Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: 5p3JEYlXTLWfRvlXCUQC/li3bW5ExCFy8Gh+jpeTrKE=
Subject key identifier: 03:BF:BC:15:A9:08:D0:ED:E6:F8:4A:71:0A:E7:8E:11:AE:77:87:A2
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019F9248CEFFACFCE602C1991B44034A269B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 04:01:12 +0000
Manifest this update: Fri 24 Jul 2026 04:01:12 +0000
Manifest next update: Sat 25 Jul 2026 04:01:12 +0000
Files and hashes: 1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
2: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (hash: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg=)
3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: 9GxkmZz9/JUQ5iTCa+EASVDBAiyJz6TGLwF0/adSSks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ce:ff:ac:fc:e6:02:c1:99:1b:44:03:4a:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jul 24 04:01:12 2026 GMT
Not After : Jul 25 04:01:12 2026 GMT
Subject: CN=03bfbc15a908d0ede6f84a710ae78e11ae7787a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:57:2e:65:27:6f:eb:24:ca:48:4e:57:98:
d1:de:58:4b:68:d6:7c:90:f2:b5:0b:46:dd:b3:83:
ab:a1:64:b2:42:2f:9e:5a:3c:83:ff:b9:36:97:37:
65:e1:66:45:1a:91:10:ea:e5:a8:ab:78:ce:9d:58:
cf:0b:cc:8b:9f:55:c3:d8:84:53:3a:b8:2a:78:9d:
19:b0:2f:b0:44:13:ba:69:ce:d1:11:e7:a9:3e:83:
c1:c9:09:b7:a9:eb:41:87:0a:9b:60:6e:92:5f:2d:
e2:d0:30:de:36:3e:63:67:78:6f:51:ca:87:9a:65:
0a:01:21:85:fa:d6:aa:09:45:d8:1a:21:d4:40:b4:
ad:d2:b1:b7:69:aa:1f:fd:5b:72:f3:c2:a9:d6:4d:
57:0b:41:45:44:b9:45:37:89:70:0f:a4:e7:bf:b5:
c2:13:89:cf:12:fc:f5:54:72:85:65:95:93:74:ff:
e3:5b:98:cc:f4:5d:8a:3f:ca:95:ee:e0:ce:e7:e6:
ae:d9:f0:fd:78:fb:f4:dc:2f:38:76:ed:1a:bc:df:
2f:74:46:50:a1:c9:ed:c1:88:02:ba:66:9a:bb:2e:
86:ae:28:44:1c:aa:7e:2e:09:8c:5b:70:78:61:02:
5b:dd:a8:28:73:dd:b2:40:a4:30:47:af:5b:c7:74:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:BC:15:A9:08:D0:ED:E6:F8:4A:71:0A:E7:8E:11:AE:77:87:A2
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:2d:ce:ca:9f:2b:95:f0:97:43:25:17:64:40:1b:94:3c:
a4:3a:69:9b:13:dc:76:74:06:67:33:f4:59:0e:7a:e4:35:fe:
d0:6b:67:dd:97:4d:fa:55:b8:6f:23:bf:fc:5e:5e:22:5f:82:
8d:b3:de:ec:09:0a:c4:c6:db:74:bc:59:cb:c3:d6:69:00:08:
a8:34:e5:ce:6b:c0:e6:7b:b2:d0:84:d3:82:aa:03:1c:d8:4d:
29:71:ab:99:6d:2f:c5:18:4f:e3:ab:71:6e:d3:0b:42:62:f9:
75:37:b3:61:3c:7d:2c:e0:85:9a:cc:10:06:03:b4:2f:eb:ca:
5f:84:43:74:3a:e3:56:5b:31:c4:de:75:a4:06:a3:3b:42:99:
ed:97:ed:9a:30:92:6c:8e:86:d1:62:d4:34:2d:3d:cb:0f:34:
b8:7b:6f:57:b1:97:c6:e3:f9:40:56:42:f0:68:05:35:f0:76:
bb:56:47:ee:92:19:99:04:ac:d6:1a:08:1b:a4:bd:4d:6c:21:
08:d7:de:73:72:76:71:02:6c:8f:39:00:24:47:22:f5:ec:f3:
fc:69:e7:dd:e6:b8:19:96:05:e1:c0:d3:90:0b:23:ce:d9:cf:
67:cc:cd:54:d2:0e:c9:1c:8e:35:4f:a4:f7:73:48:d3:ba:ff:
58:f6:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:11 2026 by rpki-client