Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: YckylzbQFmmwBosk/Qy+bM7R221BdoYIExhBzosymC4=
Subject key identifier: 3A:33:66:EA:F3:BF:14:CB:9B:3A:A4:3D:79:18:0A:2F:DE:25:70:DB
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019D98BD55C517225C261BA6CBF354FA4B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:38 +0000
Manifest this update: Fri 17 Apr 2026 00:00:38 +0000
Manifest next update: Sat 18 Apr 2026 00:00:38 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: kgHjEe2y+aqe2vY3CmvByFEBCoiu80NrisKHmIQ/bq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:55:c5:17:22:5c:26:1b:a6:cb:f3:54:fa:4b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Apr 17 00:00:38 2026 GMT
Not After : Apr 18 00:00:38 2026 GMT
Subject: CN=3a3366eaf3bf14cb9b3aa43d79180a2fde2570db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:06:77:fa:1f:13:a9:c2:3d:7f:df:f4:46:
7f:f1:6c:b3:f5:3e:ef:63:d1:13:9d:9a:83:35:1d:
59:87:56:d9:e6:36:eb:78:02:67:e2:3d:19:c2:4e:
c3:cf:de:05:ed:fe:a3:4d:2f:4e:ef:f6:ee:98:e1:
88:d8:fd:08:83:72:b4:88:07:f8:03:e1:25:9e:2e:
91:71:a9:e2:16:70:78:24:bc:07:13:c7:43:16:c5:
a3:7f:ba:cb:55:0f:e2:ab:30:2a:3f:a4:76:a4:54:
30:c0:d2:6c:b7:56:4e:99:d7:e2:92:f0:f4:ea:3e:
e0:c5:b2:0b:21:e8:9c:ae:2e:5f:00:37:7c:5e:b0:
32:49:65:d4:ff:cf:76:b0:c4:5e:57:71:5b:22:72:
68:00:9d:e5:56:6a:fa:ff:5d:57:59:03:e5:13:56:
3e:6d:43:91:7e:be:2b:3c:0e:ae:7a:23:a5:a2:77:
c5:a5:14:0b:8c:1d:d4:f9:dd:f5:e4:e6:f3:4c:78:
da:a3:d3:4e:7c:2c:b9:20:a8:57:f9:0b:d0:d3:74:
59:96:be:7b:f8:8d:af:92:d6:29:83:40:6b:18:e3:
97:0d:29:a3:d8:67:3d:16:29:7b:41:03:cd:f5:cc:
a1:e3:76:18:8f:0e:4c:f5:0b:e7:e5:47:59:6e:1d:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:33:66:EA:F3:BF:14:CB:9B:3A:A4:3D:79:18:0A:2F:DE:25:70:DB
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a5:a9:25:e2:a7:c1:e1:f5:cf:ee:73:b1:9c:14:4f:ab:63:
a7:4a:64:a8:83:ec:de:43:b4:1c:5d:47:8d:73:53:89:9d:74:
f9:cc:ef:66:23:e0:48:17:5b:b6:82:c9:2e:bf:a7:8b:98:90:
8e:82:e2:a1:ea:8b:b9:71:de:ae:01:a9:66:8f:f2:aa:f4:fc:
65:08:82:e1:9b:54:d4:4a:ac:bd:00:66:80:77:9a:f2:71:0c:
71:07:8e:2f:da:03:ad:4e:d5:92:8f:12:27:96:b2:00:0f:97:
c0:4e:1c:52:57:5f:26:0c:9b:d8:62:61:55:19:47:ab:30:08:
1d:2e:df:67:59:62:b2:aa:5d:f8:d8:dc:59:84:c8:2c:8e:eb:
cb:93:82:ff:14:9c:7d:bf:88:43:80:90:e7:28:88:cc:c5:42:
bc:cd:c9:ea:f3:24:95:3d:5c:53:4a:ee:0e:5a:44:5f:c3:44:
4a:2f:7d:70:90:b2:f4:2b:0b:c9:51:79:11:bf:03:ae:b5:f0:
64:8f:81:24:35:63:c9:15:6d:53:8d:dc:fb:e4:0d:39:f3:cc:
86:2f:fe:dc:be:90:3c:fe:88:e7:59:05:2a:d2:4d:ed:4f:ab:
89:cd:3e:33:51:7d:3f:70:4b:07:fe:63:38:44:24:f3:2b:01:
e5:a3:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:49 2026 by rpki-client