Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: 8m6LsdVU8h6obDdiGPnGHx7szcAS2eO/w4QvVfuwOEw=
Subject key identifier: F3:A0:44:7A:5E:1B:A8:72:02:56:7B:DD:9F:35:E9:DA:A0:69:85:05
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019FA9E2A24B046537B8E30CAE69EBE81D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: QctEQ/ZrO7hvZz4FgNftukjuoEFEyguSQh7fMgScDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a2:4b:04:65:37:b8:e3:0c:ae:69:eb:e8:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=f3a0447a5e1ba87202567bdd9f35e9daa0698505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:53:3b:19:66:cb:25:23:ac:cf:1d:e5:f5:
75:92:8d:7f:72:30:8f:d7:e3:fc:77:00:35:64:cc:
30:cf:c4:0c:f3:9d:30:88:ea:f1:04:0f:89:f0:f2:
ba:dd:1e:5e:a0:c1:57:9e:57:88:ee:6e:e1:18:e0:
27:c4:7e:7c:ee:0e:79:a5:cc:a3:45:83:d8:ba:ca:
dc:33:54:a9:6f:25:82:3a:39:0c:f0:e1:44:4c:c3:
8f:c4:56:e6:3b:a1:42:9e:d1:8a:63:8d:f0:e3:31:
a9:9c:5b:78:78:5f:6a:47:13:77:a5:1c:6a:7f:18:
28:cd:4c:ec:a7:08:8b:49:e1:35:d5:5e:b4:5c:a7:
96:0b:af:1d:b8:e3:b8:ea:e9:f6:b1:3d:1b:fe:5b:
e0:81:b5:77:72:d8:90:c1:34:e8:c7:9e:cf:fe:10:
d0:29:08:6e:74:b9:3b:c8:ac:2e:a0:8f:2e:bb:c6:
2a:4d:13:40:6e:d0:87:df:0e:ca:0e:fa:a1:36:8b:
ac:04:4b:b3:0c:91:38:ed:d5:43:99:a0:53:f9:0f:
7d:26:71:6a:6a:53:84:94:ef:ff:eb:f6:e3:32:39:
be:eb:21:17:11:f9:83:b9:22:8a:1f:f5:6f:a4:39:
34:6f:de:54:6c:24:21:7f:87:db:a3:d8:70:58:c8:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:44:7A:5E:1B:A8:72:02:56:7B:DD:9F:35:E9:DA:A0:69:85:05
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1d:10:80:3c:74:0d:9c:c0:36:07:86:fe:4c:6a:36:38:5b:
6a:37:36:89:0b:43:75:70:a2:0b:aa:72:54:75:8d:40:83:53:
38:e5:16:61:ba:6f:b2:f3:a3:6d:16:64:2b:0b:3e:9d:4e:bc:
66:59:47:84:a9:f2:31:43:df:a9:f6:45:a6:7b:7e:e0:65:ae:
7b:43:45:6c:dc:64:32:59:86:75:d5:32:54:ce:fe:c7:eb:e1:
80:b3:95:23:03:41:ea:c5:01:eb:42:51:de:08:11:9e:77:13:
4e:c8:af:5c:9c:b6:77:7e:4d:f8:83:d7:d2:ed:a3:c8:15:01:
9f:7c:cf:34:4d:38:76:ab:f5:63:4e:fc:50:df:ef:a3:fa:97:
90:48:b8:c3:e5:25:11:8c:5e:69:4a:0a:94:a3:01:4b:21:89:
01:ad:93:56:9a:57:aa:b9:c1:c0:17:d3:f0:f6:d5:b6:52:a4:
fd:67:78:8f:37:a9:a8:41:7a:56:74:10:71:0c:6e:9e:4b:24:
2e:56:b5:27:b3:3a:d9:fa:8b:72:53:7b:6b:29:65:4c:59:87:
2d:16:27:6f:92:49:b3:c0:d8:2e:67:77:40:06:c8:ff:cf:36:
8e:0b:63:75:e2:3b:c8:c2:33:b6:b9:e5:cb:36:21:3f:52:02:
64:fc:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:17 2026 by rpki-client