Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
File: okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft (raw, json)
Hash identifier: GblL6az6+2dnJYfq75vgn0lZ3U4W4jABrX9ZENU/wY0=
Subject key identifier: 41:E0:88:A8:05:A8:52:4C:2C:FC:42:07:42:39:40:69:7C:F7:73:42
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 01A0DF857579FFEF8B3F252A53C2504D6381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
Manifest number: 052B
Signing time: Sat 26 Sep 2026 21:01:00 +0000
Manifest this update: Sat 26 Sep 2026 21:01:00 +0000
Manifest next update: Sun 27 Sep 2026 21:01:00 +0000
Files and hashes: 1: 57HMaQpjooxld8kfUToFPpIZS8E.roa (hash: QetvDd/Kq64/KwzlgNTqKKATl2Q8brH/CAlMQr3SxOo=)
2: okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl (hash: uDz9xdmh8QC74Wv63iG7UUvIKsB1iM+jB9L1ZUaZVBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:75:79:ff:ef:8b:3f:25:2a:53:c2:50:4d:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: Sep 26 21:01:00 2026 GMT
Not After : Sep 27 21:01:00 2026 GMT
Subject: CN=41e088a805a8524c2cfc4207423940697cf77342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:fa:a5:18:53:ef:a4:4a:83:8f:7c:f6:ec:
fd:a4:24:6a:68:27:50:5f:a9:58:11:12:77:54:3e:
96:e9:cb:49:59:09:30:7f:b9:76:f1:47:bc:4a:40:
b1:ba:98:24:cd:72:a8:a6:da:b5:9d:8f:04:ea:c3:
a8:2c:e1:d7:a1:b8:ca:6f:9c:1d:8c:a9:8f:cd:3f:
48:8c:e4:49:a6:18:f4:6b:62:f5:83:fb:76:ea:05:
9a:1a:67:92:8f:df:28:f7:1e:66:59:cc:8e:77:19:
37:26:7e:06:cf:6f:3e:64:95:ae:52:a5:42:a6:c1:
cb:3f:6d:b1:8f:2e:ec:5b:1f:eb:e2:78:ff:f4:b9:
41:52:d6:1e:33:9f:6d:8e:60:30:b1:4e:88:3b:4d:
1a:0a:11:c9:50:d9:a5:1e:97:e7:21:ae:0c:13:3c:
94:94:89:4c:71:3c:e0:e3:e2:d0:2d:3f:d1:6c:a2:
15:7b:97:94:54:4e:43:11:2e:43:7e:80:26:bf:a4:
16:d0:8d:9f:53:64:01:cf:a7:a6:3f:42:05:2d:10:
8f:91:74:a9:bd:4e:7c:ad:a5:5b:53:6d:e7:00:1b:
ad:ba:9e:8f:af:7b:d3:fa:25:27:c2:7f:04:be:75:
73:62:71:53:37:3d:fe:67:a2:e5:81:43:49:6b:80:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:88:A8:05:A8:52:4C:2C:FC:42:07:42:39:40:69:7C:F7:73:42
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fc:f0:49:2e:d0:95:92:d6:18:2f:b3:cb:cb:84:38:e7:27:
66:c8:c4:e6:0d:ad:eb:5a:d5:5a:c2:00:31:18:5c:e3:f5:fe:
fc:34:a2:16:f1:c8:90:45:d3:87:94:a6:e4:26:12:8a:fb:93:
23:6f:0d:39:95:16:ba:37:a3:e5:a9:59:f0:4d:df:3a:f3:20:
d9:e8:c0:42:92:ff:b4:18:4b:1f:d5:6e:8b:52:f7:ad:1c:7d:
58:a8:65:5d:9d:a0:e5:f4:f7:bc:1f:c7:22:02:4f:51:0a:07:
cc:ce:38:56:a3:ce:c0:39:3d:bb:ed:58:31:54:84:86:5d:cb:
b0:89:46:bc:33:98:44:62:f1:e3:0c:ec:0a:ab:fd:a0:07:9e:
88:98:fa:51:9c:28:ab:a8:f3:a6:9c:a5:4e:d0:79:c7:0a:c3:
26:09:f6:de:3f:1c:4f:71:9f:8a:1f:43:36:29:70:e0:e6:c2:
76:f8:6f:2d:ba:a7:20:32:f9:10:ef:ca:2f:10:da:1e:e3:0e:
9d:fa:51:da:27:b2:45:16:71:e1:1a:62:a2:62:8e:a3:30:9a:
f2:ec:bd:b2:d0:11:90:d8:ee:74:e9:15:cc:6c:61:53:d4:c7:
9b:f8:0b:21:60:e1:b2:31:5d:63:ad:5c:51:90:b7:20:eb:e3:
76:0c:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:41:05 2026 by rpki-client