Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: YPUDL1Zkd0fMCgDsIvTVXiBZJFl+mTJNLrV+mu2jdyE=
Subject key identifier: BE:C4:BC:F1:A9:66:FA:FD:3A:BF:39:C8:96:A7:AE:71:B7:D0:A8:8D
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 01A14A61B9AC28B9DDCD6DCAC0681AD83F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 1191
Signing time: Sat 17 Oct 2026 15:01:20 +0000
Manifest this update: Sat 17 Oct 2026 15:01:20 +0000
Manifest next update: Sun 18 Oct 2026 15:01:20 +0000
Files and hashes: 1: J7pOiHdYKd2j4ChTilTVhn454DE.roa (hash: hcNJP1cRdMhyS1Muhx9YTYmFbSp39gRRkj1KauS78s0=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: ZJmJ1z0Jfl/+Vv84QxGvKARFbLVQteqhIYTzrw1P+p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:61:b9:ac:28:b9:dd:cd:6d:ca:c0:68:1a:d8:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Oct 17 15:01:20 2026 GMT
Not After : Oct 18 15:01:20 2026 GMT
Subject: CN=bec4bcf1a966fafd3abf39c896a7ae71b7d0a88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:eb:00:1f:f2:66:3c:8e:e9:b4:35:26:14:
83:04:84:ec:3c:68:d1:a1:38:bb:e8:3d:d0:a0:08:
7a:b1:a8:e2:83:69:f9:cf:40:a9:26:3d:a1:5f:d3:
67:0f:23:64:e7:c1:a1:1a:0d:0f:e8:72:d6:c1:a9:
66:0a:9d:08:ac:78:a6:c0:e1:94:0d:87:ef:52:f0:
56:9a:12:dc:05:a3:d0:31:a2:c6:4e:96:12:ba:63:
51:14:6f:81:10:56:02:02:64:07:ad:37:43:1b:1d:
29:42:3c:36:99:72:74:e4:ea:61:23:17:0b:08:33:
41:46:8e:59:f8:9e:b6:c1:ad:da:75:df:90:e0:d4:
74:c4:94:67:85:8e:85:08:ab:7e:2b:70:79:89:47:
c3:48:57:da:a5:0e:67:5f:1d:51:1b:c1:ff:3e:67:
0e:d2:07:d1:77:ea:dc:64:70:40:04:45:65:b6:bd:
d9:3c:d2:e5:1b:c2:a2:37:ad:62:1a:fd:61:28:e2:
16:54:d8:ac:0c:83:36:47:1d:5a:be:9e:f5:96:fd:
9e:e6:11:ec:a5:d7:d0:1b:70:8b:78:35:ee:e5:1b:
ea:62:87:00:68:40:bd:c6:95:5a:45:8e:1a:59:d0:
b2:a2:69:01:03:4e:cf:7a:7f:ce:3f:ba:68:01:c4:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:BC:F1:A9:66:FA:FD:3A:BF:39:C8:96:A7:AE:71:B7:D0:A8:8D
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:ba:b1:3c:d5:40:fc:f9:51:ea:d9:cd:6b:04:82:a0:52:
74:6d:61:3f:f0:cb:30:12:c6:10:2e:09:45:80:e3:22:22:b9:
49:bd:36:a3:94:f6:52:ef:a5:e0:c8:50:c8:0d:52:26:d5:c6:
8c:89:ae:ca:9f:0a:2a:7a:db:7f:a0:08:10:06:de:7b:e6:54:
0e:b3:8a:82:a9:a1:d1:aa:2f:53:b7:bc:1a:28:da:66:e8:51:
86:3d:93:43:71:fc:63:27:88:32:33:65:8f:f3:4e:8f:81:15:
6c:df:aa:72:c9:73:b6:53:10:a6:b3:7f:00:01:30:25:b3:cf:
ce:16:2b:1f:c3:d4:84:ef:32:19:3d:1e:cb:a2:e7:dd:10:4f:
5d:80:c6:47:07:82:80:9d:72:cc:94:13:fa:cf:e5:38:c6:87:
0d:fb:a1:05:51:c6:4b:55:23:f8:ce:2d:99:d5:cc:43:7a:b7:
16:c8:a8:35:f7:46:0e:d2:c3:f3:cb:0c:6b:16:51:ec:bd:40:
f6:a0:0a:c6:7c:b9:53:ba:82:95:25:f7:ed:d7:e5:af:8b:87:
9e:24:88:24:f1:4f:d5:2b:c1:b6:02:37:ea:23:97:32:37:e6:
47:b0:f9:f9:5b:fc:9b:c1:43:9e:97:cf:32:66:f0:72:b0:f6:
3d:9f:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:46:52 2026 by rpki-client