Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: nswdY1BlaHRV9sM+sIM2vIa9OLzTZLrj9lT3pqK4a+k=
Subject key identifier: F4:78:68:AB:23:8A:07:A7:D1:B1:11:49:AF:5E:A5:38:48:08:91:12
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01A0CB22BE0A057903A56846F5C67C528473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 22:00:46 +0000
Manifest this update: Tue 22 Sep 2026 22:00:46 +0000
Manifest next update: Wed 23 Sep 2026 22:00:46 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: BMZ2_I7t3Uk18P2C5vRCypypRj0.roa (hash: d5qYA/OjZSPe9yt6LzCnOFrzvvZD/VDmlduoTvQkrdY=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: k7eInu05gh2a61hBFSt5NFJsuEq5F0SnMAfvQi3+60Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:be:0a:05:79:03:a5:68:46:f5:c6:7c:52:84:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Sep 22 22:00:46 2026 GMT
Not After : Sep 23 22:00:46 2026 GMT
Subject: CN=f47868ab238a07a7d1b11149af5ea53848089112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:19:95:a3:50:40:d5:b1:85:7e:9a:02:6e:
22:e6:3b:83:a2:cc:50:08:eb:64:90:fb:51:5a:3c:
00:59:52:82:dd:88:c2:45:e0:6a:95:e1:62:e1:b3:
bc:f5:1e:56:a6:ce:59:e3:bc:46:69:c7:e0:b9:30:
26:bd:5a:5f:bf:be:c3:7a:69:7f:23:3e:78:19:7d:
b1:31:f2:6a:0b:f2:6c:06:0b:f6:90:58:df:19:c0:
38:b1:58:0e:d2:4b:69:a8:48:9e:1b:7d:0c:0d:b0:
26:24:74:e7:59:c0:4a:8b:ea:0a:e4:3a:37:3b:91:
5c:6d:f4:62:da:99:cf:00:ce:24:76:d8:b1:43:2a:
db:e4:c5:a8:a2:39:9d:61:96:ba:77:17:8e:a2:b4:
d5:10:cb:a9:02:a6:6b:bb:14:3b:5f:06:8a:81:d1:
c8:2c:1f:3c:c0:e7:23:ce:43:b1:e8:01:ce:aa:5a:
53:62:f8:18:82:32:59:b7:8e:73:83:31:7d:b0:dc:
9c:24:17:cc:ba:f2:62:f6:62:e6:e3:08:dd:fb:d1:
11:5a:0b:77:ae:a3:ad:8f:95:ed:aa:83:ab:3d:97:
90:00:02:46:f4:d5:55:2d:fc:11:06:b3:d1:bf:c9:
6a:be:68:df:fc:f0:1a:cc:4a:3c:5d:ba:c6:95:fa:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:68:AB:23:8A:07:A7:D1:B1:11:49:AF:5E:A5:38:48:08:91:12
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4f:3d:3b:49:94:a0:e6:78:e2:65:64:2c:8d:86:60:9e:de:
0d:49:b8:07:b6:92:21:05:67:9e:db:3c:5c:a8:48:82:22:31:
7c:c6:4c:9b:86:2b:75:f2:12:f1:32:42:25:86:2b:dc:fa:8d:
f7:e8:67:9f:9d:85:75:2b:f6:1a:54:70:ef:99:d5:45:d5:9b:
e9:d2:1e:9e:01:21:8b:36:63:94:2c:2a:cc:fb:a3:75:b1:51:
19:33:c7:cc:6e:0f:c3:bb:20:61:0c:ee:90:e7:a2:02:38:4e:
ba:df:63:35:74:9c:18:0b:65:96:d1:39:c4:93:7f:5a:57:54:
9d:bf:49:9c:b2:6e:b6:8b:c8:3c:f1:87:68:58:65:c4:db:e5:
ca:a5:6a:1c:d1:8d:ba:06:1a:d9:af:51:c6:78:3b:f0:e2:9b:
d9:69:2a:93:0f:60:ac:b4:da:7c:c5:cc:47:21:da:b3:3c:9b:
eb:01:3a:d4:0f:63:8c:c9:7e:76:85:a1:8a:6d:54:30:c9:9a:
1e:d5:49:85:0b:92:90:19:e3:fa:df:23:bf:99:7f:db:6a:1c:
fb:91:35:84:fd:37:1b:0b:32:5c:14:bc:0f:70:71:30:79:95:
26:8f:6e:6a:43:09:b8:1d:ff:1b:7b:53:c2:a9:7c:1b:20:58:
f4:28:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:58:13 2026 by rpki-client