Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 602YsYY9k15WnwVc9XsaSUG1xIc94uxHoQTZu2fAS8w=
Subject key identifier: 26:EC:5E:53:1C:FF:B1:73:38:F6:E0:27:3B:7D:C0:A3:73:86:10:3A
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01A02A6ACD67C363E4BC4FDBB7B4BA7DC206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1A15
Signing time: Sat 22 Aug 2026 17:00:37 +0000
Manifest this update: Sat 22 Aug 2026 17:00:37 +0000
Manifest next update: Sun 23 Aug 2026 17:00:37 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: XQuQ3oOHKtWBySo0S+FSurl/85YTwpaEH+3PptBGgp4=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:6a:cd:67:c3:63:e4:bc:4f:db:b7:b4:ba:7d:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Aug 22 17:00:37 2026 GMT
Not After : Aug 23 17:00:37 2026 GMT
Subject: CN=26ec5e531cffb17338f6e0273b7dc0a37386103a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:a4:1a:99:86:91:53:fb:22:a0:87:23:64:
76:90:a7:00:68:b4:18:0c:ee:c0:6b:58:ff:f1:cb:
2e:1d:1f:a2:eb:f1:ec:e8:c9:80:09:75:ff:82:b3:
54:2f:18:a5:78:ed:a2:1c:c7:a4:40:2b:ec:86:30:
a2:92:5a:90:53:17:f9:6a:bc:55:4b:b2:25:e8:24:
56:16:90:0a:55:57:62:9f:fe:63:84:90:39:ca:cb:
c9:87:a0:57:ab:4f:6d:ae:93:ee:ee:12:b8:28:1b:
57:3d:6d:ce:a2:d6:7f:47:ec:c8:0e:8a:6b:b2:5b:
06:8f:de:e1:71:9a:a9:81:f8:64:94:d7:54:e8:f8:
3d:3e:45:2d:9d:e3:50:38:4c:c5:f6:22:1c:33:2f:
0e:2f:ec:89:04:b8:24:9b:56:77:6c:48:a4:bd:7f:
b0:6a:77:5f:c1:01:24:03:66:cc:94:6e:a5:53:f6:
cb:79:df:93:63:cf:eb:ac:f2:80:2a:56:42:57:7f:
f4:36:16:45:c4:23:fb:52:e5:1c:f7:35:d5:4c:c0:
ea:3b:9c:90:77:4e:44:9f:40:25:3e:7b:c7:36:ae:
5a:0f:47:24:7f:80:5c:2c:15:db:98:6e:5f:fc:56:
10:8c:a6:1e:99:51:8e:1f:5a:39:4d:9d:8b:ec:1d:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:5E:53:1C:FF:B1:73:38:F6:E0:27:3B:7D:C0:A3:73:86:10:3A
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:46:39:9f:53:58:02:45:b0:18:ec:eb:d2:a8:53:ed:f4:
de:f9:78:29:3d:a1:e7:36:15:9a:d7:40:71:8a:4b:c1:7f:9c:
ed:c8:c5:eb:7d:35:ce:3b:cb:e7:a7:ba:7c:13:6e:64:2e:1d:
e2:df:a6:7b:37:d1:3d:18:9f:6c:51:f3:0b:66:e8:81:85:ef:
42:0a:46:f2:58:5b:b1:5d:f8:69:d8:81:b1:bc:6c:43:7a:96:
1c:5f:ad:f3:66:ca:59:9c:32:01:28:39:47:d7:f0:93:2f:a0:
9a:88:10:db:fb:f6:96:cf:53:10:ed:39:76:61:a2:2a:df:6e:
b3:74:7f:ba:56:20:45:26:9d:10:2e:a2:40:7e:08:15:1d:27:
4f:ae:91:89:55:a8:dd:dd:3a:ae:26:b1:f4:66:d0:99:c4:fa:
cd:38:6a:59:93:dd:cd:8a:5c:4d:de:e0:3b:81:4b:3d:d0:de:
64:f1:4a:dd:be:3b:84:92:0a:67:99:64:9e:89:46:f6:2c:2a:
54:18:8d:db:4c:e7:0c:17:d3:a6:ff:2f:c5:6e:fc:5d:44:93:
2b:0e:b1:33:19:7c:ba:12:b5:91:ee:ea:60:2b:47:18:12:82:
39:38:ec:20:26:78:8e:c4:91:ec:5d:34:3d:ff:c7:ad:cb:9d:
5e:43:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:22:07 2026 by rpki-client