Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: QPSwpG+TG7Ye5UO9gF5pYRxFg3fAlkjrOelbUtpv6QI=
Subject key identifier: FC:1E:B9:F6:37:06:68:7D:7A:D6:FC:00:84:20:CD:D9:04:AB:A0:85
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01A0DA5FA917DC0A6115EC92F62FA0435E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 21:01:37 +0000
Manifest this update: Fri 25 Sep 2026 21:01:37 +0000
Manifest next update: Sat 26 Sep 2026 21:01:37 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: tggJ7mfIvKhr+9Rsz154bhsNptqymMKG/Es6hH6tv7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:a9:17:dc:0a:61:15:ec:92:f6:2f:a0:43:5e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Sep 25 21:01:37 2026 GMT
Not After : Sep 26 21:01:37 2026 GMT
Subject: CN=fc1eb9f63706687d7ad6fc008420cdd904aba085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:c9:54:b0:71:16:81:b1:76:ad:f0:9e:c6:
52:5b:11:70:f6:5e:9f:29:70:87:87:aa:e0:dd:d6:
49:3e:e9:e2:af:be:66:33:3b:c6:0b:9b:e7:b8:fe:
58:95:6e:e9:79:f1:75:60:0c:b0:0a:bb:54:dd:1b:
ba:04:05:7e:33:6a:d9:4d:2e:05:53:c7:88:a3:ff:
29:4e:1e:41:f7:7e:f3:89:1a:1a:74:dc:d0:42:9d:
f8:a7:2d:0e:6c:0f:0b:6c:bf:66:6d:3f:4c:55:6e:
87:19:f4:88:3d:75:86:49:ff:3b:a5:b9:4b:7f:b3:
a4:c9:7d:5c:50:16:fa:6f:4f:43:e1:00:6b:43:51:
42:5d:69:49:1d:35:06:7b:1e:d4:08:8f:e6:c4:9e:
6a:3c:55:30:82:d1:e5:8c:e5:ef:32:4d:52:57:e6:
87:6b:6a:0c:16:ff:52:0c:bf:7b:e2:f0:dc:ae:83:
f9:fe:af:a1:9a:92:c8:38:94:0f:12:be:25:10:f4:
a3:a6:4d:a8:c3:73:62:d0:35:12:95:bf:0b:fa:f1:
4c:07:6c:0e:03:8f:64:79:5b:1e:77:f7:48:52:a7:
af:d0:e6:77:0f:97:9c:0d:3d:d2:2d:f3:88:99:7f:
60:bc:e3:aa:34:ef:dd:d3:bf:30:d8:32:25:e2:87:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:B9:F6:37:06:68:7D:7A:D6:FC:00:84:20:CD:D9:04:AB:A0:85
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:8a:10:54:81:fc:e1:41:70:79:28:e3:50:23:c9:30:20:
1b:fd:70:96:71:a1:fd:2b:ec:f5:0b:ea:40:69:37:cb:48:bd:
5e:05:ce:f6:92:c4:6c:84:10:5b:bd:5c:9c:9b:fa:00:81:b3:
96:2b:0a:b5:b5:3f:a3:08:c6:52:11:68:ae:a1:d9:32:7a:e2:
78:35:98:28:0f:2d:29:11:fa:87:62:5a:2a:82:56:c2:1c:93:
fd:f5:9e:7c:c1:4c:ff:a2:fe:71:2d:fc:df:74:6b:dc:9a:05:
f8:33:98:cc:ae:df:c3:3d:25:40:55:30:c8:56:08:9c:d4:4f:
15:75:e9:f4:62:04:13:5c:33:67:73:d7:d1:f9:f6:54:0d:08:
2f:ef:6d:f8:c2:df:b2:bf:28:e3:d9:76:3f:b6:38:b5:24:58:
66:66:12:95:5a:49:c7:1a:77:fb:a2:3e:70:7c:fa:e8:9c:ac:
b1:7f:26:e6:78:6f:fe:7f:5d:81:90:89:f5:c4:3c:3d:6e:71:
36:33:56:cf:dd:d9:77:d2:b5:bf:3c:37:df:d3:84:f3:b8:f8:
2f:3f:9f:c1:f8:14:69:a6:a1:b2:f6:b0:26:67:62:00:f2:bb:
8f:3d:28:5e:c0:dd:b9:14:1a:f2:c1:a8:bf:2a:d4:b0:da:78:
4c:b6:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:41 2026 by rpki-client