Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: 75j1Lb/U5U95S08zA46HuN6lWM2y/Udkdd1rd2EMZE0=
Subject key identifier: 8C:AF:0C:7F:5E:41:52:95:51:87:5B:A3:0C:6D:9B:07:2F:82:96:8D
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01A0E2507524834C5D42753EFBBEABDACD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 10:01:58 +0000
Manifest this update: Sun 27 Sep 2026 10:01:58 +0000
Manifest next update: Mon 28 Sep 2026 10:01:58 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: BMZ2_I7t3Uk18P2C5vRCypypRj0.roa (hash: d5qYA/OjZSPe9yt6LzCnOFrzvvZD/VDmlduoTvQkrdY=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: 9xaOTY+uUD5gmMy2fPWXNQRkx0iVt0OEULnjYX+LBgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:75:24:83:4c:5d:42:75:3e:fb:be:ab:da:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Sep 27 10:01:58 2026 GMT
Not After : Sep 28 10:01:58 2026 GMT
Subject: CN=8caf0c7f5e41529551875ba30c6d9b072f82968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:75:75:44:3e:0e:13:03:7e:0d:28:f4:10:
a0:9b:2d:0e:32:18:67:da:fd:2b:f7:18:5e:8b:be:
29:54:53:bc:a9:b7:d2:53:b4:7d:6c:30:4e:a8:22:
91:17:ce:c1:5e:d7:8e:b8:9b:40:74:31:ad:45:8d:
c3:75:43:e0:21:2a:8d:26:be:ba:1f:de:d4:f0:0e:
c1:c3:1a:20:24:14:0a:9d:b5:d8:62:2b:b7:90:e6:
fb:d4:3f:7d:5e:42:b3:59:f0:01:44:93:10:8c:76:
f5:2d:ee:b6:18:60:cc:cb:69:ec:98:3c:a2:8a:17:
4d:41:bd:8a:a5:3f:3f:3e:5c:58:60:58:dc:99:42:
e5:9d:cc:37:a7:8b:2d:92:60:b2:0a:23:c3:a8:24:
dc:35:45:ef:c6:92:23:5e:2c:05:ee:98:74:57:49:
31:c1:61:c1:dd:7c:43:c4:a3:b1:ad:14:fe:86:02:
69:2b:7f:30:2c:4c:31:b4:56:09:c5:d3:d9:42:19:
0c:9e:ed:11:a8:26:e7:f9:d1:69:ab:d7:b4:d7:91:
0c:4f:e5:b0:fa:61:d9:c5:9f:14:18:a4:f3:34:d4:
69:a4:09:a0:19:d9:53:65:79:83:ca:36:7f:aa:97:
e1:c9:74:e4:6e:d4:98:b0:cc:a0:af:76:22:8b:be:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:0C:7F:5E:41:52:95:51:87:5B:A3:0C:6D:9B:07:2F:82:96:8D
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:14:47:36:9c:22:cc:26:78:a6:58:c0:51:24:f2:56:47:f9:
73:5e:be:c2:bc:cc:30:38:70:71:fa:27:7d:4d:8c:92:ef:20:
e1:42:98:fb:8c:d1:c7:05:5e:2e:de:f4:f1:9d:33:39:e1:d1:
a3:fd:ee:a0:80:00:ba:01:d5:3e:c4:2a:e7:9c:08:fc:61:8b:
9d:b9:c7:59:a5:a7:48:fb:bb:91:aa:b3:d1:cc:c7:d8:43:2b:
7c:58:a8:ed:f5:43:54:fc:01:a4:fa:ba:11:2f:c0:5c:47:12:
7b:08:1d:03:51:c9:9c:63:ae:fd:08:3f:51:92:5e:ba:94:43:
9c:a9:22:33:09:57:a4:67:65:94:17:5a:18:8d:67:16:fe:47:
e4:88:88:6a:4f:98:84:cf:b4:7a:06:4d:8b:55:fd:84:d1:88:
54:cd:e6:bc:9d:e0:67:78:92:d1:ee:21:57:6f:bf:59:07:59:
fa:1b:db:e7:5e:bc:1c:0e:d9:ab:6f:97:51:6c:5b:9b:01:c0:
3d:9d:cd:b9:f7:6d:01:6a:d0:ac:d1:10:a3:75:ba:46:ff:d7:
ee:b0:b4:8a:7c:c9:36:f9:86:fe:8a:d6:8e:4d:43:d7:b8:d1:
1b:eb:76:07:b9:6a:3d:41:66:04:e5:15:fc:c8:78:f1:a5:fb:
23:26:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:09:35 2026 by rpki-client