Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: XAUswGK7AzBqxx86Z5K97L/+k5OUZzWH9Fz9v3Ii/Zk=
Subject key identifier: C1:58:EF:E2:DA:09:D2:26:DF:78:63:B5:EC:54:86:33:25:20:AC:19
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A0CDB66AA7CD29CF8EA07311AEA762BEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 10:01:19 +0000
Manifest this update: Wed 23 Sep 2026 10:01:19 +0000
Manifest next update: Thu 24 Sep 2026 10:01:19 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: z7nO4NrJ7FrgfpzQz1HK4BM7hu5NS6sxVk/gsCsTDDE=)
2: WeJgs7A95jwqtwLgB758IcXv4EU.roa (hash: 84hLdtwmT7VOnkUt9Z3ak3sP5MNYReF+bmVuaSuUp4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:6a:a7:cd:29:cf:8e:a0:73:11:ae:a7:62:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Sep 23 10:01:19 2026 GMT
Not After : Sep 24 10:01:19 2026 GMT
Subject: CN=c158efe2da09d226df7863b5ec5486332520ac19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:6d:16:0f:d1:56:da:0e:f1:e0:58:5c:13:
b8:c7:dc:87:84:a2:83:b1:09:0e:7d:5e:16:9d:c2:
73:81:65:dc:07:c7:5e:14:96:1a:f8:e4:ca:be:82:
29:5b:d6:fa:7e:af:30:49:c1:77:d4:36:62:05:d1:
cf:c8:7a:c8:ed:01:51:be:8f:2f:db:9b:a0:4b:ce:
12:bb:91:8d:2c:1d:8a:9d:33:1d:92:56:9b:ba:ee:
77:fb:86:1b:c1:12:2a:2a:fc:9a:ad:b2:5b:fa:db:
53:13:14:dc:69:13:6f:1b:70:7a:99:ad:61:48:52:
9d:72:da:cf:9b:f6:eb:51:b8:c0:9c:e9:e7:66:66:
62:95:79:ba:c4:0f:2f:fd:c9:6a:66:56:18:47:74:
6b:b1:bd:5d:40:fe:75:ea:3b:b3:35:c5:06:01:f9:
11:28:1f:07:af:48:c2:b9:c7:2b:ec:82:0e:68:b6:
bc:02:f8:92:01:fc:30:60:4c:54:02:9a:f3:ad:b2:
33:d3:9b:c7:6a:ea:56:c1:a2:5a:82:6c:a1:15:05:
ab:1e:15:8c:8b:3d:c0:a9:16:af:be:c6:7d:3f:3c:
53:54:6a:9b:e8:dd:7b:06:b9:17:19:7f:73:85:19:
68:27:db:94:40:e8:b4:23:2f:0f:4e:53:49:89:04:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:EF:E2:DA:09:D2:26:DF:78:63:B5:EC:54:86:33:25:20:AC:19
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:78:c2:c8:1e:df:7a:52:01:19:82:8e:ea:99:b0:88:ef:
eb:a7:35:4f:73:00:1f:f7:69:18:f1:41:ef:d2:f7:93:99:d7:
4e:f8:33:2e:3c:3b:2b:d9:c8:dd:86:c2:83:3f:29:46:6a:6c:
74:46:bd:67:06:dd:b4:cb:1e:89:9e:ef:fc:a2:88:fe:64:89:
3a:cd:28:34:0a:ef:ef:78:08:b7:1f:c4:34:3f:fe:e6:c8:8e:
74:85:3c:80:55:cc:3c:8d:d4:a9:0a:73:f8:b3:4d:b7:ee:d0:
1b:0a:b3:bc:7c:97:6c:fe:9c:40:e8:ab:d1:66:d8:0b:e2:dd:
99:a9:81:62:90:cc:db:0f:e5:a2:73:50:3b:75:f0:fe:09:2b:
b9:05:18:e0:71:3d:4e:1f:19:cb:3d:59:21:5d:7f:0e:5d:f5:
fe:60:1a:b0:b3:9a:25:63:ab:b5:73:6b:67:91:69:e5:75:74:
c5:cb:93:79:af:66:7f:2d:bb:51:e5:29:b7:f6:9a:29:fd:73:
d4:bf:e6:d4:c5:84:cb:ef:95:31:a2:69:fa:92:94:b9:dd:f7:
6e:45:a9:06:3f:e0:7b:67:dc:03:a4:68:51:d3:5a:88:bf:9f:
77:d9:32:7c:56:a1:0e:19:73:c3:ba:90:14:38:32:ce:63:aa:
55:f6:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:23:13 2026 by rpki-client