Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: JqTDT75YTh25aPVpLRNZlxXUAQpALgXDH1TvmR+tA18=
Subject key identifier: 48:92:55:C2:E3:4E:74:6B:0E:7F:F8:A5:7C:12:7C:2D:D1:06:92:FD
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019D26CCEC1F67A7015DA5493F0FE49A0E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: MaPTzhpML6Y1Er/XOhGxaBns30bjpXEXBbALr+X8Wlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ec:1f:67:a7:01:5d:a5:49:3f:0f:e4:9a:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=489255c2e34e746b0e7ff8a57c127c2dd10692fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:c8:c0:05:5c:36:70:02:1e:f2:a2:bc:b8:
b8:72:6c:8b:80:94:35:1e:3e:dc:39:99:89:b9:0d:
e5:68:63:f5:f5:21:b6:a4:5f:34:11:34:11:d2:ee:
df:39:3d:48:7f:c5:12:3c:f9:42:82:59:62:ba:5c:
1b:e2:cf:98:55:78:ec:4d:ef:bc:c8:68:0e:52:06:
56:b7:f0:c6:ca:2d:36:b2:e5:7a:92:fe:cf:3f:7a:
e0:67:d1:f6:ef:d8:0c:67:e0:a0:00:ba:a6:e3:29:
3b:53:0e:af:5b:25:25:c8:35:48:f7:17:dc:f0:28:
05:2f:f4:50:89:1b:5b:20:51:dc:6a:07:11:f0:a6:
c8:df:35:af:e5:42:e5:08:26:90:45:4e:9b:3a:c2:
06:6c:a5:e3:da:ab:47:bd:e0:d1:53:ec:53:fe:c5:
da:f8:96:c3:e0:7b:63:97:d8:e0:83:f1:a8:a9:87:
7f:b6:05:f5:27:81:4e:84:b2:50:4e:7f:ac:c8:f5:
73:26:5f:b2:2a:c5:5e:1c:9d:38:d9:a6:7f:be:2c:
9e:d5:3c:93:d2:d1:c1:97:ca:45:4b:59:a5:02:cc:
5d:93:01:cc:58:99:e4:26:cf:08:24:6c:21:4e:b6:
87:5f:6f:a2:9f:cc:d9:29:dc:45:ea:3e:d3:6b:e2:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:55:C2:E3:4E:74:6B:0E:7F:F8:A5:7C:12:7C:2D:D1:06:92:FD
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:f0:a0:a6:e5:56:5b:99:db:7f:58:a7:64:2d:f5:9f:af:
f0:c7:40:c9:4c:c4:83:93:a6:9a:6f:73:32:92:f2:72:13:8c:
1b:cc:53:2b:05:69:67:19:12:62:1a:9d:bc:a4:05:ee:75:3d:
48:6f:60:ee:7a:0a:5f:43:20:2b:f5:7f:80:12:16:79:cb:1b:
af:3a:b2:37:fc:f1:e2:3e:0c:50:8a:37:b2:87:99:db:0d:1f:
80:bb:7f:2b:f3:b1:37:03:47:0b:94:73:c6:00:a7:a9:ff:7a:
24:01:55:bb:81:fc:f6:76:3e:da:ad:69:f1:20:f0:4f:3c:30:
0c:26:6c:99:d5:b8:ba:71:13:0b:55:a8:56:6a:b4:82:dc:22:
9b:e1:fc:9c:00:57:3f:74:32:c9:d5:bd:c1:ef:b2:ac:37:93:
84:59:72:8a:30:f7:97:fb:0d:91:fa:5c:97:32:24:d0:c6:ed:
b6:06:97:c2:14:74:de:be:a2:84:3c:4d:c4:fb:8f:ff:6a:13:
e7:5c:05:3a:f2:02:14:70:16:e6:da:e5:3e:2a:fd:3c:30:67:
5d:dd:45:33:9d:93:67:c9:08:ef:87:fa:a7:cd:85:c8:3c:ef:
fb:1d:b2:e2:24:ee:b6:0e:07:3d:7f:52:b8:9e:1b:c9:93:52:
6b:3f:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:59 2026 by rpki-client