
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: OKFxjc3BNknaEw8HYTMup9MwWXxocnuType6Le5ERIU=
Subject key identifier: B2:FF:39:92:7E:CB:B3:61:8F:27:E4:54:D8:E7:CA:98:D5:25:C1:DD
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019E1D901A63496118C193DC6826DEFBB36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
2: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (hash: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg=)
3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: P3kEbI6bcudDxarrUQvVKJqOI+ycDPYZiGDTcUTnRw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1a:63:49:61:18:c1:93:dc:68:26:de:fb:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=b2ff39927ecbb3618f27e454d8e7ca98d525c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:a5:6c:43:e0:3a:83:22:68:d5:b6:2f:61:
b1:c0:1e:ad:d8:4e:48:7c:b8:27:b9:f9:d5:2f:cb:
cb:e3:ff:4b:21:e3:36:e1:b0:7b:8e:eb:a5:ff:a9:
81:86:de:7b:04:f3:aa:21:d4:29:80:d3:f4:bd:63:
22:28:04:95:59:2f:87:da:32:2b:4f:bb:18:7b:96:
8f:51:66:bc:19:63:2d:e7:98:01:d5:c7:b2:eb:48:
c3:4c:78:74:6f:be:eb:be:2e:c4:93:12:ab:cb:37:
d8:ad:68:3d:9a:bd:4a:21:f1:93:86:b7:85:15:b9:
63:4c:8e:5d:2c:b3:16:ff:99:d1:c6:96:df:7c:96:
40:c1:9d:69:f4:ce:02:cf:99:f0:b5:09:74:a1:cb:
be:6c:e3:15:37:2a:46:a0:d9:66:fe:94:9b:de:d6:
eb:2c:9e:5d:47:96:8d:ba:8e:05:b2:d8:69:0d:60:
78:22:f9:8a:37:f4:d9:de:fc:44:19:01:59:73:8e:
86:42:b3:3f:6b:21:0c:76:30:4a:34:9b:1b:6d:50:
b5:ff:49:4d:39:14:3e:d2:1d:87:f5:f0:ac:9d:34:
56:cf:76:12:4a:04:98:b4:51:ed:ad:ac:7e:e2:85:
af:a3:35:b6:1d:7c:32:cf:f4:a0:7b:5a:a4:85:f6:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:39:92:7E:CB:B3:61:8F:27:E4:54:D8:E7:CA:98:D5:25:C1:DD
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:85:c7:24:4e:3d:2d:ad:dd:55:48:9a:69:ec:91:28:bd:
be:07:92:9d:99:3d:05:ec:2a:06:a5:e0:ad:19:bd:94:e3:c8:
92:64:48:a4:16:30:d3:8e:0e:e8:75:87:8a:0a:0f:0e:e6:f5:
63:9a:32:84:7d:4e:70:87:85:37:74:1a:75:e2:21:b4:d9:e4:
de:78:2e:da:bd:58:43:7e:54:2e:46:96:22:79:65:76:2c:89:
15:41:23:6e:d0:17:3f:c3:94:2c:bc:30:dc:53:65:7f:90:c0:
23:12:90:1c:2a:6f:01:84:03:69:24:eb:35:4e:ee:0a:9f:74:
38:5e:bd:08:13:90:7a:2e:14:8f:66:71:9b:93:2a:e8:07:44:
88:0a:b0:62:0c:dd:81:b4:92:3d:64:1a:67:07:0d:6b:d4:dd:
fd:31:1e:28:ab:06:6d:88:ed:da:a3:6a:11:ac:4b:3c:b6:e4:
b4:b1:57:a9:bc:6d:a1:52:09:20:60:5c:c7:b2:02:05:e3:7e:
18:a5:e0:9c:b6:58:6b:0d:7c:c3:8e:9c:5e:ae:40:96:5d:f8:
0a:83:79:be:cc:3a:60:2a:c7:eb:86:e3:44:d4:6d:0e:aa:86:
a2:26:41:7d:66:49:e1:8c:32:be:68:e3:2a:7d:f9:80:42:ca:
40:fc:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:50 2026 by rpki-client