Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: rnRb/imm2oFBP1aa8TKVqm91AUi5wyRXAf/+7qk7z04=
Subject key identifier: 16:BE:65:C0:7C:88:41:A9:B6:1C:E4:BD:C2:14:72:2F:E1:56:30:BF
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019F92116B36A8B9F88FFF67CC7BC54AAC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 03:00:42 +0000
Manifest this update: Fri 24 Jul 2026 03:00:42 +0000
Manifest next update: Sat 25 Jul 2026 03:00:42 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: mJSmegfm9hYyEn6kk6kFlmEzPJT2XFbWj2EzUQZloy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:6b:36:a8:b9:f8:8f:ff:67:cc:7b:c5:4a:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jul 24 03:00:42 2026 GMT
Not After : Jul 25 03:00:42 2026 GMT
Subject: CN=16be65c07c8841a9b61ce4bdc214722fe15630bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:3d:3b:da:72:bd:fd:a7:0c:57:79:e6:e4:
78:89:82:df:b3:4e:78:98:63:8e:1e:c8:0b:eb:a3:
4d:52:8b:56:64:b7:df:5d:c1:83:30:a5:4d:84:14:
e0:b6:67:f7:b6:e7:55:ac:95:ca:19:4d:c9:c6:c9:
0d:9f:8d:51:11:9c:2a:29:63:49:29:c8:f2:7e:66:
da:28:f3:a7:42:f7:b7:c2:fb:dd:e2:5e:78:03:c9:
36:69:00:4a:ce:71:b1:df:9d:11:6b:32:d5:a7:92:
25:f4:17:7f:fa:e4:83:a2:82:12:cd:7a:60:52:df:
32:54:9e:45:ae:57:54:15:6a:fe:40:e3:92:97:1f:
33:7e:9b:7c:4f:52:f6:ef:4f:96:c3:55:10:48:f7:
24:2f:d4:e9:d9:e4:4f:0b:4c:d8:b6:d5:94:b8:c9:
9f:37:2e:be:30:ab:8a:5c:11:33:eb:fe:9d:ee:d9:
15:1c:64:67:63:54:7c:09:1a:52:a0:c6:40:61:42:
20:1e:62:fe:96:5e:c5:4b:ee:8c:36:6c:d0:39:2b:
9b:7f:73:f0:23:0e:dd:61:e2:dd:4d:62:84:9c:9a:
10:3a:3e:9a:78:37:cc:17:a2:b9:31:6d:af:3a:a1:
aa:59:f4:98:c6:a5:23:6d:f2:60:38:33:64:67:ad:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:65:C0:7C:88:41:A9:B6:1C:E4:BD:C2:14:72:2F:E1:56:30:BF
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:52:b6:43:8c:e8:cf:ab:2d:bc:93:e2:ee:42:51:80:03:58:
e3:c4:65:2f:98:fc:97:bf:38:89:f9:6f:dd:de:35:24:53:66:
18:a1:af:f0:c1:e6:89:3b:4c:65:79:3e:88:b1:d1:a0:4b:8b:
94:bf:ef:97:da:60:0b:b2:85:69:66:eb:83:c3:54:a2:ea:30:
4d:d5:b9:c3:b8:ce:48:14:b6:11:23:a7:b7:81:64:36:cc:43:
1f:d0:47:17:97:49:73:ca:a0:c4:70:70:80:cf:10:d2:6e:4f:
79:c4:68:21:49:5f:99:b2:13:97:55:3b:eb:db:40:88:76:27:
2e:7f:bc:02:6f:85:7a:8f:b7:35:e4:28:38:87:9f:76:04:9c:
50:c8:46:17:b6:ce:3c:c5:9b:b8:bd:37:f5:7a:a9:96:dc:fe:
30:ae:de:d1:ec:b3:0a:76:9a:4c:00:78:30:19:9a:cd:4b:5a:
33:03:3d:25:09:2d:26:87:b2:86:5c:ca:68:8c:ea:34:f9:19:
a4:05:97:f2:3c:08:c1:7d:db:43:f9:5a:b3:86:2e:68:24:1f:
82:0e:04:58:1d:b8:c1:7e:a0:5c:64:72:ee:b5:a1:bd:9d:68:
17:70:c6:67:63:74:86:13:73:7f:eb:2f:65:06:7a:ac:49:9d:
6d:79:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:05 2026 by rpki-client