Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: dGmaODZhW4dVs1Dm3x5SDg8Hq9SidgmA+HiIWRGjFig=
Subject key identifier: C9:E4:2B:82:58:FE:41:6D:A9:8B:AC:7D:E3:33:68:F2:44:0A:40:77
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0D012A62E06A902ADE9AC8DE7E9DF87A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1A89
Signing time: Wed 23 Sep 2026 21:01:18 +0000
Manifest this update: Wed 23 Sep 2026 21:01:18 +0000
Manifest next update: Thu 24 Sep 2026 21:01:18 +0000
Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=)
2: 1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa (hash: he75YWP6CSnWhVc2/UtLhyj8J3gpC2sQruvnzJGb/hw=)
3: 7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa (hash: 7Kjf7QXiHqRMdhYCby7XVrJVdqbbCVJGhej/irKWyFQ=)
4: CC-E9kDBg6k16GvFdXpt0v0N9c0.roa (hash: XoR9Xbt76Dj+y6aqOpHi+5O2JWpDsd3FUW+Ej0CkOKs=)
5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=)
6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: dmmavee2KN/jjIHYLN2l226i/Z+DwSxjImVgcC+h/1w=)
7: ks4rcCnYGbAZseomOd2Yfr0zDxU.roa (hash: jhqTfs4Y7TCVLQDf9QvU6rDDBDK9avjiClsJAwUoI4s=)
8: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=)
9: v7RvCMDdWErq2gHhPzdgbrJTsQc.roa (hash: E7ugE/1PAPmkxbHvkS+3vDDe3Al8BCMsYCFX6+imnqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a6:2e:06:a9:02:ad:e9:ac:8d:e7:e9:df:87:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 23 21:01:18 2026 GMT
Not After : Sep 24 21:01:18 2026 GMT
Subject: CN=c9e42b8258fe416da98bac7de33368f2440a4077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:ec:86:0d:c7:c0:50:99:e2:bd:fb:fc:26:
f4:29:2f:00:86:3d:75:43:c0:e7:96:5d:8b:b4:fb:
51:44:c1:f0:f2:e6:6a:07:0a:2c:a5:38:b1:de:a4:
fc:9f:d9:a7:5b:f9:2f:cb:93:8a:41:c0:01:b3:33:
3d:52:80:4b:47:b1:bc:6a:5d:12:25:17:a9:09:27:
45:c1:d6:62:b8:f0:56:cc:93:e6:ad:f4:c6:e7:cb:
73:56:5a:d1:12:41:e1:47:df:08:1b:5e:32:29:2e:
a1:93:27:35:df:42:f0:be:71:70:7c:25:d5:75:a4:
f4:5c:31:81:9e:9e:3a:ec:3f:fb:1d:86:9e:ce:8d:
d5:81:0f:e1:34:46:67:fc:2f:fe:3e:fe:86:44:ae:
a5:db:af:fa:b1:b9:d3:70:d5:61:bb:42:a9:1e:94:
1f:1d:32:0c:7b:63:39:e1:ac:84:25:be:af:7a:05:
0d:a7:65:b5:40:0d:63:73:9e:5e:53:ae:43:ba:38:
58:8a:49:18:09:f6:ab:a1:fe:d2:30:e6:bd:9f:29:
7b:83:5d:c2:ae:7f:00:8d:2b:59:36:f7:56:2a:8c:
66:f1:f6:f3:45:9b:da:35:88:ed:40:d6:13:d2:3a:
0f:02:d3:69:0f:a4:4d:ac:43:e7:0f:2c:c0:69:73:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E4:2B:82:58:FE:41:6D:A9:8B:AC:7D:E3:33:68:F2:44:0A:40:77
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0a:d8:86:d4:2d:5a:84:ed:f3:46:2a:3a:90:e9:08:13:28:
3b:3b:d5:df:1d:4b:16:4e:09:7e:5e:87:fa:65:73:b4:2f:a8:
7b:4f:d5:97:3f:a4:36:ba:76:bd:fc:a7:7d:4e:9e:47:2a:13:
14:a9:dd:ae:2e:ac:aa:73:7c:4a:06:57:a3:f6:45:f8:0c:1b:
f7:dd:5e:bc:6c:d9:41:41:51:59:79:c2:0e:d1:63:34:1b:0e:
49:23:1d:57:5f:69:bf:b3:4f:1e:0d:b1:9d:02:99:81:70:23:
c3:b3:e1:03:ec:90:0c:b8:69:00:65:e5:bf:14:44:20:99:76:
9e:60:cf:89:ca:23:31:1a:f5:89:38:52:98:fc:5f:a3:e1:ed:
80:80:6d:d5:f4:94:4c:c6:bd:f4:e6:b7:0e:9b:b6:fc:70:f3:
6b:3c:04:6d:d9:35:40:35:57:a9:3f:59:c1:01:cc:b1:35:e6:
d9:a1:71:7d:fd:cd:61:44:d8:0f:98:b6:f7:b5:8d:85:20:e6:
93:ea:14:41:54:5b:f8:77:da:d8:b6:d7:20:64:81:86:30:80:
fe:ba:96:f2:03:a4:cb:a7:0b:b4:28:42:91:6a:49:39:6d:f2:
11:e6:8e:b1:8e:bb:63:28:3a:bb:b6:6c:36:20:d2:23:6b:00:
6a:25:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:22:13 2026 by rpki-client