Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: 7T4GXaPDBXjQzruynZOJ83Vppff8jN6Eb2v43MoZnyg=
Subject key identifier: A5:37:51:E6:29:2C:88:30:1B:C5:55:2D:6D:49:95:B1:45:A9:4C:AA
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019CAB348261979B2C5E0E049B0AD2EE63B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: zpa71+Ka8D5lJlis1uqFJamk+b+V8IqWROVhedPj6MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:82:61:97:9b:2c:5e:0e:04:9b:0a:d2:ee:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=a53751e6292c88301bc5552d6d4995b145a94caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:bb:46:e2:4f:42:5b:01:65:f6:7c:19:11:
e4:59:7a:45:5b:f6:7b:49:d2:34:75:51:75:14:2e:
25:7a:02:aa:b7:f4:75:dd:4d:d3:99:d8:95:8a:4f:
d7:ae:cf:33:2c:85:26:fe:aa:9f:20:f9:6b:2b:da:
0e:27:cc:7e:ee:38:32:10:a6:e2:e0:20:01:b3:f4:
c9:5f:a9:b3:e8:b4:3b:db:66:b7:df:16:27:71:90:
a5:9e:28:36:1e:fc:c7:3d:95:38:18:d0:3a:78:99:
13:87:6f:fb:d9:1e:a6:15:c1:bb:f2:14:0b:2d:2e:
6b:8c:0e:be:3a:45:7d:50:a8:0a:08:ae:49:88:9a:
de:50:4d:98:4d:b1:8e:6a:67:0c:ac:1c:8e:fc:52:
c9:dd:88:9b:06:0a:2d:97:61:3f:7a:04:aa:82:c1:
fb:71:3f:ed:89:77:78:70:25:e0:9c:40:2b:c5:bb:
a2:51:2f:0b:8c:cc:e2:69:17:8b:14:62:b3:dd:79:
ec:f0:cc:b1:d6:4f:93:56:83:0c:ae:3f:c8:13:5d:
78:aa:4b:12:c3:ec:ab:4c:1d:16:c5:bf:3e:0a:da:
e9:8d:c3:86:be:d6:94:47:1c:e9:be:e0:0c:84:89:
2b:6f:44:5e:2f:19:80:ac:00:fe:a1:74:c0:c7:d4:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:51:E6:29:2C:88:30:1B:C5:55:2D:6D:49:95:B1:45:A9:4C:AA
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:03:b2:bf:a9:4e:76:b6:27:6c:ab:1f:34:ba:e5:97:f8:
83:6a:9d:8e:0e:ee:e0:ec:e4:5d:6c:0d:46:e6:e8:b8:ca:5e:
16:34:08:d6:27:cb:a3:6c:2f:f8:ce:a6:9d:cf:4e:0d:83:7a:
bf:ac:e7:6b:a0:47:e5:b8:ee:9f:0c:a3:c2:27:f7:8f:3f:a7:
64:f0:5a:16:38:58:60:f4:9d:68:e3:11:ac:85:8d:fb:c9:d6:
8f:2d:10:bb:ea:1e:d2:e6:e8:35:5b:5c:72:d8:00:d1:81:59:
be:72:a2:25:c9:b6:00:3d:91:86:ec:34:70:e6:21:e5:49:a2:
f5:42:a8:a1:2d:a7:3a:70:99:4a:ce:53:9f:d2:da:a3:81:a9:
9a:68:64:0f:17:a5:f1:f7:08:42:ef:2d:74:7d:66:e8:33:91:
a8:62:9c:2c:f0:af:2b:10:8a:f8:29:eb:11:18:d7:4e:ec:cf:
17:de:62:34:a8:51:7c:66:0c:61:79:23:13:ab:5a:93:d9:bd:
04:dd:20:6b:c2:8d:8d:42:05:a3:06:96:fd:d8:45:71:e1:21:
a6:9d:26:ea:7b:f4:4f:82:f2:01:70:d7:ae:06:40:2f:d7:6d:
8d:a8:ca:3d:50:50:31:6e:75:5e:fc:93:60:2c:7b:76:58:84:
bd:5d:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:12 2026 by rpki-client