Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: AAAVe1hAaSp8H7SEbp61Snr8AQm6F1J6sfbgOyXj4BE=
Subject key identifier: CE:BA:75:21:6C:66:24:98:8A:43:AE:1D:19:DF:E8:95:49:E3:93:AD
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 01A0C21F2CBC7BF33279486BDF76489866FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 04:00:17 +0000
Manifest this update: Mon 21 Sep 2026 04:00:17 +0000
Manifest next update: Tue 22 Sep 2026 04:00:17 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: vqn77doMy7KU0zqJps6khmPPAEWQQzHaUQ1lrBS02nQ=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:2c:bc:7b:f3:32:79:48:6b:df:76:48:98:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Sep 21 04:00:17 2026 GMT
Not After : Sep 22 04:00:17 2026 GMT
Subject: CN=ceba75216c6624988a43ae1d19dfe89549e393ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:22:0e:87:06:29:05:0b:e3:d6:05:c5:30:
ce:ae:57:d7:55:4b:1b:6f:e0:c9:a6:4e:1e:8e:cb:
c4:36:75:fa:db:53:e4:0f:f7:58:12:8e:0a:a5:a2:
d8:ee:eb:d5:25:41:36:7c:f2:32:8f:e7:aa:c9:59:
1a:3a:fe:95:f9:45:8d:80:5a:17:02:83:64:b1:a9:
68:3c:f1:c4:d6:fb:77:62:59:35:52:5a:35:24:2e:
2c:b3:b0:97:35:16:db:91:d9:43:15:de:7d:8c:04:
09:83:27:32:41:ae:44:4f:7b:ff:5a:59:70:88:1c:
25:c9:b4:86:2f:23:01:8a:49:b4:9f:32:19:aa:8c:
6a:8e:84:a8:de:ab:22:b0:46:c7:2a:4b:82:63:e9:
e4:78:d0:46:9f:91:ca:1f:a4:b1:63:29:d1:ca:b8:
34:28:af:d7:11:ac:d8:35:83:40:80:d4:6a:8c:e6:
f4:47:82:96:ab:b7:81:31:a0:71:34:2b:8c:65:41:
f2:7f:26:a5:84:0c:96:c3:6b:b4:d3:6c:ef:bf:ee:
6d:4d:30:64:87:8c:05:f8:4f:62:3a:55:a6:d4:50:
2f:80:57:2a:eb:07:ae:18:7a:c1:4f:2b:8c:2e:00:
2b:30:71:51:61:e8:c5:fc:de:8b:57:9e:ae:e2:a8:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BA:75:21:6C:66:24:98:8A:43:AE:1D:19:DF:E8:95:49:E3:93:AD
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:38:c9:84:99:e0:c9:9e:f9:20:0e:a6:63:d2:f7:cf:86:46:
5a:dd:78:7a:f5:aa:9b:39:28:f4:a1:c4:8c:61:ad:56:92:3e:
64:ba:d8:ca:de:77:10:e5:8f:bf:f2:ce:66:56:31:01:23:8c:
c5:a2:79:f3:9b:b9:7a:80:12:33:19:6a:86:ac:39:33:67:7d:
ea:e2:22:12:aa:ce:b0:fc:d4:ab:45:09:96:98:18:77:ab:c0:
98:37:94:47:03:a1:ca:fc:9d:bc:d5:b2:11:cb:1b:17:6b:17:
50:6d:b2:5a:59:96:ad:57:c4:2c:08:c5:16:d9:92:1e:72:56:
b8:a8:c6:8e:6a:f0:80:0f:f4:94:60:24:8a:b9:b9:fc:7a:6e:
b5:a7:91:90:f9:a1:75:30:21:bd:0d:ae:56:d0:14:f3:69:17:
9d:f4:c1:c7:dd:7a:bc:68:48:a5:cc:b4:78:b6:65:04:89:db:
f5:d7:22:87:0a:f6:9c:79:9f:12:80:1d:f6:63:57:e2:56:31:
dd:c0:53:75:03:7e:76:5d:fe:22:4b:5d:3e:de:f3:f7:9b:69:
28:20:c1:85:51:83:20:c7:30:61:c6:74:ee:b5:ca:f1:2f:51:
58:28:cc:f8:08:46:f0:fe:0b:d4:12:7c:8e:6d:fa:d9:f3:d5:
49:8a:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:22:53 2026 by rpki-client