Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: AkathKDt/CIRMx+29dQpvoCUPPT17H0TeaqlSxVqAdU=
Subject key identifier: 67:62:2A:8E:D2:73:E0:F2:0D:82:F7:4C:8C:32:A7:1F:B5:09:A1:82
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019D281644A4DD14A104F23675831FE8DE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: 1/OxUQ4GtgT6Buw15Puru5NAOEKlxUuyIBmT7v5/5fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:44:a4:dd:14:a1:04:f2:36:75:83:1f:e8:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=67622a8ed273e0f20d82f74c8c32a71fb509a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:36:f6:01:99:b6:0e:d8:b5:48:e2:f6:c8:
ee:17:31:3f:cb:b3:2f:71:70:0f:32:72:9d:13:9f:
52:61:0f:0d:9a:3c:24:f0:d1:b3:59:77:24:24:3f:
24:3e:9e:9b:0d:c1:3c:24:7e:16:70:90:a5:d8:c6:
ab:59:81:23:ec:b0:38:a9:ed:f7:9f:63:7a:d7:84:
52:88:ec:ca:2b:2c:ec:3d:04:c5:1b:f2:69:62:6d:
4e:e3:31:3c:8b:8a:63:ce:5d:f5:e5:fa:fb:19:a9:
34:90:94:a5:5e:f4:e9:93:3a:14:1b:04:aa:c9:b7:
ec:f3:f2:56:45:42:d3:00:fb:d1:69:1f:e6:b3:be:
d2:60:a6:62:d5:78:68:1b:e7:88:02:08:50:84:47:
cb:a0:6b:12:53:c7:77:d9:f4:f2:5b:5c:26:48:79:
7b:1d:0f:6e:35:86:d5:90:15:76:6e:26:99:b6:53:
ca:ca:62:4f:76:d7:ce:30:c0:72:b1:7e:42:a8:85:
c5:aa:38:e1:f5:93:19:54:a4:4c:28:c8:74:7f:c5:
8a:07:0d:30:49:13:a9:40:22:a8:a2:e7:92:72:ac:
b1:7a:d6:4d:69:63:b7:2e:e3:20:2e:dd:05:bc:0b:
bd:bc:84:c0:c5:68:e0:ff:cc:35:ea:d4:2f:f5:e4:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:2A:8E:D2:73:E0:F2:0D:82:F7:4C:8C:32:A7:1F:B5:09:A1:82
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:9a:f7:72:e0:c8:b1:99:b4:37:0a:7b:cc:3e:73:f9:54:
a4:63:bc:b1:be:ee:f4:a8:58:9c:77:bc:8b:07:0b:0d:7c:85:
6c:cc:97:77:67:55:65:94:42:fe:13:40:ac:42:1b:ed:b9:fb:
11:23:2d:d1:a6:9d:21:4b:85:c2:82:27:bb:98:0d:c0:18:a2:
e5:c1:70:2f:db:59:c1:17:2f:59:9a:55:85:e4:8c:f6:c8:3b:
22:e7:22:75:97:51:b0:b3:cc:6e:d3:1e:aa:cd:47:51:1b:6d:
31:d1:59:f7:7a:8b:91:47:c3:37:df:56:91:dc:c1:52:68:21:
74:8b:f1:95:d2:10:8b:47:cd:54:81:33:4b:47:51:b5:48:9b:
74:de:ef:36:17:ea:91:9a:18:83:a9:17:e2:19:89:92:df:57:
5c:38:b8:83:86:db:d8:51:63:4d:4d:62:1c:4d:ce:1d:41:04:
f8:3e:ad:8d:36:17:76:5a:35:fa:6f:57:2b:95:7f:25:f1:82:
32:a6:51:42:d5:94:b5:1c:2d:b3:87:6f:f1:8d:63:9f:3b:98:
e3:9e:55:1f:f3:a2:31:6f:15:55:1f:70:0a:40:f0:00:a2:80:
4e:09:07:c0:84:18:2b:11:f9:82:9e:88:d2:3f:fc:8f:bf:3c:
59:0e:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:50 2026 by rpki-client