Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: UJ+i3i7OPkY+SMnVoFHbgJxTWjSKbVLwaELMF8rVZqQ=
Subject key identifier: 52:07:37:56:6F:C8:96:4C:D7:53:2A:B4:63:6D:E1:65:90:42:52:A1
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01A003CB49086A15C98733CBE510B26DB259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1A06
Signing time: Sat 15 Aug 2026 05:00:49 +0000
Manifest this update: Sat 15 Aug 2026 05:00:49 +0000
Manifest next update: Sun 16 Aug 2026 05:00:49 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: NuuCJyxbby/5A3fyjVmDHwJKLV6T9ot1AberwxuDwsQ=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:49:08:6a:15:c9:87:33:cb:e5:10:b2:6d:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Aug 15 05:00:49 2026 GMT
Not After : Aug 16 05:00:49 2026 GMT
Subject: CN=520737566fc8964cd7532ab4636de165904252a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:4c:39:3e:96:0d:ed:a5:25:5e:a7:32:6d:
7f:f0:5b:c4:ea:b7:fc:92:c5:7e:ce:23:f0:55:46:
7b:6c:05:76:85:5b:7d:5d:8d:23:3a:0e:5a:f5:ae:
cc:c4:ba:91:0a:37:43:de:37:12:3a:03:71:3f:34:
6b:48:cf:6a:39:a1:47:5b:59:39:ba:d0:21:59:cc:
a6:1b:ed:32:e4:05:d3:2b:f8:52:de:08:45:b6:d5:
ba:49:0a:1d:3c:33:db:a6:ca:52:bc:61:58:b2:c8:
f9:20:ad:af:1e:f7:0b:e9:d8:60:5d:89:e2:a5:d9:
84:92:72:f2:f2:3c:1f:28:eb:ea:5e:ca:65:08:1c:
c4:45:1c:a1:82:eb:ff:2c:ef:d0:05:28:e1:0d:67:
59:48:48:79:d5:3b:3b:8d:5a:43:da:a6:60:7f:da:
dd:52:dc:06:d7:5a:b5:e1:a6:4c:d9:37:44:15:c0:
a8:21:03:35:8f:7e:ce:3f:da:fb:98:af:c5:57:62:
5a:59:dd:80:0f:1a:a4:44:3b:09:39:fa:93:b9:de:
bd:36:f3:1a:e1:56:7e:83:f7:3d:ff:17:ee:fc:e4:
78:b6:ed:ef:83:ae:6a:5a:19:1d:a9:91:d7:07:ef:
d2:87:59:f7:9e:f9:f4:69:7f:db:ef:1a:be:18:4f:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:37:56:6F:C8:96:4C:D7:53:2A:B4:63:6D:E1:65:90:42:52:A1
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fd:46:a0:a7:b9:ed:a7:8d:b4:07:df:60:9b:e7:71:81:e5:
75:35:d2:c1:79:68:f1:a0:34:7e:34:bc:52:e9:c4:32:21:91:
57:58:d1:2c:af:4b:7d:71:54:4f:7a:1e:1c:48:76:9b:5c:43:
b3:cf:70:9c:84:61:ba:f1:fd:2f:76:eb:0e:40:a9:31:15:01:
34:b1:34:88:ab:7b:a3:0a:f2:98:8b:62:75:c0:89:30:51:48:
00:c2:90:c4:45:c2:c5:39:67:ec:61:4f:93:83:19:01:5a:d0:
3a:5d:82:c0:4d:bd:d3:66:97:cf:17:57:58:43:54:4c:b9:b2:
69:a8:53:37:84:1c:8a:05:1d:99:41:55:78:c2:94:83:46:4a:
89:b3:8b:c4:d0:bf:9c:ea:82:f9:7e:7d:a6:dd:14:db:15:ce:
b7:7c:64:fe:13:85:b6:7f:e2:15:13:29:36:31:70:89:29:18:
a4:4f:e6:5c:b1:1d:34:63:7a:b9:c4:6b:20:1c:29:7b:3f:d3:
c4:53:4c:fb:ca:1f:78:73:00:03:70:19:5c:9d:54:bf:17:96:
10:25:19:82:42:07:55:fa:ec:10:3f:4c:93:f8:03:e0:77:a4:
67:ee:8d:bc:5a:ef:83:db:a3:ce:a3:b7:85:7c:9e:d9:74:7e:
df:cb:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:15:41 2026 by rpki-client