Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: 14Gdz6IUfYzIBd/6tU7uHrG4lilUKdktlveKwhlbPtE=
Subject key identifier: 3A:19:F2:AA:66:14:2E:4B:BA:6C:56:0E:DB:E2:DF:65:9F:D2:7A:99
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 019F91A370F5205FD8078E20F2092015FE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 14E1
Signing time: Fri 24 Jul 2026 01:00:35 +0000
Manifest this update: Fri 24 Jul 2026 01:00:35 +0000
Manifest next update: Sat 25 Jul 2026 01:00:35 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: Rpb7U6m266UDR4EALP/Mu6s2MUa433lMVakBHPU1DhA=)
2: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (hash: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY=)
3: kBXYGbTxdPtMX8674-LRTUc3syU.roa (hash: iVyxpIKZTeWiXDctlyE3ADiEgnIUxFQhQQ9pjma1pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:70:f5:20:5f:d8:07:8e:20:f2:09:20:15:fe:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jul 24 01:00:35 2026 GMT
Not After : Jul 25 01:00:35 2026 GMT
Subject: CN=3a19f2aa66142e4bba6c560edbe2df659fd27a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:80:d9:cc:e2:11:91:95:b5:ac:51:cd:16:1b:
e5:d0:b6:f1:a7:13:52:04:ad:a5:43:d2:4a:00:38:
80:88:0c:6a:59:57:8c:48:e8:f2:df:48:75:3b:64:
87:a4:46:17:f3:8e:69:45:bb:86:9c:17:df:9b:ea:
2b:43:67:16:5f:b4:ef:60:b9:06:ed:e4:fb:98:d8:
ad:58:70:b9:d0:9e:dc:5b:51:5c:df:be:85:e6:c3:
e3:c5:7c:4e:a6:ed:57:dd:a0:10:9a:22:a7:47:5d:
14:bc:d4:35:d4:be:52:f8:ba:34:c9:e0:11:66:61:
f1:05:a1:8e:c2:fa:7c:2f:b4:8f:ea:d4:08:fb:78:
bf:bc:a9:3e:7f:b4:f7:99:8b:3e:ae:bb:1c:59:23:
c0:68:1e:17:6d:e9:a5:14:8f:ff:b8:85:f3:36:34:
ab:51:19:da:41:32:16:cd:e4:a2:4d:51:c3:c4:ec:
0b:e1:d7:13:eb:48:d1:70:1f:3a:41:2c:8e:f0:3b:
90:8c:a0:16:c5:06:7b:7f:bb:4a:0b:94:89:b3:53:
2a:30:79:11:5f:7c:67:a6:1d:41:9b:cf:fa:b9:d6:
67:d0:6c:f0:89:07:89:5a:84:70:61:f8:25:42:46:
79:5c:0a:74:1f:4e:39:1c:02:4c:f3:a9:cf:64:7b:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:F2:AA:66:14:2E:4B:BA:6C:56:0E:DB:E2:DF:65:9F:D2:7A:99
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6a:31:b9:50:fd:a8:d9:75:e4:03:45:29:d3:de:b8:64:9e:
53:16:df:2e:af:df:cc:7b:4a:47:93:c1:89:17:13:92:08:85:
3b:8c:fe:11:f7:41:6d:81:6a:83:fb:bf:fd:12:1e:24:3c:8e:
87:38:0e:1d:d2:da:74:8d:20:32:7f:89:05:60:e9:48:87:a3:
6f:cc:f4:d9:a8:06:7f:e6:42:dc:91:b1:da:9b:6e:cc:d8:9b:
a9:e2:da:54:2f:3c:1f:6e:ff:0b:c8:dc:07:d4:5c:29:23:06:
8c:53:b0:5e:6b:32:cc:44:b8:cf:48:03:63:ba:14:a6:ea:39:
5a:e8:7f:2b:ee:da:a3:0d:66:77:69:ea:49:ae:0a:b4:11:c8:
05:79:af:d8:d6:dc:75:85:84:09:9a:4c:77:38:4c:51:cc:c8:
33:fa:e9:56:c1:fb:bd:a5:67:59:83:6d:ca:cd:03:d0:44:92:
cc:fe:15:01:72:1e:ff:61:39:67:c1:c4:c8:30:c7:3e:0f:2b:
8b:50:6b:fb:ce:9e:10:08:38:85:22:3b:28:11:73:3e:08:23:
59:09:6c:93:5d:5a:ab:44:f8:39:90:0e:cb:6a:33:56:58:32:
c6:ba:0d:6b:fe:07:23:c1:e7:ed:da:75:13:9b:ba:3e:64:a9:
82:82:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:36:22 2026 by rpki-client