Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: OnDFGKD0sCV+rmeIpINT8wju2qrKwjwA/H8jHdBWhFQ=
Subject key identifier: 59:AD:20:98:CB:CA:1D:7F:5A:D3:DE:2C:1F:9A:FF:56:F9:E1:65:D0
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019D2A05200E80C292C6F120F04BF1D934E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:01:12 +0000
Manifest this update: Thu 26 Mar 2026 12:01:12 +0000
Manifest next update: Fri 27 Mar 2026 12:01:12 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: ySq/otD/NSQ+G3tjp+/g9gMam5Ic4jtC2AUH72EF5Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:20:0e:80:c2:92:c6:f1:20:f0:4b:f1:d9:34:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Mar 26 12:01:12 2026 GMT
Not After : Mar 27 12:01:12 2026 GMT
Subject: CN=59ad2098cbca1d7f5ad3de2c1f9aff56f9e165d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:cc:11:e8:39:1e:28:04:df:63:33:c6:02:
0c:cf:d5:4b:a1:17:40:11:a8:f0:fa:9d:a4:f5:c4:
da:0b:de:db:fe:5f:fc:25:82:9a:19:c7:00:81:29:
af:68:40:4b:b5:f5:8a:a5:6f:c6:83:74:23:ce:21:
df:ed:cd:34:43:7a:7c:4f:92:ef:71:5f:c8:8a:89:
09:59:b3:56:25:5d:30:6d:72:3c:5d:8c:be:c2:5a:
1a:ff:e1:8f:0f:c2:35:a3:7b:fa:0b:f6:d5:6d:b7:
81:7e:a3:47:20:bf:2a:9d:b9:c1:a3:3e:59:bd:d4:
7d:47:c0:e2:00:66:64:47:d1:6a:a4:d1:12:5b:83:
04:e6:e5:13:1c:19:c9:58:47:7c:5e:25:56:4d:f3:
ea:79:9f:4f:1d:32:69:1e:b2:24:21:ef:2a:e5:63:
3e:6f:cf:ec:d9:db:ac:c0:70:54:2d:a5:a7:af:30:
06:7d:b7:bd:ef:aa:bc:e6:dc:45:44:90:52:f7:60:
de:71:e3:78:06:24:67:c0:60:e1:90:06:60:bd:58:
5c:5c:25:9b:7b:00:f6:f8:8a:fb:a0:31:d6:38:a3:
dc:e0:57:ad:07:0f:4c:e1:d1:06:3b:80:7d:fb:34:
01:61:37:cb:e1:b7:be:93:e9:b7:c4:56:e0:78:d3:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:20:98:CB:CA:1D:7F:5A:D3:DE:2C:1F:9A:FF:56:F9:E1:65:D0
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:b6:c1:53:d9:f7:b3:38:a4:66:3d:69:0d:2c:63:92:de:
b4:ee:35:c4:16:ad:36:54:4d:c4:3a:ba:24:37:62:01:3b:b0:
80:36:cb:77:a5:08:3e:4a:2a:05:b0:5b:a0:d3:89:04:f9:e5:
59:4c:c1:27:25:0a:ff:dc:d0:4e:1b:d5:f4:ce:fb:77:90:c6:
2d:a1:0e:6d:54:07:05:4b:4f:7f:d0:a1:96:88:9b:50:e9:2c:
e1:69:61:9c:a5:96:6f:28:41:53:7c:e6:c4:06:36:0d:b5:8b:
31:6f:3a:fe:bb:1e:17:de:8f:76:e7:66:4e:f6:e1:d1:c4:83:
c4:87:2f:cf:a2:a4:02:5b:8a:66:f3:f1:ad:e3:2f:bf:d3:5f:
fc:d8:3e:af:63:a1:f1:5b:4b:b2:21:f0:ab:3b:f1:25:c1:d8:
3f:59:72:eb:bd:4e:31:24:05:ff:91:92:4b:59:98:7f:3e:be:
29:68:3f:8c:b1:e1:5e:73:1e:0a:d9:46:26:8f:e3:a7:4c:c0:
9f:ef:82:7e:d8:b0:05:3a:bb:33:92:a4:b0:d8:61:06:e3:c9:
9b:32:d5:3c:d0:6e:7b:f6:b9:e1:97:39:44:cf:d5:e1:08:e5:
31:a1:ae:81:2b:b0:94:76:dc:d6:05:34:ae:4a:2d:bb:ea:ed:
4d:cd:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:37 2026 by rpki-client