Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: uncIo5K3sz86qY6l76SPi7Wgu8kk6CwZH92XkMlnnXk=
Subject key identifier: 8F:0C:0A:79:19:13:13:7F:39:E7:C2:43:56:10:4B:2F:AA:0D:CE:57
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01A0D64C089C10AB01BB62212C467BC07C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 02:01:42 +0000
Manifest this update: Fri 25 Sep 2026 02:01:42 +0000
Manifest next update: Sat 26 Sep 2026 02:01:42 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: V/WH8DyQsfuB7FLk4rDfjXmAOEupN491uFi5aNI66ao=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:08:9c:10:ab:01:bb:62:21:2c:46:7b:c0:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Sep 25 02:01:42 2026 GMT
Not After : Sep 26 02:01:42 2026 GMT
Subject: CN=8f0c0a791913137f39e7c24356104b2faa0dce57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:c9:1d:35:04:f0:81:ad:0e:ae:18:40:60:
18:06:b8:b8:90:fd:41:30:b4:df:aa:df:9e:2b:89:
63:35:61:f1:e2:2d:48:74:38:e2:4e:09:fa:9e:e2:
08:f8:75:b4:7e:cb:c0:27:21:22:2c:94:e2:3f:f0:
c1:e3:92:36:0d:46:68:f6:dd:45:6d:69:ca:b3:79:
a2:ff:4d:a4:21:4b:c0:81:ef:20:08:04:aa:d1:e9:
aa:a4:31:bc:96:e8:51:89:fc:33:ab:16:df:0e:ff:
3b:78:4e:d5:a5:ca:55:63:0b:1b:30:96:8d:e1:88:
bb:a1:47:a6:60:6d:32:cf:5d:8d:54:bf:0c:5b:47:
20:59:ea:08:71:7d:01:e0:a5:d2:10:b7:4e:05:43:
f3:78:8f:f6:f3:cf:f4:47:89:7e:21:cb:25:92:09:
7f:0d:ca:6d:42:e7:91:f6:55:c7:77:02:44:15:20:
0a:98:00:18:ab:6b:8f:a5:d0:06:d8:4a:df:29:25:
43:08:c3:d9:3a:35:be:47:6a:8c:97:62:0d:62:4b:
63:8c:e5:ff:ed:b3:31:fe:ec:51:d9:b3:0b:ad:f0:
e5:6d:8c:69:c1:1b:10:4e:17:af:33:71:4e:89:b9:
89:ed:74:bf:eb:7f:7d:1d:e6:69:51:e4:94:fe:f5:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:0A:79:19:13:13:7F:39:E7:C2:43:56:10:4B:2F:AA:0D:CE:57
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e0:96:b4:f7:69:46:6c:6c:27:42:63:ed:dc:d3:12:3b:e9:
04:3b:6a:2d:a6:5f:02:c6:cd:78:57:a8:55:d2:9a:6f:e7:37:
36:cb:46:4b:60:2c:3e:d0:a9:03:c5:e3:42:83:c1:ed:a8:f7:
b0:df:78:95:75:8c:96:32:e3:6c:c3:83:83:75:a0:12:9a:f8:
60:bd:f7:5f:8b:ab:5a:4a:fa:8a:47:d3:4d:c5:b3:81:70:8b:
8a:b4:8c:53:5b:9a:12:6e:1b:6a:04:1e:7b:ae:14:9c:e0:b9:
97:51:d1:6d:91:93:c4:90:46:f7:14:cb:fd:c8:f7:57:a2:32:
b5:da:60:fa:4f:15:9a:8a:1f:ec:ae:47:b3:96:9c:1d:5f:c6:
92:b5:1a:ba:91:07:98:ba:7f:67:df:c4:be:b5:a3:10:71:94:
e7:8b:f1:08:e7:0c:48:9f:c9:19:59:79:07:66:4f:e9:43:da:
5d:17:91:ee:c4:f7:14:5f:67:bf:2e:19:f0:a5:a1:7b:2e:69:
d4:40:7b:32:9c:06:c0:1f:56:c2:f5:0b:72:20:ee:61:03:f0:
b9:9e:38:3c:ef:63:31:85:7c:ea:f6:20:21:f6:30:2a:88:80:
e0:d8:10:b1:52:ee:82:bd:72:65:64:ee:c6:f4:f8:d1:01:8d:
7c:c0:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:46:36 2026 by rpki-client