Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: By/2/DrLc5pIMFiniX/TLO839CZv8HaexlrxUsYtQw4=
Subject key identifier: 39:23:0E:73:21:42:34:88:86:F1:08:EF:EA:BE:E3:88:BC:6A:EA:E5
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019F95B7AACC26D12F9F854E989FA9CE90B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 20:01:09 +0000
Manifest this update: Fri 24 Jul 2026 20:01:09 +0000
Manifest next update: Sat 25 Jul 2026 20:01:09 +0000
Files and hashes: 1: GS12T19X33XYAhf098NVhyXx3j4.roa (hash: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg=)
2: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: WXIH/GHeRbpNmqsKBfgRVqtx5xsbC6g+Ji3NYYP6RMk=)
3: Ys4PogIAyq6Z-1e6V87HwtKW-Jw.roa (hash: 9OEorLPT8PEnhbBuzCTUI3Vb5lQD/nIA0b2dhSxkYk4=)
4: ckGyseiXClHPKvZc0nmqY19ttos.roa (hash: Yi/gbRZzD3hzlnLpg0sfEHwVq1nYLL7ZQtIyu02d0kc=)
5: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (hash: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo=)
6: tI1eWKq17tDG9hQWcAP-FozruWU.roa (hash: yszzGKzH2Y3utLHy31Xungt79IkdPWx2rbVckLVltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:aa:cc:26:d1:2f:9f:85:4e:98:9f:a9:ce:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jul 24 20:01:09 2026 GMT
Not After : Jul 25 20:01:09 2026 GMT
Subject: CN=39230e732142348886f108efeabee388bc6aeae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:ef:a1:b5:80:bd:20:2e:ec:6f:49:6a:ce:
35:3c:e0:16:ee:bb:21:91:93:4f:ce:3c:7d:00:d7:
27:a1:5c:0d:6f:e8:6d:f7:9c:1b:de:74:86:b4:b3:
d4:6e:b0:76:48:84:e5:53:69:ed:61:d4:1f:79:e3:
d7:9b:08:e5:5c:84:92:80:fa:a7:90:57:86:32:ef:
87:03:a1:7c:06:10:f5:c4:9b:c1:fc:72:70:54:0f:
f2:af:52:d9:cd:c5:16:77:c5:d6:ec:e5:7c:44:63:
bb:d6:85:71:5e:8c:25:7a:40:15:2e:64:4a:ef:87:
fa:a3:93:4d:35:28:3a:ed:df:ae:1f:bd:56:d2:52:
00:da:bf:0b:a0:b1:0e:01:24:25:0b:ba:d2:b9:54:
df:3e:ca:28:ff:de:ea:01:23:94:4b:37:7c:e9:1b:
4c:34:2e:72:b1:ac:4b:37:c2:c4:fe:ee:fe:37:38:
3d:f7:6c:a4:3c:30:5d:b0:a6:eb:b9:22:7d:87:3e:
23:f2:33:e6:60:bb:bf:8c:ab:ae:8a:85:67:2c:2a:
da:93:60:d4:b7:2c:e5:3e:1f:95:25:84:41:ad:7e:
52:ab:11:68:58:f4:89:b3:fe:c8:eb:fc:51:2b:2d:
e4:7e:10:09:aa:42:38:9f:e0:e0:34:f1:64:11:0d:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:0E:73:21:42:34:88:86:F1:08:EF:EA:BE:E3:88:BC:6A:EA:E5
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:e7:f4:9c:45:b9:6a:e0:8b:46:de:17:ae:6a:97:94:bf:
c6:15:1b:f2:d1:b3:b6:3e:22:99:4f:79:f7:88:86:fe:30:b9:
e2:1d:fd:4b:ab:cd:a6:f7:1f:a1:34:98:21:ee:83:45:66:b2:
7a:52:86:ed:dd:1d:cc:41:09:22:9e:1e:a5:4e:05:f1:29:a5:
1a:3c:54:24:60:21:0c:66:4e:04:05:6b:04:79:77:f3:f1:67:
16:84:fd:c2:e1:11:f1:d9:5f:18:1e:aa:24:01:00:75:50:33:
ad:09:c7:78:0a:cd:98:e4:2e:36:69:8e:23:36:fe:a8:f3:80:
7d:de:ca:c3:39:8a:81:5b:70:70:d1:5c:c5:2b:70:c5:8e:a6:
a5:56:02:f2:1b:58:e8:75:2d:24:46:fd:af:f0:b0:9a:92:4a:
54:f9:5b:ce:19:1d:73:ae:4c:1e:d5:ae:7c:64:b4:ca:2e:44:
3e:5a:4f:4a:6b:a0:81:0e:db:24:8c:0b:c2:21:b3:c8:b9:9f:
e1:53:09:d1:2c:f6:17:47:25:07:81:fe:c0:cb:fa:62:ce:51:
dc:60:0e:ee:b1:50:06:b4:a6:3c:92:9b:f7:f5:7c:38:e1:9f:
60:a7:42:b2:32:a1:6b:c4:0b:a3:94:e3:18:27:39:b5:25:ab:
63:0e:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:20:12 2026 by rpki-client