Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: ACeNDAyB8xh1WEWopSUVX8lg8pRqmPuglGTzx9n421k=
Subject key identifier: E7:9B:A1:CD:F4:67:81:02:87:EB:A6:C9:B1:CA:C8:97:A8:B5:FB:0E
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01A1DD26AC43EAF7D51FFF62BE9C4C5C67C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 03:01:01 +0000
Manifest this update: Sun 15 Nov 2026 03:01:01 +0000
Manifest next update: Mon 16 Nov 2026 03:01:01 +0000
Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=)
2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=)
3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=)
4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: N1AsrwrzevTvfMQBpbpKU/fz4+vxjSD9CO3Bc7E2u+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:ac:43:ea:f7:d5:1f:ff:62:be:9c:4c:5c:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Nov 15 03:01:01 2026 GMT
Not After : Nov 16 03:01:01 2026 GMT
Subject: CN=e79ba1cdf467810287eba6c9b1cac897a8b5fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:12:9a:a5:b6:f6:f1:e5:88:77:5a:03:a4:
a4:0e:fb:6d:93:c0:15:d8:8e:d3:ab:23:ab:10:05:
48:64:25:06:b5:a7:a0:53:38:d1:f1:41:52:23:1d:
10:c9:93:da:e6:11:20:c5:ea:0f:f6:3f:76:e7:6e:
fa:74:63:2e:0a:92:1b:9c:e6:8d:b9:f4:1c:9c:19:
79:51:34:0e:4e:98:71:f4:d8:db:a9:95:de:27:03:
bd:6d:7a:6e:fb:b9:a3:5d:7a:f5:6f:f2:02:8d:bd:
59:da:bc:62:21:ff:32:09:a6:d9:0e:40:8a:8b:2f:
5d:69:3c:55:01:05:79:50:ad:32:09:07:9d:0c:d8:
17:da:c3:bd:7b:fb:70:41:cc:7e:07:b5:17:f8:ff:
66:9e:d5:ab:38:78:2d:05:6b:3d:86:b9:16:98:1c:
31:89:7a:7e:74:23:57:4c:49:c5:c8:ab:c5:84:b7:
ce:7e:04:57:2f:fc:c1:59:fb:dc:22:5a:9e:5e:e0:
4f:28:b4:06:5c:10:84:52:c9:b9:f4:d8:cd:44:22:
5f:11:50:a4:79:86:b7:63:8a:13:fe:71:cb:57:e2:
64:26:ed:d0:11:fd:88:73:5b:e7:45:b2:6a:09:f3:
e0:e8:28:e5:87:54:42:7f:64:0e:fb:d2:c2:ba:8f:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:A1:CD:F4:67:81:02:87:EB:A6:C9:B1:CA:C8:97:A8:B5:FB:0E
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6c:a8:38:89:e8:6d:43:24:1b:3d:c9:28:b9:74:6b:b1:02:
c7:0e:1c:8d:74:5b:9e:9b:3b:3d:92:9b:ef:08:74:22:91:90:
52:60:e7:cf:60:a6:8d:92:29:7b:44:7b:84:98:3a:22:35:90:
6b:9e:5f:3f:f9:df:63:da:37:e0:b8:f2:df:96:5b:6e:fd:bd:
58:b4:63:1d:47:01:3e:3e:b6:a5:82:0f:29:d1:75:ab:a6:21:
74:5d:1c:6f:15:da:fa:34:26:85:c3:ab:03:1c:17:17:99:56:
08:1e:c2:03:71:63:a9:76:02:a1:ba:16:29:65:26:80:74:35:
72:2d:9f:8d:35:4c:aa:93:24:5e:0a:66:42:24:c7:f9:c2:19:
3a:e6:d0:ee:c7:43:98:e5:36:2d:9e:fd:f1:f4:06:a5:d8:ff:
9e:46:4a:6d:e4:ee:87:82:2d:c9:46:a0:df:6b:9d:47:16:90:
1a:5d:ae:0f:90:a1:3b:91:ea:8a:c9:e1:b5:62:91:84:a2:ca:
56:77:8c:38:aa:a0:89:b8:04:eb:2f:88:25:f5:84:ef:70:b9:
8c:fd:0b:36:44:53:e0:c9:27:d3:9d:20:83:c3:8e:d4:06:70:
da:26:a4:b5:7a:a8:65:f2:64:a0:05:35:38:49:67:b0:6f:3a:
68:74:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:28 2026 by rpki-client