Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: QRMypxCY4qQetGR/5dDFZtPPBm0gW+MGYzoKoSIZPKI=
Subject key identifier: 3F:13:40:FA:C7:E0:96:D0:5A:1E:88:8D:BE:A0:B7:B8:BF:F4:E8:73
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 019F97DC78E010F8F6DE707C05C954C97599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 10B0
Signing time: Sat 25 Jul 2026 06:00:36 +0000
Manifest this update: Sat 25 Jul 2026 06:00:36 +0000
Manifest next update: Sun 26 Jul 2026 06:00:36 +0000
Files and hashes: 1: J7pOiHdYKd2j4ChTilTVhn454DE.roa (hash: hcNJP1cRdMhyS1Muhx9YTYmFbSp39gRRkj1KauS78s0=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: yebcw5zodiAlxq1DkxNUP87mcwD4Qygl8P8TLOgJvyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:dc:78:e0:10:f8:f6:de:70:7c:05:c9:54:c9:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Jul 25 06:00:36 2026 GMT
Not After : Jul 26 06:00:36 2026 GMT
Subject: CN=3f1340fac7e096d05a1e888dbea0b7b8bff4e873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:e2:e1:f7:7e:f2:f6:f0:12:93:87:a4:73:
88:f1:90:62:4e:06:79:a0:3d:bb:b3:7e:21:16:e9:
e6:49:b7:b7:84:0c:2c:1a:15:29:0b:f3:53:99:ae:
09:0f:c1:c4:2b:c6:8c:a7:90:0d:a9:5b:0e:6c:7c:
7e:68:49:c3:f1:c3:d6:e0:e2:c6:ab:70:68:7e:be:
f7:83:f4:33:ad:cd:4f:26:cf:77:0a:d3:86:b3:89:
7b:c5:75:d1:e0:86:c2:58:78:ca:b7:93:89:74:ea:
1f:09:44:6f:1a:15:e9:58:9b:ac:65:06:cc:b0:2d:
ee:a3:98:68:ee:cf:f5:a8:e9:a2:f6:16:52:b7:62:
d2:8d:a3:66:0d:ca:a2:68:6e:85:87:d1:e1:de:48:
46:f4:82:22:00:11:b9:4a:11:1e:b1:49:4f:5e:0c:
2f:b7:1f:c2:7f:c7:91:dc:d3:7b:81:00:39:b5:3b:
e7:8a:07:aa:50:b4:f0:7e:b7:3a:39:99:fc:c2:a8:
4c:2a:3a:b1:38:6c:45:b7:e5:ed:88:a6:38:88:88:
cc:d7:19:85:06:7a:e2:4b:7f:06:81:b0:7e:ce:7e:
95:9d:4e:69:f2:34:4b:bd:39:7a:50:f4:63:8a:07:
58:2c:59:35:bb:eb:64:26:7b:d2:83:36:b5:bb:7c:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:40:FA:C7:E0:96:D0:5A:1E:88:8D:BE:A0:B7:B8:BF:F4:E8:73
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bf:13:7b:2b:83:1a:d1:a2:f2:c5:1a:f1:5b:43:0f:16:21:
7d:06:77:1c:34:a5:43:c9:68:d1:f3:a4:30:16:9e:76:8a:51:
d8:d4:fb:6d:0c:dc:59:44:34:6d:76:4e:34:35:8e:98:d1:4e:
ec:84:5d:8e:58:97:cd:66:6e:60:26:71:85:75:f9:eb:2b:9c:
08:51:39:ca:99:5e:40:11:33:a9:d1:7a:45:c3:8c:34:62:7f:
e8:8c:25:67:60:3e:86:5b:0c:51:b8:ac:ff:53:42:24:cd:73:
b5:1c:1d:cd:b3:55:1b:96:cc:60:3b:a5:05:0a:c2:4e:c9:0a:
30:db:14:a7:68:88:84:7f:08:f1:7e:f4:36:7a:1e:f1:12:3a:
76:0e:ec:8e:bb:67:4b:e4:96:58:2b:62:af:71:85:8f:1e:e1:
bd:1c:07:9d:4d:f8:54:a5:df:7a:a4:47:a6:59:a7:01:e7:8b:
0a:6a:e7:ac:14:47:71:a8:4e:2a:64:e7:c7:85:10:89:a5:8b:
72:88:57:30:3a:ad:2c:e1:54:bd:3c:e6:a5:4f:a5:20:67:cb:
e5:82:d4:e6:45:21:a1:fd:d8:84:29:27:28:9b:45:1d:93:a1:
e7:b7:ce:f5:de:3e:3a:0e:c2:30:32:54:be:ee:a3:58:c8:54:
22:da:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:59:01 2026 by rpki-client