Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
File: ok-vY1IPfv9skINInIuVQ_XEHms.mft (raw, json)
Hash identifier: 1Krta9JiXrBTZqfQmRRaBpGIKg1qKHvf9FJ00DOE/h8=
Subject key identifier: F1:E2:10:54:44:30:0F:2B:77:EC:70:55:32:68:5E:75:B0:B2:B4:D3
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 019F91DAE37C6D9DDA0D764CAD5D6E2D0937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
Manifest number: 01B1
Signing time: Fri 24 Jul 2026 02:01:08 +0000
Manifest this update: Fri 24 Jul 2026 02:01:08 +0000
Manifest next update: Sat 25 Jul 2026 02:01:08 +0000
Files and hashes: 1: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (hash: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=)
2: ok-vY1IPfv9skINInIuVQ_XEHms.crl (hash: ywqpGnGg+4YlfVh7iXYkZiejJRqTeUOTYcaNt/TzdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e3:7c:6d:9d:da:0d:76:4c:ad:5d:6e:2d:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Jul 24 02:01:08 2026 GMT
Not After : Jul 25 02:01:08 2026 GMT
Subject: CN=f1e2105444300f2b77ec705532685e75b0b2b4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:32:5a:99:62:a3:a1:65:96:d8:61:f5:e5:
ad:24:4f:9c:ee:2e:a9:98:aa:b9:ec:f9:64:25:70:
5d:ce:4f:3b:dc:7d:4e:81:07:59:92:fc:9e:cd:26:
d3:fb:ba:59:19:56:88:fe:0b:c7:51:c6:51:b2:46:
f6:18:3c:16:21:33:af:ff:4b:0a:7c:f9:0a:2f:4b:
f5:c1:b9:33:d1:0a:f2:d9:d0:a1:a2:31:4a:25:0a:
a8:78:c0:92:d3:9c:e6:f2:30:88:ce:e5:95:35:d9:
a9:d4:7f:53:51:64:e2:78:0b:7c:4a:a9:85:bb:64:
89:3e:85:de:82:72:6e:39:61:7c:3a:58:0d:0a:8a:
be:90:92:06:fa:04:fd:c7:92:f0:ca:1d:d2:90:33:
0a:9f:1b:20:09:f8:3c:15:00:4d:cc:03:e0:8e:56:
94:9b:cb:e3:59:14:88:48:4d:b9:32:4e:6c:15:30:
f4:de:92:89:12:cc:b9:77:de:48:65:dd:2e:15:97:
bb:38:a2:f3:3f:2f:78:41:86:96:81:05:d1:43:d2:
46:30:89:5d:18:c9:c4:37:10:f9:52:63:ed:03:ec:
0a:12:d3:84:66:5d:80:63:19:78:d5:83:2b:7c:de:
32:cc:85:43:06:d7:1f:2b:94:ec:8e:07:0f:7a:6b:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:10:54:44:30:0F:2B:77:EC:70:55:32:68:5E:75:B0:B2:B4:D3
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:0b:b0:8e:59:e5:c8:66:8f:d1:f4:a3:f8:77:85:7e:e5:
f1:00:b6:45:f1:69:d3:d5:01:24:01:71:e7:d5:49:d7:3e:cf:
cf:fe:82:35:ea:3c:44:1c:fe:0c:83:07:f7:53:44:59:9e:8e:
31:93:dd:fd:2c:e7:47:60:7c:23:f6:c9:9d:58:e4:c8:41:a8:
35:02:fa:3f:24:41:98:bb:9a:99:4b:6d:f1:53:2b:a7:d5:76:
9b:09:d3:bd:01:3c:e6:6a:d5:40:f3:44:74:70:86:f6:2f:b8:
89:fb:3e:72:c6:8c:22:79:51:40:48:af:6b:b7:ff:56:e0:e8:
2e:1c:53:a6:9f:3f:53:70:fa:3c:a3:61:7c:3f:6f:dd:36:87:
2a:46:2f:cd:6e:35:2a:bb:2b:d9:59:43:79:84:9a:10:52:49:
18:8b:c3:91:71:65:78:e1:30:99:82:35:51:f3:33:77:3c:30:
ea:b5:37:34:51:47:96:47:05:26:cb:49:ad:51:ee:a3:8c:37:
d8:9b:d1:ef:1b:76:03:a1:bb:8a:8e:29:13:5d:6c:a6:28:a6:
e9:eb:26:04:97:ab:4a:c3:c8:e9:da:45:7e:9e:24:1e:71:7d:
ea:02:60:52:73:9d:93:66:3e:f2:77:39:24:db:69:ea:40:87:
ce:0f:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:19 2026 by rpki-client