Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: qeTOeInBXBK2DHGcAFWZca0AtokwKmWwADlsB5S6QU0=
Subject key identifier: 80:8B:B0:56:3D:83:AF:9E:67:D9:72:04:8E:2C:DA:46:B0:A9:80:45
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019E3260CDCA2D7090AE8909CD6414973625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 20:01:04 +0000
Manifest this update: Sat 16 May 2026 20:01:04 +0000
Manifest next update: Sun 17 May 2026 20:01:04 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: fD98Ht5PK85IPkQHpDEekA9117DfiJUiGCmuYphdtHs=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:cd:ca:2d:70:90:ae:89:09:cd:64:14:97:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: May 16 20:01:04 2026 GMT
Not After : May 17 20:01:04 2026 GMT
Subject: CN=808bb0563d83af9e67d972048e2cda46b0a98045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:a8:6a:a1:15:c0:89:6f:01:34:37:4d:68:
33:e7:3d:17:9c:90:46:32:a9:17:84:b9:ba:d2:17:
70:5f:e1:eb:1c:18:5b:15:0f:07:ca:59:15:cc:9f:
70:fe:a0:7a:02:e2:a1:4d:a8:d1:73:d8:b8:49:03:
96:0f:86:09:ed:44:4a:24:8e:c8:49:94:a8:65:58:
78:70:a1:15:f0:cc:85:89:78:b4:53:21:8e:1e:d4:
48:ad:89:d7:45:3f:49:ba:59:a9:49:26:a5:fa:28:
1c:b9:ec:5c:3e:e5:7d:79:f6:83:be:bc:fd:6d:17:
21:67:32:af:0f:7c:84:20:8d:d0:ab:de:c0:ac:20:
1a:9b:f8:80:bb:1a:6b:cc:30:ee:74:dc:21:16:24:
2f:72:d9:0e:ea:9c:de:ec:a8:d9:1c:f9:b9:9d:22:
4f:1e:70:ac:27:98:9a:21:1f:a0:65:e0:01:d8:71:
ad:5b:31:df:ba:9a:d9:15:74:c5:5b:be:80:96:fd:
26:87:0d:f0:56:17:2b:7f:5a:19:52:c7:d9:ac:1b:
8d:2f:6d:c8:88:37:fd:fe:69:70:e8:16:bf:6b:b4:
1d:c4:7f:ff:8c:bf:52:e3:f9:ac:92:15:17:d6:2c:
37:b2:87:c3:de:ef:f3:26:1b:a4:2f:1c:1d:f4:d2:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:B0:56:3D:83:AF:9E:67:D9:72:04:8E:2C:DA:46:B0:A9:80:45
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2a:fb:6b:5d:48:2c:77:ee:2f:97:af:49:fa:82:3b:2e:58:
a9:f7:91:d4:9a:3e:28:d1:f8:a0:99:e4:59:fd:00:0f:01:28:
7c:e4:e7:1e:19:ca:19:da:8b:89:e2:94:2d:aa:ce:f2:95:c3:
6b:21:9d:fa:ad:31:9b:dd:04:ba:5f:6a:10:ec:b6:c0:75:34:
2c:2e:43:0d:10:08:8c:07:dd:ac:a2:1b:ca:02:cd:3f:cc:b1:
06:af:8d:df:dc:97:aa:66:05:d0:bc:10:af:e4:cc:65:5e:bf:
80:4c:f0:e0:8f:d4:05:80:80:1b:15:8f:5a:90:bc:75:16:9d:
04:f5:65:e1:7e:62:16:10:7f:2b:05:51:2d:19:17:75:b6:eb:
22:ea:76:23:30:40:55:ac:a4:ff:8a:45:73:8a:64:33:7f:a1:
28:50:5f:e2:52:22:68:a3:6c:f1:b2:e7:86:84:ff:3c:82:63:
70:9c:75:ae:18:fa:b0:7b:2a:02:f2:7e:63:61:cb:d1:ce:c1:
77:78:f9:80:7f:5c:af:65:5a:bf:72:24:e7:9f:c5:0d:36:02:
65:32:84:35:9c:ce:c7:e9:4f:9e:22:c0:3c:49:39:0f:77:49:
c5:92:73:e0:99:73:28:f6:0a:00:d6:d4:5a:bc:45:86:7f:5f:
c0:55:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:25 2026 by rpki-client