Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
File: okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft (raw, json)
Hash identifier: x4k8IkDSHPxRv3YFCvFYl2CwLne6i+UVpI8zxMAgxu8=
Subject key identifier: BA:1C:62:F7:AC:5A:4B:A7:70:1F:13:29:DD:59:01:8B:30:E7:A8:F1
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 019F935ACD8DC0EA544F56F0049CB7D98AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
Manifest number: 047E
Signing time: Fri 24 Jul 2026 09:00:29 +0000
Manifest this update: Fri 24 Jul 2026 09:00:29 +0000
Manifest next update: Sat 25 Jul 2026 09:00:29 +0000
Files and hashes: 1: Cyd9epktZUP2NzDWt7kuBmj63qY.roa (hash: 4Hn7SVvllIET4/FJbhg9Vi4tqF9x0RkLIB5CUH+jolo=)
2: okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl (hash: oddVGu39jL2ef6J1N4x8q1YF3i1jd2ww7pv5+12e1+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:cd:8d:c0:ea:54:4f:56:f0:04:9c:b7:d9:8a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: Jul 24 09:00:29 2026 GMT
Not After : Jul 25 09:00:29 2026 GMT
Subject: CN=ba1c62f7ac5a4ba7701f1329dd59018b30e7a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:dc:96:92:66:63:cb:e8:55:e3:cb:79:b5:
ce:c2:22:89:a4:6d:83:ac:81:9a:44:29:bb:4a:81:
8b:7c:05:ed:0b:e0:78:b6:fc:5e:9c:bb:5b:2c:64:
65:64:b4:cc:5e:1b:90:60:d6:6d:e1:4a:1f:6f:c9:
a6:38:e0:ec:e3:28:89:e0:5e:5e:07:e3:75:d2:66:
a7:a5:5d:de:a6:ac:62:e7:3a:84:fe:4c:8c:8c:58:
3c:e1:9c:fc:3e:14:14:ff:f0:d5:f0:c7:c1:2e:70:
89:b4:b6:82:e5:5b:6f:18:1f:ce:e0:7f:2b:ae:0a:
90:28:3a:10:08:28:7d:96:83:ba:78:41:b7:1f:9b:
5a:55:48:78:c1:3b:e3:ca:67:fa:63:63:f8:89:5f:
bf:b6:ca:79:73:11:ab:d7:1e:a8:93:cd:df:b0:ae:
f6:86:dd:31:6c:94:80:f5:6c:d1:93:ee:8e:e5:48:
14:06:d7:59:62:77:e1:2e:d9:b6:09:d4:27:d9:e0:
0e:14:dc:2f:b6:d1:47:79:73:df:8d:16:f3:e3:00:
4b:cc:64:b6:5f:de:39:45:6a:3a:7b:33:76:67:f2:
be:da:50:8a:38:a9:00:70:1d:f7:84:e6:e5:0e:dc:
ac:e8:83:70:32:d3:55:a0:8d:9c:cd:be:26:aa:55:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:62:F7:AC:5A:4B:A7:70:1F:13:29:DD:59:01:8B:30:E7:A8:F1
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:71:0b:7d:8d:a7:37:1e:28:32:57:63:b8:23:99:d6:b5:
b1:13:66:91:a7:6c:ce:a8:6e:d3:6f:04:8b:5e:b8:2f:b5:1e:
1e:20:35:4c:94:35:4d:7d:fa:3a:d0:16:b5:6d:c1:b6:e5:42:
ca:6c:2c:93:2c:58:51:1c:60:af:29:ff:b8:60:df:f5:08:de:
dc:57:18:b8:ce:d4:9b:bf:18:e5:40:ff:6b:89:de:0f:e8:6e:
db:0f:50:2d:a8:7e:cc:54:e5:85:31:09:37:42:21:74:bc:75:
83:ba:81:da:22:7c:dc:c6:f8:d4:22:79:37:93:5b:f9:62:e2:
7a:fe:70:90:49:9b:1f:7b:1e:c9:f8:d2:f0:90:06:98:47:3b:
45:28:e3:4f:bd:71:6e:a0:f3:16:14:5e:13:8a:6c:d4:27:d1:
2b:c2:b2:b3:aa:27:61:eb:58:ac:76:05:5f:18:ed:0d:35:c5:
8e:b0:e3:65:31:62:1d:c5:80:01:7d:73:f4:0c:c7:92:c2:f4:
75:50:9f:70:de:c9:ad:c7:ae:e8:cc:c6:02:33:37:9d:ca:19:
90:61:92:4f:8e:49:1a:c8:7f:67:3a:59:26:f3:1e:ea:d1:db:
54:1c:4f:4d:d3:e1:64:a2:5b:f3:92:80:78:93:e4:94:c4:52:
c9:d8:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:50 2026 by rpki-client