Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: hbPeRQQ62pUh7daLc9FHj+4kwFFezaMVJmtkJ5C73zM=
Subject key identifier: E0:FF:DA:27:21:C0:CE:C4:F0:44:15:3C:2D:BA:7B:65:B4:C3:6F:A6
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01A0DD2923B5D805B25A36B38F8505BCFD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1A7B
Signing time: Sat 26 Sep 2026 10:00:55 +0000
Manifest this update: Sat 26 Sep 2026 10:00:55 +0000
Manifest next update: Sun 27 Sep 2026 10:00:55 +0000
Files and hashes: 1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
2: bjjnDSARcaH47y0e5cdsRVfrq3M.roa (hash: y8mYW5VfeOpQGMBZcNBmWe7syVuckVK6AOLW1Hiy5HI=)
3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: ldD/BBw97JUaqIWyvNu7KUdq+/3qsEYFT6FXp0LZOis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:23:b5:d8:05:b2:5a:36:b3:8f:85:05:bc:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Sep 26 10:00:55 2026 GMT
Not After : Sep 27 10:00:55 2026 GMT
Subject: CN=e0ffda2721c0cec4f044153c2dba7b65b4c36fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:f4:b8:16:3c:26:9f:76:ee:67:a4:87:10:
79:d9:da:2f:9f:28:98:34:6c:93:00:df:80:85:6e:
9f:e2:c8:e3:d3:18:a2:ee:a8:3d:47:39:de:3e:5c:
2f:87:4d:79:98:15:f9:5c:e2:da:11:e6:90:d7:10:
18:e1:23:97:ce:ad:da:1f:d6:56:3a:57:c8:66:cd:
cd:92:76:6c:39:a0:6b:fd:80:aa:95:e4:db:10:c1:
0d:10:ce:90:bb:1b:77:62:45:87:05:5a:75:32:7b:
19:d8:68:e3:05:da:df:9b:76:0b:48:e4:1d:c8:e2:
2f:9b:d4:9a:0b:a2:1b:88:17:1a:5a:89:bc:56:3c:
e4:f1:a3:8d:67:ed:d6:79:96:0d:46:c0:f4:23:0d:
3b:2b:05:71:4a:2b:32:4e:3c:dc:06:3a:90:8b:62:
2d:57:a0:d3:77:77:3d:19:f7:5c:d7:24:52:31:3c:
53:64:ca:d7:63:7a:69:5f:e7:c5:bc:25:b9:29:56:
95:10:d0:af:01:ea:a4:7f:b8:30:35:2c:d9:e8:a0:
98:e4:82:92:22:6f:20:68:cf:96:3b:66:23:64:38:
f4:7d:e2:a7:af:ec:ba:c1:02:55:e0:b8:02:2f:f6:
91:8f:35:5f:de:ac:64:60:5d:08:bf:7c:c8:9f:40:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:DA:27:21:C0:CE:C4:F0:44:15:3C:2D:BA:7B:65:B4:C3:6F:A6
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:79:38:21:cc:d9:2d:b7:77:da:c8:37:12:11:23:63:83:
c0:cc:fe:e6:7c:48:ab:5f:00:36:b4:c8:62:c7:84:cd:d7:65:
97:85:44:52:63:f3:90:fc:51:a1:16:0c:4e:35:a6:b0:da:72:
9d:58:38:90:b9:57:d1:f8:b7:18:c9:6f:2d:c4:27:89:ce:97:
2c:1d:82:89:e0:72:bd:d8:57:9f:6e:11:5f:18:2d:5f:fe:53:
aa:d3:f0:64:27:3f:e8:a6:a2:11:02:0a:ab:04:50:a4:5c:f3:
81:04:50:7a:a7:c2:20:15:08:88:97:09:5a:8b:a2:c6:cc:8d:
d7:82:50:2c:46:32:6a:13:12:de:75:33:35:48:ae:1e:a6:70:
6f:63:a5:57:c8:16:04:66:34:04:74:46:98:a3:77:9f:dc:bf:
d3:55:0f:e8:61:d5:53:ca:ab:86:1d:b5:e4:b2:50:69:8d:e7:
d1:4a:e4:d8:7d:c8:30:fe:f3:8d:de:1d:66:a9:0f:45:3b:2f:
87:88:3f:c3:04:22:9f:5d:c9:07:e6:06:8e:38:1f:dd:2c:aa:
24:76:80:44:30:66:6e:6b:58:47:21:c1:a1:c6:f5:0b:40:01:
df:64:54:8e:a4:f8:67:e1:36:3f:c6:57:9b:79:aa:52:96:98:
7c:c5:ee:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKSO12AWyWjazj4UFvP1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGI0OGVkYzdhMzI1ZDdmMWFlMGYyNTdjMGUyODM1MTcx
YmM5YWUwHhcNMjYwOTI2MTAwMDU1WhcNMjYwOTI3MTAwMDU1WjAzMTEwLwYDVQQD
EyhlMGZmZGEyNzIxYzBjZWM0ZjA0NDE1M2MyZGJhN2I2NWI0YzM2ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL/0uBY8Jp927mekhxB52dovnyiY
NGyTAN+AhW6f4sjj0xii7qg9RznePlwvh015mBX5XOLaEeaQ1xAY4SOXzq3aH9ZW
OlfIZs3NknZsOaBr/YCqleTbEMENEM6Quxt3YkWHBVp1MnsZ2GjjBdrfm3YLSOQd
yOIvm9SaC6IbiBcaWom8Vjzk8aONZ+3WeZYNRsD0Iw07KwVxSisyTjzcBjqQi2It
V6DTd3c9Gfdc1yRSMTxTZMrXY3ppX+fFvCW5KVaVENCvAeqkf7gwNSzZ6KCY5IKS
Im8gaM+WO2YjZDj0feKnr+y6wQJV4LgCL/aRjzVf3qxkYF0Iv3zIn0CP4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD/2ichwM7E8EQVPC26e2W0w2+mMB8GA1UdIwQY
MBaAFKJLSO3HoyXX8a4PJXwOKDUXG8muMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYt
N2YxZTU3NDg3YzFhLzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYtN2YxZTU3NDg3YzFh
LzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFl5OCHM
2S23d9rINxIRI2ODwMz+5nxIq18ANrTIYseEzddll4VEUmPzkPxRoRYMTjWmsNpy
nVg4kLlX0fi3GMlvLcQnic6XLB2CieByvdhXn24RXxgtX/5TqtPwZCc/6KaiEQIK
qwRQpFzzgQRQeqfCIBUIiJcJWouixsyN14JQLEYyahMS3nUzNUiuHqZwb2OlV8gW
BGY0BHRGmKN3n9y/01UP6GHVU8qrhh215LJQaY3n0Urk2H3IMP7zjd4dZqkPRTsv
h4g/wwQin13JB+YGjjgf3SyqJHaARDBmbmtYRyHBocb1C0AB32RUjqT4Z+E2P8ZX
m3mqUpaYfMXuYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:36 2026 by rpki-client