Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: dvyxULY6IxbPP7LnoKYH2TzZOClJOK9ip1p/Av5NJRM=
Subject key identifier: FC:8A:4B:24:0D:73:0C:FE:CE:62:28:D5:6B:D0:55:8F:14:62:49:01
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 01A0EF9DC3F8518DD10AAAE2996F7A2E7134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1A0E
Signing time: Wed 30 Sep 2026 00:01:28 +0000
Manifest this update: Wed 30 Sep 2026 00:01:28 +0000
Manifest next update: Thu 01 Oct 2026 00:01:28 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: nmhxB9Jg9hYp/kdY41fjUgCulVX3a7QWTs+BYx6d5Mo=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:c3:f8:51:8d:d1:0a:aa:e2:99:6f:7a:2e:71:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Sep 30 00:01:28 2026 GMT
Not After : Oct 1 00:01:28 2026 GMT
Subject: CN=fc8a4b240d730cfece6228d56bd0558f14624901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:0b:67:d1:32:af:e9:4c:61:84:fe:06:bd:
ed:7f:ae:54:94:c0:d4:1b:4e:41:50:04:28:3b:fb:
52:f6:73:8c:bc:bf:43:ef:51:b3:66:99:68:ed:ca:
fb:a6:09:9d:75:f0:c9:f5:78:38:8e:bb:76:21:ca:
c9:d8:c1:03:79:5a:4b:a4:40:41:5c:bc:56:6f:26:
bd:fc:77:d7:e1:44:6e:78:f4:10:a7:f7:b1:cc:17:
f0:12:03:b2:68:23:ae:42:47:66:f8:02:9c:ce:51:
90:7f:2f:ae:3c:6a:09:95:08:fa:fd:39:cf:83:4b:
f6:e5:d8:d2:e9:d0:91:1e:ec:8e:f9:f0:83:c0:d5:
bd:63:d6:f3:5b:88:70:7a:c0:64:80:ea:28:a4:83:
a8:e0:51:4d:3f:70:a2:e7:97:63:54:a6:14:b9:4e:
81:26:c7:b1:1b:8c:aa:78:c0:d2:07:48:55:61:22:
09:68:7a:05:b1:c2:70:bb:0b:76:b5:9e:cc:4b:63:
fe:b1:3f:37:c7:65:98:ef:b5:a4:31:e3:14:e5:90:
af:ed:90:57:b6:1a:b4:46:27:58:63:bf:01:8e:fe:
a7:d4:94:30:97:51:d7:46:15:0c:90:97:84:58:94:
74:38:da:ca:27:58:f2:3c:33:71:2a:1c:6c:53:6c:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:4B:24:0D:73:0C:FE:CE:62:28:D5:6B:D0:55:8F:14:62:49:01
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:59:58:a1:b8:02:b7:d7:2c:b1:31:4c:99:2f:7a:44:02:a9:
68:43:0f:67:57:f2:a8:e8:b3:ed:e2:9f:bd:7f:ab:9f:74:b4:
fd:79:9e:54:b0:31:d5:d9:9b:fe:db:a2:ed:fd:27:d9:1c:04:
f2:df:f2:3d:51:8f:2e:c0:f3:62:4b:1c:68:6b:2a:3c:91:a0:
5d:8c:72:c0:7a:fa:56:e5:67:65:32:c4:85:3c:5f:aa:8b:60:
ba:93:22:fc:78:42:12:63:1c:ac:c6:5e:6a:e3:12:aa:d4:00:
f6:4e:1c:eb:27:16:39:f3:bb:11:48:68:17:22:83:3d:f4:5c:
ff:1a:b7:da:53:27:61:a8:dc:76:c8:45:ec:18:1d:c5:a2:b2:
7a:c2:b5:88:5b:1e:9d:dd:3c:38:96:bc:6e:4d:ae:62:f5:d2:
e5:10:3c:0f:89:c1:ff:3d:9c:63:ff:4b:cb:a8:64:21:00:0f:
0e:92:ea:a9:ff:ba:3d:3c:4e:b3:66:a4:58:f8:c9:4c:8f:5c:
5a:44:6f:83:a0:e5:66:f6:e1:a6:e8:c6:cc:57:3f:34:e5:02:
0d:26:59:87:e1:ec:49:14:a0:64:77:f5:67:e2:2a:aa:a1:3e:
f3:03:58:da:e0:1c:35:22:e2:22:4d:ba:7b:96:80:a0:ee:28:
41:b8:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:25 2026 by rpki-client