Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: myIIVr7k51a61tAWr9Y0bTBNOCS1PE42omJcveaANKo=
Subject key identifier: 94:3F:0D:AE:6C:FF:24:C6:DF:D9:EF:55:58:86:A5:29:4F:4E:8F:92
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01A0E1E21F1744C2F0770B75524EEB4E2BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 08:01:27 +0000
Manifest this update: Sun 27 Sep 2026 08:01:27 +0000
Manifest next update: Mon 28 Sep 2026 08:01:27 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: 14AT1MRaMvXO+MCBV6jQXSqjK5h/24VTRF1VrN5hgrM=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:1f:17:44:c2:f0:77:0b:75:52:4e:eb:4e:2b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Sep 27 08:01:27 2026 GMT
Not After : Sep 28 08:01:27 2026 GMT
Subject: CN=943f0dae6cff24c6dfd9ef555886a5294f4e8f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:65:f0:6d:12:bb:32:4d:0d:f5:24:4d:42:
dc:57:07:62:94:a7:cc:9e:dd:53:03:91:45:c0:77:
dd:c1:e5:97:90:c2:d4:9d:ae:2a:2c:be:61:cf:4b:
6c:62:c7:4c:93:8a:68:55:f9:95:d9:31:6d:3d:72:
a0:c6:e3:a8:2a:22:34:8b:9b:67:f6:58:d1:1f:8d:
4e:51:13:dc:c1:fd:1b:5c:ff:aa:35:b9:aa:89:48:
1a:60:a2:38:35:ec:7d:35:63:d9:b2:a8:2e:18:46:
8c:e9:ce:d1:25:57:a8:83:53:8a:78:da:fc:e1:2d:
ea:0d:fc:99:5b:90:5a:90:d1:69:ca:b1:0c:4c:e4:
db:69:62:3c:f0:e8:77:b6:ec:09:9b:23:30:a5:f4:
18:63:d5:a2:43:88:5d:9f:27:f5:99:29:05:66:bb:
00:09:5e:c5:99:20:66:36:ea:06:20:0b:7c:18:b4:
86:6f:13:1b:f8:32:8d:0f:3f:c8:e5:76:4d:0c:69:
0f:14:af:e4:84:72:43:92:91:1b:bf:e9:71:fd:b4:
72:1e:76:44:93:f8:03:7c:13:b5:ca:d4:b4:7d:f5:
10:00:f9:12:c0:ff:b5:1e:38:1b:08:13:55:1f:f9:
44:d0:fb:83:d1:6e:54:a7:1c:bb:a8:ae:06:cc:01:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:0D:AE:6C:FF:24:C6:DF:D9:EF:55:58:86:A5:29:4F:4E:8F:92
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:89:74:b6:19:69:81:5c:c9:40:86:0b:88:69:1d:af:80:
c1:4e:ea:45:2b:27:2c:6c:86:eb:ba:5f:84:5a:2d:65:23:c3:
40:b3:2a:db:38:3c:a0:06:4e:76:92:a1:04:b4:29:93:84:74:
09:1e:18:45:03:eb:c0:26:d3:cd:a8:b8:e1:0f:67:6c:fd:45:
14:f7:6f:d0:2c:55:d8:80:5d:d0:b4:2b:4c:ca:5d:5a:3b:b3:
77:88:41:58:69:b2:a2:37:21:44:a2:c8:da:1c:21:bf:e6:44:
45:cb:ef:82:c9:a3:93:bc:af:38:92:c7:15:0a:ba:74:5a:81:
68:7c:bf:2e:33:da:02:d7:88:21:f2:05:46:40:2a:79:43:08:
ba:a2:8a:0a:4e:28:59:26:62:e0:1d:09:50:55:a7:18:bd:90:
81:9e:e8:fb:81:0e:9c:e9:66:16:2e:5e:e3:27:40:bc:fb:e4:
42:fa:08:70:5a:e9:19:be:cf:ee:99:f5:d1:b9:ba:ab:2d:78:
1c:d8:96:be:f5:10:50:f9:0c:2f:d7:03:a9:bc:97:b6:15:a9:
c0:7b:22:e3:3d:9d:47:3a:78:b9:d8:70:be:45:81:75:6b:c0:
af:5c:8e:2c:bf:fe:e7:d8:19:f5:8c:ac:e5:02:ed:a3:89:14:
38:27:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:53:26 2026 by rpki-client