6:53:61:1f:c2:7f:a7:5d:a0:ff:59:94:
b4:ac:68:3b:a3:94:b8:26:4d:56:ea:47:e3:36:4e:83:8c:cc:
a9:18:3e:21:c4:3a:e0:43:27:ba:0a:31:15:af:14:c7:43:9a:
db:a0:e9:3b:91:98:43:1c:75:ea:d0:2a:08:3d:b9:58:bd:d4:
5c:aa:cb:84:47:7a:f2:c4:23:09:6e:16:46:9a:7c:c1:5c:55:
87:32:1a:fd:c0:62:82:f2:66:40:54:6a:9a:fc:83:7a:cd:ca:
fa:a0:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:18 2026 by rpki-client