Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: nK1Vnqsz2HGP7mX0TKiOeMLxT+p/QQ9hjN0eTi3uHHA=
Subject key identifier: 5A:AD:50:57:4E:01:E3:06:CE:4A:D9:64:20:2B:2F:C1:C9:DD:8C:CD
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01A151E46C6DDE044241664FC3159C71E15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1AB4
Signing time: Mon 19 Oct 2026 02:01:26 +0000
Manifest this update: Mon 19 Oct 2026 02:01:26 +0000
Manifest next update: Tue 20 Oct 2026 02:01:26 +0000
Files and hashes: 1: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: YkPw4BIiWJbihjU7yuztF8jt/pxI0zhUoaXHg1dnS8s=)
2: VDGAnHpl5uIiCZlcLHMHcNboi4s.roa (hash: 6OaDDV129KN8ZYvAUAXKs/iJaVf9l67g5SnoqL8ZCbE=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:6c:6d:de:04:42:41:66:4f:c3:15:9c:71:e1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Oct 19 02:01:26 2026 GMT
Not After : Oct 20 02:01:26 2026 GMT
Subject: CN=5aad50574e01e306ce4ad964202b2fc1c9dd8ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:ba:1b:4f:8f:26:44:5a:79:c3:9b:19:c0:
45:ab:d9:c6:f6:1a:be:8e:3f:96:bc:0b:30:83:c5:
5f:6b:04:ae:46:a0:7e:73:84:25:03:6d:b3:f6:8e:
64:a6:23:d8:b7:c6:62:42:df:99:5d:37:15:cc:ff:
2e:a2:ab:39:8a:c6:44:1b:59:92:35:52:e3:91:69:
87:4f:c5:cd:45:a6:10:e2:46:6d:8e:2a:8f:c7:fe:
ec:e5:df:a6:94:0d:72:29:1e:10:98:a9:09:b7:4e:
64:44:f6:7f:a3:48:06:61:c1:b9:7c:51:82:e3:fc:
db:cb:f4:99:1b:07:ca:40:0f:ae:e6:d6:ea:21:c0:
ec:36:55:90:17:bc:8c:b4:65:b6:15:4d:43:05:48:
56:a6:cf:d0:fb:c8:61:8f:1d:8d:37:d2:ac:7d:9c:
49:a0:36:90:dc:d5:eb:84:9f:89:7d:ca:ae:1b:f5:
a1:21:6c:bc:5e:77:91:35:fa:c2:30:34:35:30:6b:
12:ab:cd:a5:bc:69:67:1f:19:f7:c0:45:f6:7b:d8:
c4:6e:14:58:f7:1e:7d:6e:24:82:be:26:d1:fd:fa:
34:10:a5:91:a7:b7:9d:77:ab:91:c3:de:6d:c4:d7:
80:5b:fc:e8:07:d1:b2:57:6b:74:42:0f:3c:47:11:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:50:57:4E:01:E3:06:CE:4A:D9:64:20:2B:2F:C1:C9:DD:8C:CD
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:67:7b:58:f3:c6:c4:a1:7c:0b:e4:07:fa:83:69:56:be:b2:
fa:13:5f:b0:67:5f:da:16:83:13:55:60:d7:f1:b3:7c:82:5c:
07:54:39:49:0d:07:03:68:7a:0b:80:4b:10:c7:54:0e:c8:db:
83:53:32:8e:e7:5e:4a:9e:9d:b8:e1:ee:a5:21:c0:12:0c:40:
2d:f2:19:61:31:28:d2:de:74:ce:83:71:1f:38:b9:be:ec:04:
93:3a:33:78:0a:4c:c2:db:fd:89:4d:7d:c0:75:89:16:6c:79:
38:e8:7f:f3:af:cd:57:4a:1f:7b:6b:6f:53:61:e4:31:a5:92:
34:3b:4f:a8:ac:e6:3b:f1:36:61:3f:e3:72:ce:66:ce:fa:96:
ab:e0:9d:cb:a1:98:c1:2b:28:3e:7e:78:31:99:35:ba:bb:36:
a4:9b:b6:77:5f:5d:d1:b7:81:d2:64:0a:b0:c9:1c:77:2c:22:
4b:51:4f:02:8d:2b:02:ff:70:e8:20:53:9f:07:56:cb:c9:02:
b9:26:f8:73:c9:27:84:5c:5c:ef:34:a6:c3:97:00:50:42:72:
e5:40:18:ba:ff:43:bf:84:e7:b9:8f:6f:be:68:ae:3c:e2:7d:
c0:26:6a:d4:24:09:80:60:d9:e4:6e:72:8f:a2:a2:78:7a:1a:
96:df:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:51 2026 by rpki-client