Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: d7k/XqyLScsx+Gfxe7SerA8romjFf+6Sy7/ZpIloXaU=
Subject key identifier: 46:1A:1A:AB:C7:38:C9:99:63:59:50:5E:E4:2E:E3:98:99:A6:8B:64
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019D977443A6A82ED5B19FC15F65C5D26A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0D18
Signing time: Thu 16 Apr 2026 18:01:12 +0000
Manifest this update: Thu 16 Apr 2026 18:01:12 +0000
Manifest next update: Fri 17 Apr 2026 18:01:12 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: KyyfdPWAEbvaqd3uxMUOt56qVrYNYY35gtP7oskIZDc=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:43:a6:a8:2e:d5:b1:9f:c1:5f:65:c5:d2:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Apr 16 18:01:12 2026 GMT
Not After : Apr 17 18:01:12 2026 GMT
Subject: CN=461a1aabc738c9996359505ee42ee39899a68b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:2f:9a:42:99:e4:86:39:2b:56:d2:8f:39:
70:12:24:19:fd:9d:ff:79:95:12:1d:17:9c:d9:02:
20:d0:82:95:80:4f:c2:b1:74:54:bc:0b:50:dc:10:
55:5f:72:7d:df:80:73:c7:9d:05:6a:04:7d:65:41:
00:29:a2:6d:22:b0:4f:41:02:8c:21:0a:a8:1a:0d:
3d:f3:ad:62:ca:84:af:a9:96:a1:37:bd:55:38:db:
e3:b8:a7:a1:58:21:00:c0:87:f2:b3:78:0f:c6:64:
4b:42:ae:3b:34:98:91:23:57:e8:c7:77:ee:c4:f0:
d3:80:07:bb:12:77:f1:1f:b4:f8:b8:31:15:cc:09:
40:8a:0c:64:81:85:91:cd:13:7a:7e:71:69:a4:50:
2f:9f:2b:51:e9:2f:31:6b:6d:f1:a5:d9:5d:4c:31:
1e:8e:3d:af:68:37:2e:d7:8a:d4:ae:17:9b:50:d0:
d4:83:04:e0:1a:e5:70:ae:3c:5e:ea:a3:c3:92:59:
90:13:f3:85:c3:01:be:7d:79:f8:11:06:f5:91:2f:
15:59:1a:2d:45:72:99:6b:4e:c9:b7:6c:c4:be:c4:
d3:96:31:59:bb:c3:87:92:75:be:49:28:d3:12:c7:
dc:52:89:4f:aa:73:50:12:06:07:44:90:83:dc:22:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:1A:AB:C7:38:C9:99:63:59:50:5E:E4:2E:E3:98:99:A6:8B:64
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:69:73:6b:1d:42:61:22:94:2e:7e:99:65:5e:d4:2c:9c:
ab:46:c6:dd:c7:3d:71:f5:b0:8d:46:d6:35:c4:d2:45:f2:64:
0f:99:19:bb:b9:b4:7c:43:13:2d:5c:f8:68:74:5f:41:ad:21:
fc:cf:5f:81:8d:2f:c8:49:da:b9:db:78:1c:9f:b6:b4:cd:1e:
ea:a3:81:7f:9a:1e:08:6e:89:81:48:0a:57:97:7b:dc:51:6c:
b6:48:ce:8d:83:7c:ac:96:01:36:d9:f1:81:4c:cd:66:dd:6c:
12:a8:6e:98:be:3f:ad:8e:c9:66:2e:cf:da:b0:25:0b:dc:17:
23:a2:97:13:e1:42:76:5f:da:d7:95:fd:fb:30:b5:c6:5a:dd:
94:62:4d:4e:06:c0:c7:28:8e:30:2e:cf:5b:ce:c4:db:9b:b1:
c7:30:de:48:67:b8:74:7d:7d:5d:bb:5b:af:65:b3:8c:7b:f5:
5b:9a:4f:38:c3:fe:70:a4:14:96:7e:8b:5d:d7:7d:ee:f1:16:
b2:42:5a:c6:3b:9f:09:75:20:cc:1a:ec:71:cd:8e:53:a7:0d:
8a:75:29:f3:71:3d:37:82:2c:13:a7:fe:4d:ed:d4:2a:98:8e:
41:52:e0:45:17:c0:e6:d4:80:1f:db:b3:db:30:10:d1:64:ff:
53:c8:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:23 2026 by rpki-client