Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: 4ski08AF3KUEmx3QZL2mv/9SIjF+250PCA3qur+aJDk=
Subject key identifier: 74:33:A4:A4:71:6B:24:8D:80:4C:98:9E:8F:F2:0A:BD:A6:C1:3C:80
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019E1D596BB5B239BE0F597B9CE980D7965E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: MZkJihLV8RaGYUDa27qUCpfj12rD1nOPYHytFfs4bM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6b:b5:b2:39:be:0f:59:7b:9c:e9:80:d7:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=7433a4a4716b248d804c989e8ff20abda6c13c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:a9:f5:5c:58:84:f3:80:80:34:77:62:c3:
4e:ae:0b:c3:aa:fb:78:78:3e:3b:4b:fa:6a:5e:bd:
63:02:8d:df:a1:01:f5:09:6c:44:e6:46:c8:d4:a6:
26:11:64:fd:d6:d5:fb:c0:17:ef:c1:62:2a:95:99:
16:9f:4e:8e:b6:50:1b:11:31:61:ad:79:54:85:0e:
25:e8:a7:22:a2:1a:03:dd:2a:4b:de:84:81:54:71:
3e:99:83:8d:90:68:f6:93:e4:68:d6:97:af:29:df:
83:c7:d4:ca:dd:bd:21:e5:20:06:d8:b5:ee:6b:28:
23:93:31:85:bf:91:47:84:fa:63:c6:8a:75:c4:47:
22:f7:6c:49:8f:81:77:90:89:e1:fd:58:70:d3:1b:
09:a2:a3:5f:47:ba:42:74:58:b7:6d:a6:72:5e:d7:
69:55:a4:6b:21:fd:96:93:99:99:27:d1:79:8f:d8:
8a:64:57:9f:77:4f:28:56:52:8c:9f:b0:68:23:ac:
db:e6:db:4e:b4:00:d2:7a:70:bf:59:19:c4:4e:b9:
61:28:91:17:2c:96:b9:20:f1:dc:5c:dd:1b:3d:f8:
67:a5:e9:a6:ff:1f:47:92:1a:7b:60:cc:e5:b5:f2:
80:32:49:a5:19:cf:10:e5:82:f5:6d:ef:49:d2:f0:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:A4:A4:71:6B:24:8D:80:4C:98:9E:8F:F2:0A:BD:A6:C1:3C:80
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:67:a9:8e:79:60:82:70:c2:db:5d:2c:ac:1e:34:e2:b2:9e:
05:7c:0d:2b:a3:57:84:6c:63:64:07:03:01:d2:85:90:eb:5e:
5c:33:5e:f7:88:7a:77:f3:c6:7c:1a:29:ec:2c:3c:32:83:b0:
f6:4d:f7:0e:a0:11:86:e5:19:7b:00:42:b6:c0:7d:b0:42:ec:
93:95:7b:fa:17:93:37:26:55:60:67:18:46:d6:b6:96:01:a0:
e0:c8:bc:bd:11:48:62:21:0d:18:55:89:7c:98:79:bd:65:fe:
ed:b1:87:ec:13:02:a6:f7:b6:b9:ba:d8:3b:32:ea:91:61:a4:
f8:f1:ae:88:eb:ed:5f:be:b4:df:92:29:ac:c5:7e:06:fd:f8:
b1:d2:65:e9:c6:9e:82:b5:db:b4:65:c8:e9:dc:16:1b:b5:10:
10:b0:8b:ec:ea:11:9e:6c:39:73:72:bd:20:44:30:76:33:36:
1f:95:ab:8a:59:b4:06:f7:51:76:29:9f:19:57:ed:a2:9f:54:
8b:a7:0b:c1:cb:df:70:91:e4:48:c9:d4:54:83:09:31:48:27:
d2:24:83:ac:46:c5:35:a5:16:7a:9a:90:a0:59:a9:62:cd:bd:
0f:71:e1:87:2b:30:36:4a:d8:e0:40:44:6e:97:26:8d:05:33:
96:fa:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:32 2026 by rpki-client