Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: xHCDeV9OjTDs4fsvdlM9oJyjhiijo9pVP11bpoKZ5xQ=
Subject key identifier: A4:82:48:0C:7C:9B:55:69:CE:7B:12:18:5F:C8:E1:4B:10:6E:14:C1
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 01A1DD26E968B241AD7B676B8D46AB20EF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 03:01:16 +0000
Manifest this update: Sun 15 Nov 2026 03:01:16 +0000
Manifest next update: Mon 16 Nov 2026 03:01:16 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: +DUJ9IjEQGKl68KlA5YKuI2QtGkzGzZk+2Uj6dC12YI=)
2: hAyoLpCra0kpXCEB9YIPKEmLRzU.roa (hash: L8pQSdo6sZNnsGCjKX/I+wB7KeoUwSik66sYCeRu7Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:e9:68:b2:41:ad:7b:67:6b:8d:46:ab:20:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Nov 15 03:01:16 2026 GMT
Not After : Nov 16 03:01:16 2026 GMT
Subject: CN=a482480c7c9b5569ce7b12185fc8e14b106e14c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:75:6d:4e:4a:75:5a:20:58:ac:43:02:b8:
d5:14:98:79:d2:12:1b:64:cd:13:31:19:ea:ff:39:
01:fd:bf:61:67:fd:d7:9a:cc:44:41:e5:20:e9:4e:
d2:da:48:47:98:c6:69:34:48:03:f6:60:0b:fc:d8:
5b:10:61:d1:97:41:34:97:0a:fd:2f:f8:c6:de:6a:
c4:3f:9c:61:7a:f4:3a:e3:11:7a:13:a6:35:ee:00:
89:b7:e7:0f:c0:90:b3:7e:5b:6f:58:96:d2:dd:6a:
56:50:99:c9:04:91:51:7c:b5:d3:e2:ec:52:5d:db:
c7:dc:b0:66:b5:b6:3b:b5:cd:87:39:7e:c3:56:37:
68:59:5a:2a:13:0d:38:b2:41:03:43:fa:21:bb:ea:
99:69:08:49:91:83:3d:00:42:51:17:6d:42:14:d6:
26:c0:c8:ef:b0:58:7a:fb:c6:a6:8e:34:01:13:4c:
ee:34:97:e3:b8:fb:92:12:81:26:b0:ab:6b:53:34:
bd:42:41:5a:52:48:e5:0c:72:eb:0c:a6:ec:6f:e2:
d0:fc:a6:36:2c:d6:21:4f:d9:5f:bc:50:eb:a8:65:
f8:1d:82:48:e2:09:e8:8c:bb:25:fd:9b:a6:6e:29:
c2:7e:5b:fa:16:92:84:c5:26:07:2a:c2:f1:86:f8:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:48:0C:7C:9B:55:69:CE:7B:12:18:5F:C8:E1:4B:10:6E:14:C1
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:2a:e3:31:f7:61:01:6e:d1:07:ad:cd:9b:88:98:b5:f9:
09:0e:54:d2:6c:57:64:5f:75:fe:e1:fd:2c:34:b0:40:36:ef:
ec:90:a0:26:2d:fe:61:77:9f:c2:cb:1f:b4:22:d2:54:98:c2:
d5:98:e9:c2:8c:6a:54:ac:5b:5f:36:dc:08:0b:5f:13:58:f5:
6c:1d:14:7a:84:62:3e:d7:c3:7a:38:88:41:41:a7:8c:8c:4c:
6f:b8:64:8b:a7:09:e4:04:ec:77:f7:f6:15:c6:39:3c:bf:5e:
fc:4f:bb:68:97:b4:55:6c:a4:b1:60:6b:20:1d:f0:90:be:7a:
b8:83:25:c2:fc:42:34:15:57:d4:0a:0b:c6:71:b6:f0:1e:2d:
a1:6d:46:68:41:3b:f4:8f:03:77:87:99:6a:db:1f:3b:b2:bb:
c4:4a:6a:53:92:c5:f0:62:84:f3:47:dc:7d:4d:a1:8a:5a:dd:
f0:a5:69:d7:bc:15:9f:21:b7:0b:b3:f1:6f:31:70:a4:c5:99:
61:e5:d4:28:5d:7b:b1:ea:3b:52:da:c0:68:ad:a1:98:38:45:
35:60:18:e1:2a:f9:78:b4:70:d4:6f:4e:a3:8b:d3:e4:a9:e6:
75:7f:e2:f6:fd:b8:56:af:ca:64:23:ae:76:5b:b1:cc:ea:9f:
84:89:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:32:10 2026 by rpki-client