Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: MTboY0tpbetD4Zp1adDc3v6DrFqcZfZ+9LbE96D2mow=
Subject key identifier: 90:EC:B8:65:FD:05:51:22:8E:56:CB:0F:A2:EC:BC:81:DA:2D:9D:79
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019D27E016B54272DDA636CD03CABC41BAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: xEsJnFbasr/WZGvs+jCAkR49t4ZJIaHnSk5UmQYbMok=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:16:b5:42:72:dd:a6:36:cd:03:ca:bc:41:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=90ecb865fd0551228e56cb0fa2ecbc81da2d9d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:4a:c2:63:98:7f:9c:0f:fb:1f:dd:15:5c:
56:68:bf:bb:b7:af:22:59:28:2a:fa:4b:c7:c9:65:
08:42:18:40:14:5b:c2:50:97:87:69:be:04:3e:9d:
b4:e5:cb:45:fe:4e:a6:6c:23:dd:33:c6:7c:d8:e9:
d7:f9:9d:81:56:80:e8:26:ef:ce:fa:0b:3b:d1:bb:
8e:24:9d:7e:da:d5:b8:77:9a:1d:2a:5f:f0:48:4c:
38:e0:e1:88:ca:e3:89:9a:02:bb:2a:0f:c6:dd:8b:
a2:93:5e:a5:93:ff:61:32:6b:56:fe:d0:3f:09:6b:
5f:63:0f:ae:9f:8e:61:bc:be:4a:53:e0:1b:2e:e9:
8a:89:dd:8b:51:be:c4:26:42:9d:98:36:dc:a2:04:
02:33:23:f8:b9:c7:12:80:2b:e1:7f:20:45:1d:a5:
44:7c:90:3f:6b:1c:31:fe:31:3a:16:83:44:14:77:
b4:d9:b3:08:6c:fe:19:c0:e1:1d:20:48:b7:28:c5:
9c:48:7b:a7:09:0a:7a:24:47:f1:5c:d4:a9:df:57:
5e:aa:92:ac:68:af:bb:e5:80:0f:c2:de:b1:e9:2f:
3b:67:3a:5c:18:6a:f7:b4:0d:e8:27:b9:eb:1a:6f:
da:67:6d:f7:5e:1c:39:8d:ee:1c:9e:dd:a0:b0:3b:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:B8:65:FD:05:51:22:8E:56:CB:0F:A2:EC:BC:81:DA:2D:9D:79
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:86:54:01:b6:01:05:a6:e7:05:ca:5a:53:bc:ba:88:d6:
ec:16:4b:17:ff:08:6b:50:f9:46:19:e2:c5:4d:d0:0e:b4:b6:
0c:23:de:30:f6:85:da:29:27:10:e0:33:56:48:13:16:6a:25:
31:67:5e:1c:d5:ad:6c:ba:98:5c:61:3a:7b:a6:31:bf:2d:5a:
39:3c:8b:b9:22:ce:70:05:51:61:18:58:02:85:ff:bc:bf:62:
6f:e5:d2:9c:07:11:7e:a9:8e:18:b0:c0:a6:52:36:2f:26:dd:
bb:db:83:0b:fb:05:e7:dc:d9:3a:7d:8d:14:2c:0d:50:25:9f:
68:fd:91:25:a9:4b:69:04:06:24:14:66:70:ef:27:10:2c:bc:
6b:9e:f3:c7:03:90:55:97:4c:71:ef:51:db:b9:46:81:e9:9c:
01:bb:c3:40:0b:40:ac:fb:b2:63:54:ab:f4:52:16:7e:7d:84:
19:a6:6c:d7:c6:12:d3:a2:a6:f1:83:a4:e3:0b:ad:3d:34:12:
74:ea:17:d1:ee:6a:32:a4:d2:35:1d:34:8e:00:70:d9:75:f3:
7a:0d:67:2f:f0:f9:17:ee:b4:c6:90:47:08:fa:e0:9f:82:58:
e1:a6:4d:cf:fc:21:02:55:6c:f3:7f:7a:4b:eb:6e:d6:1a:58:
f4:e2:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:43 2026 by rpki-client