Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 1eO5I22aHYcYERMr9UDH0WpIrfQp7F7qy4ACc1lsR3I=
Subject key identifier: 1A:26:EE:55:8E:80:C9:AE:33:E2:40:09:F2:2D:E6:17:0F:53:C7:7D
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01A16AFEC30837C92F4391586E7E55AA6371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1ABB
Signing time: Fri 23 Oct 2026 23:00:43 +0000
Manifest this update: Fri 23 Oct 2026 23:00:43 +0000
Manifest next update: Sat 24 Oct 2026 23:00:43 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: WuSdtPRe73b/XRCYJDjYhKwfOWKylESph6HFS19i1L4=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:fe:c3:08:37:c9:2f:43:91:58:6e:7e:55:aa:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Oct 23 23:00:43 2026 GMT
Not After : Oct 24 23:00:43 2026 GMT
Subject: CN=1a26ee558e80c9ae33e24009f22de6170f53c77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:ba:8b:40:87:31:92:f6:07:fd:d5:6b:11:
bb:e6:5f:6a:0b:b6:c1:06:94:f1:d8:5d:ba:3c:8c:
89:70:09:58:31:9d:59:44:08:4f:b8:24:f4:f8:5d:
96:3e:40:fa:d5:b6:41:f0:50:3f:86:03:11:29:9d:
0b:08:bf:c6:d0:0e:87:b9:61:4d:a9:51:06:c7:f5:
59:28:8c:1a:ba:fa:36:82:33:fa:c6:45:9b:01:a0:
c2:a8:76:1d:08:b5:56:26:0c:72:a0:54:4b:33:a2:
2e:74:0b:f3:7c:fd:cb:55:d8:e2:3f:c2:dc:d5:ac:
3b:b2:54:98:36:1e:d9:65:2a:d7:d6:53:5e:c5:c2:
17:ab:b4:3f:58:a2:c0:e0:21:6f:1c:cd:7e:f3:fd:
e2:0b:1d:29:41:65:2b:3b:2d:68:79:00:55:9a:f9:
93:db:dd:7a:b8:0e:ae:34:be:16:42:2b:a9:a0:0d:
79:09:b1:29:1e:05:14:22:7c:a0:42:f1:ef:f8:10:
ea:45:88:0b:0f:0c:8b:fb:79:10:d6:95:2c:e4:14:
d5:27:22:67:f8:cd:b7:31:72:36:98:8c:c5:6e:83:
17:42:06:b3:08:75:ce:b9:fb:f6:bd:57:25:c2:2d:
b2:ba:f8:33:e4:7f:3e:fd:ba:ff:37:5e:47:f5:db:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:EE:55:8E:80:C9:AE:33:E2:40:09:F2:2D:E6:17:0F:53:C7:7D
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:0b:8a:b7:ef:64:cf:24:c0:4e:04:b5:a1:fd:7b:9a:42:
08:9f:15:b7:61:a4:b9:93:e1:3d:85:cf:77:50:31:0e:5b:99:
1c:66:a9:16:42:fc:b6:d8:fc:ec:1a:49:a3:a5:99:01:22:29:
ea:6e:7e:c6:71:fb:53:5b:3d:d2:a6:21:26:e6:ab:c9:78:3d:
f1:1f:ca:24:fe:21:dc:db:43:d6:ad:f1:83:e1:00:60:33:e4:
f3:1e:31:fc:e4:a8:ee:a8:22:b8:cb:8c:25:5d:c3:24:a8:a3:
18:5f:dc:43:3d:e1:71:52:03:40:c1:de:5e:ec:18:9b:aa:8c:
5c:71:7a:5d:0b:39:ae:ee:32:28:f1:90:33:39:64:fe:b8:22:
ad:31:f8:c5:ed:5a:c9:de:c1:59:c4:f6:f4:68:ab:46:77:54:
54:51:04:11:fc:81:6b:6f:f6:1d:76:62:5f:2c:af:e8:34:16:
76:af:02:71:54:c3:18:ef:bd:46:8b:36:1a:8d:bf:33:77:dc:
09:d1:e4:68:18:ec:fc:cc:72:02:c8:95:d7:b3:37:29:43:6c:
0c:91:61:60:c0:a5:b4:ad:b2:a2:07:a4:42:1f:82:e9:e6:6b:
d2:a7:f3:19:c7:db:ec:1b:15:58:e0:a7:47:a1:30:56:4e:65:
4d:8b:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:25:44 2026 by rpki-client