Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: pnB1kbbPMhvUyzB+itcQ7h6xMpma6K9qyAVWO/1KXNA=
Subject key identifier: 25:9A:86:3F:46:FD:FF:01:B8:C2:DE:DE:68:75:1C:79:B0:F5:07:75
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019F42AD4EB59D889F322CB493CBA7AB1B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 199D
Signing time: Wed 08 Jul 2026 17:01:21 +0000
Manifest this update: Wed 08 Jul 2026 17:01:21 +0000
Manifest next update: Thu 09 Jul 2026 17:01:21 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: nfw+wtheVD7NXS85d8H4GmPkTFRof9hKiYYZpFaQjsE=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ad:4e:b5:9d:88:9f:32:2c:b4:93:cb:a7:ab:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jul 8 17:01:21 2026 GMT
Not After : Jul 9 17:01:21 2026 GMT
Subject: CN=259a863f46fdff01b8c2dede68751c79b0f50775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:c1:42:ca:c9:59:04:cc:02:bd:f5:16:47:
d8:67:1d:db:3c:3c:51:17:34:3e:9c:01:0c:54:c2:
41:19:b9:81:36:11:74:cb:c4:c6:3d:65:3e:39:06:
88:4f:a6:4c:dc:6c:bf:3f:ec:22:4d:88:b8:df:44:
9e:fc:73:a8:12:a3:9c:05:76:b1:bb:95:c6:e3:f3:
2f:78:ba:0e:7e:2c:72:53:b6:cc:e6:53:fb:52:8c:
1b:6f:06:cb:32:29:79:11:32:47:f4:6f:bf:9a:7e:
5d:cf:de:53:57:e9:43:4e:73:5b:6f:35:27:50:1e:
59:f1:44:f7:1c:59:df:d4:61:27:2e:0c:30:e8:d6:
57:ad:1d:56:75:b8:8c:be:b5:fe:c6:50:03:2c:07:
03:bd:e0:d3:e3:51:2e:97:f7:45:58:7a:4f:e3:5c:
b5:0b:7d:65:17:59:e6:84:9e:20:2b:67:ec:24:0e:
a6:10:2d:cd:86:f0:31:72:d9:6f:ca:c8:62:0b:dd:
b3:0b:7f:91:5b:5c:d4:8f:14:52:fd:20:98:13:c7:
54:2c:1f:b5:88:c3:e9:41:41:a5:11:32:13:f4:d6:
32:e5:72:88:e0:30:88:e9:7c:51:0e:b7:18:1c:6f:
c2:e4:23:5f:c0:9b:97:cc:b1:50:aa:9c:bd:96:97:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:86:3F:46:FD:FF:01:B8:C2:DE:DE:68:75:1C:79:B0:F5:07:75
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b7:b5:1a:15:4f:50:94:d5:94:85:dd:f0:3c:b5:04:e2:50:
90:bc:30:38:53:d0:1a:51:ba:74:22:c1:77:3e:a0:2e:c0:df:
20:dd:7e:d7:86:ba:ed:2d:c0:59:79:62:8e:07:1e:79:f9:f8:
69:ec:37:d8:02:d5:70:83:36:14:84:c4:95:20:ed:ef:13:54:
55:f8:53:69:74:b4:a9:1e:30:35:d2:1f:58:b1:2e:7d:e3:7a:
26:c6:30:cc:c6:e1:3e:2a:69:ca:55:70:7a:28:bc:38:85:dd:
2a:03:6b:dc:fa:e4:6f:2d:db:4e:80:dc:f7:c3:2c:c3:3d:0c:
8f:cb:9a:fd:28:23:ff:76:ae:d2:ea:fb:48:b7:e3:5a:b5:6b:
bb:62:0e:5c:1a:3c:98:68:e8:c4:57:f6:b8:87:74:eb:3d:76:
66:70:13:78:4f:82:11:fc:26:d3:45:ac:7b:09:42:db:ae:18:
e4:ba:f4:33:47:a8:ba:bf:54:37:a9:3f:5a:3d:d3:99:d5:4d:
0e:2d:47:74:59:6f:20:0e:c9:9c:3a:62:1f:3d:4f:a0:d9:d4:
05:b9:68:8a:98:3f:d4:4f:c4:ca:ba:1a:82:2b:e9:36:c5:1e:
11:17:e6:ac:39:35:78:d7:1e:cd:c8:84:e7:97:2a:e6:a7:be:
21:fa:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:32:05 2026 by rpki-client