Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: csCW2isIYAhV6Lg2Sh7maT+5uLE/dQ/4ZBD7M99duFY=
Subject key identifier: DA:73:43:31:0E:4C:8C:D1:79:D6:26:03:5A:1F:D6:64:7E:81:C8:3B
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019D37532E2247605630DF839D1C8B818D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:31 +0000
Manifest this update: Sun 29 Mar 2026 02:01:31 +0000
Manifest next update: Mon 30 Mar 2026 02:01:31 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: BXHI+hRi4iPxJ91jDL9XvlsGOsySe6Bp5cz8/oB00hg=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2e:22:47:60:56:30:df:83:9d:1c:8b:81:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Mar 29 02:01:31 2026 GMT
Not After : Mar 30 02:01:31 2026 GMT
Subject: CN=da7343310e4c8cd179d626035a1fd6647e81c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:97:bd:32:41:f8:37:71:89:6b:a5:8e:10:
b7:30:7c:cd:29:02:07:19:4c:cd:f4:9d:88:d2:61:
a7:a1:e8:72:93:24:cd:97:82:9e:3e:40:50:90:7a:
8b:64:b7:18:11:42:ba:b4:82:ba:74:0e:4c:a5:0d:
e9:3e:c9:4e:7f:91:76:3e:43:e9:db:c7:c1:23:be:
c0:69:4f:cf:db:cd:75:98:47:21:72:cb:50:06:32:
49:20:f3:1c:70:0a:cb:61:e7:58:9d:aa:3e:a3:7f:
19:73:05:16:d0:e2:1f:d7:5a:0c:c4:47:32:c0:42:
a6:72:34:6c:2f:95:37:ff:6a:0a:0f:70:2b:16:fd:
c3:3d:cb:2e:2a:13:b8:13:02:d1:be:97:1e:b3:7f:
4a:18:86:dc:ad:4a:20:04:52:22:29:56:c7:b1:f5:
04:47:5b:2b:f8:e7:2f:69:bc:92:c9:05:0a:06:84:
95:7a:6c:60:58:11:4d:9a:26:3e:87:5f:62:68:0c:
6c:bb:fc:68:ba:cf:0d:35:c6:18:6c:11:3b:11:bd:
cb:8b:54:b6:5a:f0:58:f2:04:75:9a:12:4a:f6:a0:
8d:d0:5f:82:7f:e0:7c:d7:9d:50:cf:ba:51:2c:c4:
29:f6:a9:bd:06:71:77:75:14:2a:b3:84:c4:c9:74:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:43:31:0E:4C:8C:D1:79:D6:26:03:5A:1F:D6:64:7E:81:C8:3B
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9f:35:0a:00:b1:6b:9c:9c:16:0a:5c:d3:62:f7:8f:bc:77:
f7:42:8f:d5:ad:15:bd:29:61:81:5b:a4:dc:16:a1:20:e1:04:
3e:a0:2c:7b:29:4b:f4:79:c8:db:30:91:51:53:91:14:29:82:
b1:1f:74:d0:b4:bd:1f:b8:6d:a3:25:1e:76:07:1b:65:d0:fc:
66:22:a6:e1:52:0a:75:23:96:56:07:47:1b:71:4d:3c:6c:97:
ed:d7:38:1c:ae:df:d0:d7:5c:37:e5:53:df:77:20:ad:cc:6e:
44:d2:a8:60:f2:05:05:2c:f0:70:9d:9a:04:99:9a:d0:c3:ca:
a2:a7:fc:83:47:16:86:3f:2b:cc:e2:13:2e:81:cd:82:28:70:
f2:04:ae:a7:80:e1:a9:d5:42:82:5c:ba:0a:38:83:40:18:1a:
a5:8d:f0:d0:d6:00:5d:93:a1:e7:b1:2e:50:30:69:66:f6:c0:
5b:00:a0:aa:95:8e:17:cd:1c:54:53:3a:ce:36:7f:be:6d:3e:
ef:01:c4:3d:31:25:21:c0:65:50:12:11:7a:30:6e:5d:16:1d:
66:6a:b6:92:40:0b:2e:b5:4b:f2:13:bf:d6:f6:05:58:49:20:
f8:7c:d5:e7:b2:63:37:be:2b:bd:2f:ae:ca:e4:0e:55:f0:3a:
dc:82:69:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:23 2026 by rpki-client