Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: w/OBg7aKC7Yz7wPpjyLu9xJGEV14TmS/vdYd4s1hK3g=
Subject key identifier: 89:7B:3A:F9:4C:03:5A:A0:F8:DA:02:61:45:17:90:B6:8F:AE:FD:87
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 01A1C10ACEDABDC902DC328E9152716BE463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1AE9
Signing time: Mon 09 Nov 2026 16:01:13 +0000
Manifest this update: Mon 09 Nov 2026 16:01:13 +0000
Manifest next update: Tue 10 Nov 2026 16:01:13 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: Tblk9EaMV/apESHolFd2aXfvwJBQjQK1JYSP+zDrEgE=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:ce:da:bd:c9:02:dc:32:8e:91:52:71:6b:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Nov 9 16:01:13 2026 GMT
Not After : Nov 10 16:01:13 2026 GMT
Subject: CN=897b3af94c035aa0f8da0261451790b68faefd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:04:92:01:6a:c3:57:92:90:c9:50:6e:aa:
88:97:fb:f0:12:c9:ec:21:ff:1f:59:b0:8f:c0:5d:
e6:b2:84:db:5d:02:b4:16:62:84:ac:08:41:ff:bd:
ff:85:29:a1:d7:38:cb:6b:61:92:1b:88:a8:1e:0c:
17:c2:66:18:f8:9e:fe:e3:67:e4:be:10:23:f2:3d:
02:fa:6e:4c:b5:d7:eb:2f:a3:00:e3:0e:91:de:67:
e2:b6:a9:03:88:70:f7:8a:69:b2:c4:92:54:42:5e:
16:e5:9e:13:0d:ab:c5:c7:fc:6c:69:d7:63:c8:ef:
ba:b8:04:86:7d:3f:3c:13:cd:ea:ee:17:e2:ab:74:
ea:4e:53:a1:54:26:eb:f3:23:3e:4a:f6:22:3a:92:
2c:06:11:7f:44:a1:eb:7b:d5:eb:e2:08:39:c1:b6:
49:10:b4:8d:60:1f:d6:7b:cf:30:49:d3:40:76:4e:
40:a7:d9:ba:7d:ec:db:20:ff:32:ce:f4:4f:32:49:
04:cf:5f:d1:31:e4:82:3d:56:9a:62:0d:95:25:c1:
88:25:d1:4a:99:a6:c4:87:89:39:cb:c3:b5:21:79:
28:03:00:99:49:22:ae:e6:2c:ae:db:34:d8:a3:bc:
3a:a4:f4:c4:05:5f:a9:6f:7f:43:ca:40:b2:7a:fc:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:3A:F9:4C:03:5A:A0:F8:DA:02:61:45:17:90:B6:8F:AE:FD:87
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:40:ec:e4:73:8a:cc:48:cd:24:75:db:e6:1a:5e:0e:2c:
5b:01:32:2f:c4:4f:ec:be:ed:ce:cb:ca:12:89:84:64:4a:86:
30:77:bc:f8:59:0f:31:3a:d4:72:dc:2b:ed:e1:d7:90:d5:03:
dc:8d:e0:cc:ae:0e:bd:9f:5a:59:96:fc:ac:7d:50:75:54:03:
64:a8:ad:0b:46:5e:6b:be:38:dc:24:e2:d1:e1:84:e1:69:ee:
10:bb:40:2a:ad:4d:9e:07:5f:a3:64:66:58:db:41:17:eb:8d:
1d:2e:64:4b:b2:14:8b:9c:71:19:75:cb:0d:34:13:86:fa:a3:
c6:86:2d:3c:52:58:c6:b1:3b:c7:95:26:8f:02:58:ce:0c:f6:
7c:5e:e7:bf:9a:a8:c0:ca:63:f5:96:11:32:8d:49:2a:a4:91:
f2:8a:0f:62:a9:20:1b:24:1a:1c:ff:11:74:82:80:86:36:02:
65:92:cb:6f:19:47:65:df:a4:28:b7:c2:c0:34:62:f4:44:e8:
32:6a:83:e5:69:97:9b:2e:5f:ee:38:73:ae:30:f5:e8:8c:8b:
82:31:bf:bc:9a:ca:db:be:f1:56:d0:9d:65:0c:26:22:1a:9d:
08:b5:2a:25:23:0b:f8:3c:cc:bc:45:f5:96:4f:b6:7b:c5:ce:
38:e3:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:48:12 2026 by rpki-client