Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: HWHlQ/iGZ3ykrOJ9QLpss1OpjHVBg20SFbXucMYdhM8=
Subject key identifier: 35:4F:1B:4A:EC:FB:A8:F2:AD:B5:75:8E:96:C5:E0:1C:45:F4:59:DD
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01A0D6153CE84DA1D4F5FC1BAF157773E7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 1589
Signing time: Fri 25 Sep 2026 01:01:51 +0000
Manifest this update: Fri 25 Sep 2026 01:01:51 +0000
Manifest next update: Sat 26 Sep 2026 01:01:51 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: PtINb0nFW6SKs+Y5g2rF7czJ/DTkpm6rjC+/iA0uAzQ=)
2: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (hash: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY=)
3: kBXYGbTxdPtMX8674-LRTUc3syU.roa (hash: iVyxpIKZTeWiXDctlyE3ADiEgnIUxFQhQQ9pjma1pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:3c:e8:4d:a1:d4:f5:fc:1b:af:15:77:73:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Sep 25 01:01:51 2026 GMT
Not After : Sep 26 01:01:51 2026 GMT
Subject: CN=354f1b4aecfba8f2adb5758e96c5e01c45f459dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:65:a6:de:e8:11:e5:22:fc:23:ae:2e:fc:
c7:c3:b2:a4:09:a5:f5:8c:02:e6:1d:4f:bf:8e:97:
17:ff:72:bb:85:74:48:2f:8e:97:19:3a:e4:43:0a:
5c:7b:9e:b9:62:ec:80:66:63:36:ac:a8:d9:cf:e2:
3b:d8:49:95:3a:ea:cd:a1:4f:1a:79:c4:c7:bd:d7:
9d:3e:bd:8b:dc:d5:1a:95:f9:bf:c6:27:8c:5c:5c:
e6:91:e4:a2:b5:22:d6:d8:87:6a:cf:5d:c7:09:34:
63:60:58:de:25:31:bf:8a:da:2a:1e:95:f3:a1:f0:
7b:e6:b5:22:2c:85:64:f3:57:0f:8d:1c:51:fe:20:
84:cc:64:5c:e0:bc:7b:0c:7e:5c:9a:54:9e:09:81:
76:99:f6:80:63:16:49:39:4b:7b:f4:dd:4e:92:12:
26:4f:33:c4:63:3e:d2:f6:c0:74:41:e2:4b:d4:02:
4a:05:3a:30:7f:75:b6:12:6d:7d:3d:1a:59:02:42:
03:a3:9e:17:49:76:c8:7d:89:84:da:d1:73:ee:4d:
26:de:20:1e:5a:69:a9:0c:5c:02:e9:3b:2c:bf:8e:
93:83:9c:d2:eb:e0:61:50:66:9b:fb:bb:13:5c:47:
87:88:35:bd:dc:a9:f6:6b:91:99:41:e0:d3:41:f0:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4F:1B:4A:EC:FB:A8:F2:AD:B5:75:8E:96:C5:E0:1C:45:F4:59:DD
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:09:78:28:95:ee:0d:8f:59:58:e3:d7:dd:16:48:56:05:8a:
0e:95:cd:fc:d2:6f:33:38:f2:60:5a:66:00:4d:c6:76:59:ec:
dd:5d:2e:11:5a:15:b4:0d:b7:51:f4:07:00:31:a3:3c:70:a7:
f6:5f:99:9a:35:fd:81:9f:c2:2b:9e:e7:0a:4d:11:27:4e:92:
32:bc:2d:60:bf:d7:cd:04:ba:28:09:c0:12:b7:33:fc:ea:33:
42:2d:f3:58:53:61:64:2a:e9:d4:bc:92:c6:09:77:89:eb:7c:
b4:b6:e0:40:e0:52:3e:f1:2e:84:1d:42:d8:16:e1:58:bb:2b:
9a:9c:3d:af:63:8d:a4:83:da:cd:31:25:c5:ae:46:dc:ac:12:
ee:42:f6:83:24:81:55:40:35:b5:73:9d:fa:7a:24:a4:89:6b:
76:45:71:d6:4d:63:34:df:ee:b8:bc:28:db:fc:d8:14:15:ff:
41:8e:a6:d0:08:67:7f:2d:60:93:f6:58:c5:c5:0c:99:76:5d:
95:8e:79:f8:a5:a8:fc:73:80:df:92:09:36:40:9b:02:23:c7:
fb:3f:c9:49:1b:0f:3f:a0:a1:2d:6d:3a:5c:55:e1:65:e9:5f:
4a:e7:f4:8f:af:97:e0:73:80:89:69:ed:aa:69:0d:03:01:04:
01:76:70:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFTzoTaHU9fwbrxV3c+fFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDhmZTA3MDRlNGFjOTVlM2E3MGU5NWJlYjg0NDI1YzMx
NmI5YWQwHhcNMjYwOTI1MDEwMTUxWhcNMjYwOTI2MDEwMTUxWjAzMTEwLwYDVQQD
EygzNTRmMWI0YWVjZmJhOGYyYWRiNTc1OGU5NmM1ZTAxYzQ1ZjQ1OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NVlpt7oEeUi/COuLvzHw7KkCaX1
jALmHU+/jpcX/3K7hXRIL46XGTrkQwpce565YuyAZmM2rKjZz+I72EmVOurNoU8a
ecTHvdedPr2L3NUalfm/xieMXFzmkeSitSLW2Idqz13HCTRjYFjeJTG/itoqHpXz
ofB75rUiLIVk81cPjRxR/iCEzGRc4Lx7DH5cmlSeCYF2mfaAYxZJOUt79N1OkhIm
TzPEYz7S9sB0QeJL1AJKBTowf3W2Em19PRpZAkIDo54XSXbIfYmE2tFz7k0m3iAe
WmmpDFwC6Tssv46Tg5zS6+BhUGab+7sTXEeHiDW93Kn2a5GZQeDTQfAKXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVPG0rs+6jyrbV1jpbF4BxF9FndMB8GA1UdIwQY
MBaAFDpI/gcE5KyV46cOlb64RCXDFrmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEt
ZTEyM2U0ZTMwM2UxLzEvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEtZTEyM2U0ZTMwM2Ux
LzEvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgl4KJXu
DY9ZWOPX3RZIVgWKDpXN/NJvMzjyYFpmAE3Gdlns3V0uEVoVtA23UfQHADGjPHCn
9l+ZmjX9gZ/CK57nCk0RJ06SMrwtYL/XzQS6KAnAErcz/OozQi3zWFNhZCrp1LyS
xgl3iet8tLbgQOBSPvEuhB1C2BbhWLsrmpw9r2ONpIPazTElxa5G3KwS7kL2gySB
VUA1tXOd+nokpIlrdkVx1k1jNN/uuLwo2/zYFBX/QY6m0Ahnfy1gk/ZYxcUMmXZd
lY55+KWo/HOA35IJNkCbAiPH+z/JSRsPP6ChLW06XFXhZelfSuf0j6+X4HOAiWnt
qmkNAwEEAXZwhg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:35 2026 by rpki-client