Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: N+XykhrT4LzpqcgZKdscMe9mUYoR03GfqeGuxViJUuY=
Subject key identifier: D0:22:18:69:3F:85:A1:7C:E1:18:6E:DE:3E:D6:40:F8:1C:05:0C:D5
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01A1DEA715F5B74DB1704E908D6A28162F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 1612
Signing time: Sun 15 Nov 2026 10:00:54 +0000
Manifest this update: Sun 15 Nov 2026 10:00:54 +0000
Manifest next update: Mon 16 Nov 2026 10:00:54 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: Z0duIqndsNHrEocJKr5cjrswcHa27ooPngXac6zSnko=)
2: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (hash: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY=)
3: kBXYGbTxdPtMX8674-LRTUc3syU.roa (hash: iVyxpIKZTeWiXDctlyE3ADiEgnIUxFQhQQ9pjma1pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:15:f5:b7:4d:b1:70:4e:90:8d:6a:28:16:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Nov 15 10:00:54 2026 GMT
Not After : Nov 16 10:00:54 2026 GMT
Subject: CN=d02218693f85a17ce1186ede3ed640f81c050cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:1c:b4:23:f5:8d:5a:03:16:0e:25:46:82:
0b:7f:ca:c1:50:ac:91:7b:1f:e2:10:66:7d:05:91:
88:02:38:99:62:22:6e:4d:d5:31:ec:bd:51:e0:e3:
c8:c2:97:8d:02:73:30:a6:5e:56:6e:0c:79:ff:f0:
f3:4f:f5:0c:b9:aa:f7:60:64:a0:8c:5d:da:0f:cf:
10:47:92:a4:53:fd:95:b5:bc:8d:2e:01:c6:d7:18:
ef:c7:db:e4:32:ef:db:a0:3b:19:ea:92:18:cc:4d:
4c:ec:dc:6d:15:06:a6:88:6a:25:c1:a9:e7:3b:f3:
69:e3:fb:80:64:a0:bc:3a:c3:28:31:13:2b:32:83:
47:53:e0:9e:be:a1:32:ee:3b:6a:ea:a2:6d:69:ce:
4e:9b:fd:fb:66:b0:72:f2:2a:e8:ca:50:3b:f7:61:
ea:31:a8:2c:76:bc:30:01:6b:7a:63:1b:50:8d:cd:
64:0e:11:a1:7d:d6:ed:c7:d2:ce:1b:e2:ba:34:f8:
3e:a2:b0:b1:95:cf:48:cd:3d:b0:35:b2:13:98:24:
02:f9:cb:9b:6d:87:17:7c:4a:c6:45:22:2a:1e:96:
c0:38:b4:22:34:c4:44:b7:21:17:32:d1:76:d9:44:
c9:d2:47:bf:0d:86:6f:0a:64:48:35:69:42:e5:49:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:18:69:3F:85:A1:7C:E1:18:6E:DE:3E:D6:40:F8:1C:05:0C:D5
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:b5:91:4e:5e:33:44:d1:0e:9c:11:dd:1d:6a:20:29:0b:
0c:e2:d3:a1:fb:1f:16:b4:a3:6d:86:7d:75:a2:83:9a:3d:31:
b2:6a:0e:95:c2:b5:67:37:2c:52:09:f6:02:9d:38:db:ae:0d:
f2:d8:fe:ee:7f:89:67:09:ae:8f:53:cb:38:ff:3e:70:7e:1f:
45:63:7b:2b:c1:d3:90:2b:74:0a:95:03:c0:da:6c:dd:3e:8c:
d6:51:a3:40:f4:a4:b2:7b:81:c5:b2:ea:54:ec:c3:1c:6e:fd:
63:be:ba:cc:5d:68:29:d2:c1:70:03:5d:0b:20:11:5c:ca:25:
30:2b:75:15:76:f6:5d:ad:69:57:bb:da:4b:71:3c:42:06:ea:
e7:1a:97:ed:62:2e:5a:1b:e5:2f:e2:ca:a7:39:9d:d9:10:f4:
50:50:ef:5c:77:e3:47:d9:4d:2d:0c:83:00:b3:b2:77:2d:43:
93:9f:ed:76:47:2b:0c:ca:35:02:96:82:62:db:46:51:14:40:
e8:02:4b:bb:1a:d0:c6:e1:48:53:1b:e1:05:af:96:2a:33:0d:
39:37:c2:50:48:3e:f4:5e:69:d5:49:c5:54:b0:b4:66:c9:72:
23:c6:2b:ab:e2:b7:83:a4:bc:6c:11:66:44:13:cd:59:04:e3:
38:3a:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:01 2026 by rpki-client