Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 6KH8MMCiM7AVRpewmPr+6ch4zAldnRY2d/gKfGBDL8o=
Subject key identifier: A7:29:24:8E:2A:E6:4A:1F:CD:EC:BE:0C:0C:25:3F:23:06:A0:4E:C7
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019E1F10E9F45517B739798483C409EDEE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:01:02 +0000
Manifest this update: Wed 13 May 2026 02:01:02 +0000
Manifest next update: Thu 14 May 2026 02:01:02 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: Sh19cLNYnBWJn2JGKlMyPjG2/yv7OJeJcoo2PNv5iOw=)
2: Tft6fYI7IwQURHwYjYKIwFhMDC0.roa (hash: +bnAa7jh9Xpe/pFLp2vv5BR8Wn0rICOOXWCAdKaw8W4=)
3: yqvsB5X_-DAuVHS9sST4aCAyA_U.roa (hash: 20FY2GatI2xBOw2RMd7efcRJ7wV9DVAWy1XKsIhcS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e9:f4:55:17:b7:39:79:84:83:c4:09:ed:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: May 13 02:01:02 2026 GMT
Not After : May 14 02:01:02 2026 GMT
Subject: CN=a729248e2ae64a1fcdecbe0c0c253f2306a04ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:8e:c3:a4:47:15:39:fc:c6:7c:e8:be:13:
7b:f3:84:fc:f5:bb:21:97:64:28:5f:ee:56:3a:5e:
d3:e7:15:09:87:e8:f4:74:a2:f0:e6:6f:24:29:77:
b0:ef:c0:24:06:57:37:28:d2:ab:10:20:dc:4e:42:
40:3d:6c:26:7b:81:1a:9b:4d:3d:27:be:63:fa:67:
50:73:bc:5e:df:dd:79:35:d9:b6:ae:8b:6d:83:00:
ac:59:29:c1:9a:44:c4:21:35:27:a1:fc:06:02:18:
5a:1e:5a:73:ab:75:e1:69:d3:70:32:07:da:d7:78:
0a:20:f1:c4:ae:6e:e6:10:56:d2:ab:96:58:b4:8d:
c7:f0:48:e3:10:c0:90:9c:6c:db:0c:ac:bd:7a:a4:
55:67:91:69:26:ea:00:dd:78:8a:e2:0b:29:78:33:
33:cc:e3:a3:99:2c:bc:fa:d8:5e:b6:63:e0:70:8f:
0b:93:e0:eb:b0:70:2c:91:b0:89:1e:c6:ce:f1:e0:
2a:d9:17:04:dc:3f:fc:c8:67:b8:0b:a4:ca:1f:c9:
16:05:97:3f:df:ff:1c:a8:4c:26:0b:41:f6:d2:b9:
49:da:27:93:2a:ce:97:41:eb:d1:42:68:1b:fc:ef:
5a:d7:9e:ee:97:af:9c:e0:5f:66:50:7c:46:94:cb:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:24:8E:2A:E6:4A:1F:CD:EC:BE:0C:0C:25:3F:23:06:A0:4E:C7
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:b1:be:28:07:0a:18:28:2f:dd:0a:a7:81:7f:ca:93:cb:
1e:93:81:58:b2:50:c2:48:c7:e4:61:cd:fa:ae:95:fa:ae:3f:
e9:e3:6b:70:d1:b7:9f:7b:59:8b:30:8f:f2:2c:ae:9d:77:d8:
eb:17:65:ee:e1:69:7f:de:dd:fa:5a:f7:4a:b3:84:06:3e:4f:
a0:7f:0e:7b:4a:0c:be:83:d1:de:91:9e:5b:a9:ea:6e:9f:d3:
ee:1c:bf:7c:95:1d:ec:f6:9c:ff:80:07:e7:bf:23:da:d0:04:
4b:a6:9c:b0:41:27:5d:d5:20:30:8f:73:94:1d:9e:c2:5b:52:
6d:9c:43:7a:fd:7f:ba:ea:67:c6:1d:72:b4:e8:85:27:75:76:
de:b1:d5:07:f7:e1:97:11:6d:63:c5:62:ad:d0:8a:57:6d:77:
a8:8d:aa:75:8c:37:00:da:16:dc:d5:e8:bd:f8:9b:9e:89:b2:
73:ac:00:f6:ad:65:c8:2e:9c:c1:62:54:4a:3b:49:67:e2:7c:
90:b5:1f:85:ab:68:29:7f:28:bf:3d:6a:fc:c0:33:d7:16:05:
16:33:b5:bc:7b:eb:e7:82:04:a3:4f:24:d3:5f:2a:78:10:8d:
e6:d0:72:aa:9d:91:12:cd:cb:d2:9b:24:a8:6f:1e:2b:a4:d8:
b7:5d:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:09 2026 by rpki-client