Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: CPBBuXwaXpIxL+o5baeSRF0weu5G3MF65sBBBTMHHS8=
Subject key identifier: D5:60:98:A1:C2:84:7A:EC:3C:EA:0E:A7:CD:03:17:22:87:A6:52:ED
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01A15B8C0C34CAB8B1ABEF5BD1A998221901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 23:01:07 +0000
Manifest this update: Tue 20 Oct 2026 23:01:07 +0000
Manifest next update: Wed 21 Oct 2026 23:01:07 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: nKZKaO4WvvyKbzmxQ6zPo1low5b/JJj1DnSSjoVw3Sg=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:0c:34:ca:b8:b1:ab:ef:5b:d1:a9:98:22:19:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Oct 20 23:01:07 2026 GMT
Not After : Oct 21 23:01:07 2026 GMT
Subject: CN=d56098a1c2847aec3cea0ea7cd03172287a652ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:15:9e:d1:0b:83:4d:24:00:de:c7:1a:4d:
5c:d8:0d:bb:34:a0:df:1a:2d:a0:2a:2e:a9:eb:4e:
5d:3f:4f:dc:45:ed:32:12:69:56:7f:47:5d:98:2b:
07:bd:29:9f:61:e4:a0:dc:cb:8e:51:5c:2a:71:7e:
fb:36:05:bb:01:87:a9:8f:4e:7d:16:a3:e5:51:44:
53:dc:bd:52:d7:03:1f:fa:23:bf:dc:92:86:1a:23:
7b:46:41:4f:01:81:71:20:aa:e9:bf:d5:18:e0:de:
80:e5:2d:2b:bb:0f:09:0d:18:c9:81:81:20:17:12:
27:bb:87:4c:ca:e5:45:b3:b5:19:c2:7f:6b:57:10:
d6:ca:2f:15:0a:51:4a:47:36:c1:e9:1f:fc:17:95:
2c:60:2f:98:68:4c:62:69:fa:b3:c0:ca:54:95:df:
d8:a3:3e:31:d2:f7:86:f5:c8:c4:e0:d6:fb:06:49:
9f:5d:c9:12:c6:77:34:bd:5b:78:f1:eb:48:f6:16:
da:7e:5e:26:54:9d:cf:a9:95:0d:89:05:29:6c:24:
5b:4c:48:68:ff:d8:f7:69:d8:8c:71:4e:58:98:ca:
a8:0e:da:26:99:d1:c6:98:f5:0f:ee:9d:83:fa:26:
47:68:6f:42:24:84:27:3e:ad:66:03:48:cc:43:a1:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:98:A1:C2:84:7A:EC:3C:EA:0E:A7:CD:03:17:22:87:A6:52:ED
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b1:b2:70:c8:4c:40:c6:32:14:8a:00:4e:57:3d:a1:73:48:
df:aa:44:6b:b2:f4:6c:fc:b2:55:d4:fb:26:a5:71:46:03:87:
2f:2b:a0:e5:5f:66:af:2e:0e:36:d3:cd:49:48:8c:7f:2f:00:
b9:1b:8b:28:55:9f:21:00:eb:f2:d9:f5:92:1b:58:e5:a7:99:
94:48:41:b0:ef:77:d5:eb:39:94:1b:a3:6f:af:01:42:76:38:
ce:1c:b6:e1:1e:58:be:59:ac:f9:05:44:a4:1f:2d:4f:74:3b:
ad:97:16:33:eb:d4:df:71:69:d2:fb:c7:51:96:11:1a:5f:fb:
c6:40:ec:98:6d:d8:5a:b0:51:e7:a8:29:2a:d2:31:c3:35:bb:
73:b1:63:1c:22:96:d4:92:ac:56:d8:6f:70:a4:c6:0d:06:64:
6f:97:4d:11:6b:a1:f9:8e:9e:03:d3:8c:fe:cc:66:6b:58:ca:
b0:40:ae:33:d2:c5:76:16:ef:af:b5:91:73:3c:0b:9c:0c:87:
ca:ca:88:38:0a:9c:bd:1a:ed:08:93:2d:b7:f3:e0:40:43:f1:
f4:6d:ec:45:97:03:37:a1:58:e9:2f:52:2c:63:01:c6:5c:26:
fd:62:a1:90:c7:40:78:9f:6a:c2:2c:2e:b8:5c:a6:c2:91:5b:
2a:b8:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:47 2026 by rpki-client