Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: P2h0zmgnfQJPzmxEoVe7eaAcT/Ibw0w96G/LFuBDiag=
Subject key identifier: 24:6C:61:0F:DF:01:CA:AB:F5:A6:2A:DE:2A:FC:9C:E4:9B:37:08:71
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 01A0D64BD526F07B529B897F499C16486370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 0259
Signing time: Fri 25 Sep 2026 02:01:29 +0000
Manifest this update: Fri 25 Sep 2026 02:01:29 +0000
Manifest next update: Sat 26 Sep 2026 02:01:29 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: 62QEeOs6Iu4VEJYrjXBzu5Ey5jn3cCdfLwzFVTrNn2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:d5:26:f0:7b:52:9b:89:7f:49:9c:16:48:63:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Sep 25 02:01:29 2026 GMT
Not After : Sep 26 02:01:29 2026 GMT
Subject: CN=246c610fdf01caabf5a62ade2afc9ce49b370871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:61:06:9c:7e:84:c9:69:33:69:9f:95:aa:
44:67:67:ad:b8:22:b6:02:ab:2f:0b:04:7a:15:f6:
69:16:b3:7c:9b:8b:28:59:0f:cb:42:94:db:fd:45:
e2:ed:ae:2d:9c:b1:12:61:20:74:d2:d7:5e:93:ef:
7b:b1:3e:d4:10:6c:c7:8f:73:51:7c:02:00:4a:8b:
ce:4e:8d:2d:a6:bd:b7:43:d4:9c:48:0f:c7:79:9e:
3e:81:fd:6a:8e:f9:f8:d2:1f:88:75:2d:cf:7e:9c:
8e:f2:64:c1:cc:77:2c:ad:3c:9f:f0:5f:27:ab:cb:
9a:dc:1b:11:34:55:29:ed:88:9d:98:c0:b0:24:0b:
05:9b:09:fa:a4:e3:01:c9:d6:8e:0d:cf:ee:78:3e:
5a:29:c0:e9:c0:e0:46:7a:1f:ef:16:5d:60:02:b1:
6f:8e:b5:a9:82:32:2f:2c:7c:27:7c:41:8d:0a:d5:
f6:f2:0b:8c:02:86:38:e9:2d:34:37:63:24:7d:2a:
08:ae:58:63:9a:5a:4f:b8:11:a7:b3:94:f2:d6:5a:
a7:77:53:14:ed:2b:4c:2b:c3:39:1a:24:1a:8e:15:
5b:fe:d3:85:44:3a:a0:84:fb:72:29:3c:8a:b0:36:
9e:8d:3f:f2:e1:72:d4:dd:5a:bb:71:54:81:19:15:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:61:0F:DF:01:CA:AB:F5:A6:2A:DE:2A:FC:9C:E4:9B:37:08:71
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1c:34:b9:3c:10:59:68:df:8a:7c:12:2e:17:bf:e3:4f:73:
84:25:a0:b6:f7:dd:ab:66:14:84:0b:eb:9b:fe:db:ce:62:72:
a9:b5:12:44:93:6d:33:ac:ed:f9:d7:96:9f:2a:fa:81:8b:33:
38:76:43:ce:6e:f1:c5:0a:ba:1f:89:88:c4:3e:76:2e:5b:96:
92:eb:a2:ca:de:54:93:85:25:25:4d:7a:e4:ee:ab:bc:9f:2c:
84:a1:9e:2c:01:e0:ff:c8:d8:17:45:fa:cd:2a:1e:b3:0b:ad:
72:03:0f:51:22:6b:f2:4b:d6:41:42:62:30:3e:59:8a:57:16:
23:58:2c:ee:4e:3b:8d:5a:18:17:a6:d9:6e:40:0b:fc:12:cd:
d6:99:bc:d1:34:9c:4d:d3:05:d6:5f:cd:1b:8a:24:f0:bc:c7:
63:80:a8:5b:9d:a7:c4:d7:53:66:f7:38:16:cd:34:9f:95:87:
db:60:0a:91:ad:4e:51:c2:f0:f1:58:ef:5d:59:48:ab:03:78:
64:76:80:fb:4d:52:69:40:01:47:8a:19:ec:a8:c5:67:60:9f:
6c:02:96:45:9a:06:42:44:4c:54:55:0b:b0:08:46:74:c9:a6:
6c:64:97:6b:1f:2a:38:78:e8:be:7b:be:77:4a:b6:63:b9:12:
4f:51:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:31 2026 by rpki-client