Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: AaiQJj2+LARJewbOzSJ03MkwevPvDoL4qu3IvexX9BM=
Subject key identifier: 4A:6A:48:43:FF:90:81:F5:A8:54:5C:AF:2F:BB:FB:68:3F:5E:B0:B9
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 019F921127456045F552CAED03820ACF0B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 03:00:25 +0000
Manifest this update: Fri 24 Jul 2026 03:00:25 +0000
Manifest next update: Sat 25 Jul 2026 03:00:25 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: REjWZIMBods/miUrFeFJSAcEHWDGRTX3abWGXXvgufE=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:27:45:60:45:f5:52:ca:ed:03:82:0a:cf:0b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jul 24 03:00:25 2026 GMT
Not After : Jul 25 03:00:25 2026 GMT
Subject: CN=4a6a4843ff9081f5a8545caf2fbbfb683f5eb0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:4f:2c:75:bb:71:8e:13:71:6a:91:34:03:
8f:5c:7f:78:f1:0d:74:85:6d:f3:63:82:86:65:b2:
b0:8b:50:9a:13:7e:e4:e1:51:c1:69:5c:77:a1:04:
4c:93:a0:b8:b4:64:2a:1a:d0:04:38:d7:5c:45:3e:
5e:42:6a:dd:54:71:81:ea:6b:64:08:70:c3:a7:78:
37:c4:50:35:f4:ac:f4:80:ed:60:fc:93:48:1a:16:
66:d4:ba:b8:d8:36:22:72:cb:55:04:6d:12:dc:65:
6e:ef:d7:2b:89:74:e5:8c:c8:dc:cb:de:79:67:9d:
cb:27:d4:38:66:57:be:b2:1f:0a:8c:41:92:ee:44:
5f:4b:ce:2d:c4:df:da:e8:d7:31:57:bd:61:0c:22:
fd:dc:95:4b:b0:0d:d7:39:1e:4d:48:24:cf:d6:31:
45:18:98:bc:c0:c5:b7:df:35:94:7a:61:5f:8f:a1:
0c:ea:63:db:0b:a5:47:7b:7f:a7:58:b8:1f:5a:01:
d5:e0:03:6d:e6:33:af:f9:94:a4:bc:30:67:9b:87:
36:6b:93:96:be:3f:e0:c9:d1:c2:d5:d0:8f:a1:88:
bd:30:61:d4:04:e0:5e:8a:5b:5f:ca:ca:c4:00:5c:
85:26:ff:05:9e:35:da:ec:db:04:54:42:60:8f:05:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:48:43:FF:90:81:F5:A8:54:5C:AF:2F:BB:FB:68:3F:5E:B0:B9
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8a:a3:f4:52:6e:e1:fc:25:e0:ed:1a:ac:06:c4:b7:29:51:
59:0b:a5:e6:27:7e:7c:aa:b1:34:aa:a3:b0:85:9d:8a:ed:e8:
ab:90:8b:76:eb:4c:cf:a0:88:3f:6a:8d:b9:36:02:cd:13:8b:
bd:96:19:53:30:39:fc:fd:09:75:b8:4b:68:51:c4:00:1f:70:
a8:cb:e0:7f:00:99:b9:93:2e:31:7f:19:ec:96:23:38:03:ea:
c9:fc:c3:35:c6:bf:2b:e5:62:91:a3:21:84:4c:b2:fc:32:93:
c5:e2:ac:17:03:58:13:c7:f7:37:c3:19:c8:db:95:ba:81:98:
ba:96:92:ce:af:08:2f:c4:72:cd:57:9b:a4:4c:a1:f2:8f:9a:
ec:48:da:84:b9:7f:63:0b:c5:0f:7a:47:e9:b4:f3:03:ff:71:
62:e3:2c:4e:08:0c:bc:60:4c:04:72:2a:3d:7c:12:9b:99:13:
f6:70:a1:db:16:52:38:0a:9e:38:d0:54:7c:34:a7:32:d9:55:
2b:b6:0f:dc:78:35:52:15:3f:ff:c0:82:e2:9a:20:cf:64:e4:
31:dd:82:fb:03:59:57:51:ae:75:fc:6f:44:e8:5c:ea:78:97:
92:8b:09:4f:7e:79:9f:16:84:e0:fe:e3:a7:64:45:a8:5f:fa:
d1:c4:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:46 2026 by rpki-client