Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: Jce9DiDZuxg/Td9zgIL83ZbaxfRuZkj33qm+/0+3zq0=
Subject key identifier: 28:16:D3:2D:17:15:A6:EE:AC:2F:7E:A7:3F:E7:1B:A7:00:0A:A0:91
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019F90C7745D28C66F746B98B19E98F28CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:18 +0000
Manifest this update: Thu 23 Jul 2026 21:00:18 +0000
Manifest next update: Fri 24 Jul 2026 21:00:18 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: PWYc2nSe+0rWlmbLiSGE8kU75z9YaWLkFEK+8R+tau8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:74:5d:28:c6:6f:74:6b:98:b1:9e:98:f2:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jul 23 21:00:18 2026 GMT
Not After : Jul 24 21:00:18 2026 GMT
Subject: CN=2816d32d1715a6eeac2f7ea73fe71ba7000aa091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:ee:0b:7a:3f:f5:c0:21:55:75:0f:ae:05:
5d:d8:23:36:6b:61:a6:61:e7:60:5b:0b:9c:44:0b:
94:4f:96:56:f7:96:31:bf:f2:87:93:e6:f9:8c:ab:
50:bf:c9:a0:ef:a2:e1:e5:37:f3:88:9f:e2:63:e9:
31:e0:fe:03:74:01:56:af:a6:a4:a2:0a:b1:af:93:
8a:3f:2c:2c:f2:4f:f8:d4:cc:bb:d9:f6:9c:da:b8:
76:1a:a9:11:d9:71:82:68:5b:75:48:49:32:1c:68:
79:be:55:86:a7:43:fa:4b:27:3d:67:3c:b3:51:62:
74:63:f8:36:f2:71:3c:0b:cf:a9:3d:15:e4:6d:93:
74:88:8e:87:62:ec:ec:9f:58:29:02:b8:8a:98:f0:
c4:78:33:c4:f6:25:37:08:e0:bb:98:8a:86:90:b9:
73:cb:3e:c1:a7:a5:e8:29:26:e8:c7:f1:90:2e:bc:
69:37:55:81:af:bb:01:66:51:65:00:e6:ca:d4:6a:
d3:cd:cf:e1:a1:06:46:56:fe:cf:9b:78:be:c8:a4:
be:64:5a:18:52:59:a1:de:13:bb:26:63:b8:5b:24:
84:ad:76:80:fa:9c:0f:a6:72:cf:0c:18:69:73:d5:
72:bc:22:a9:ae:d9:1a:41:fe:7b:e0:a3:29:9d:ab:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:D3:2D:17:15:A6:EE:AC:2F:7E:A7:3F:E7:1B:A7:00:0A:A0:91
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e5:6c:72:04:3a:54:cc:f7:fd:65:b9:b0:3f:9c:0d:bd:7a:
cf:a6:77:6c:66:68:37:a6:0b:51:24:5c:d7:4d:e0:71:84:be:
c3:00:b0:70:e2:0b:99:59:2c:3a:83:b2:39:29:08:0e:f8:f3:
b7:bd:f7:3f:f1:25:55:da:73:5d:7e:d5:fc:55:a5:29:b1:ae:
15:e5:78:03:60:bb:c6:39:11:44:d3:53:45:c5:11:7d:d2:7b:
28:5b:26:35:74:c8:58:f4:8f:03:c6:74:f0:32:1b:3e:48:6a:
a6:49:6a:72:dc:2c:8d:36:7b:69:37:1c:c8:18:1f:d4:73:d8:
27:5f:93:cd:d8:8f:73:9d:ce:36:15:73:19:31:c5:79:4f:92:
f7:1c:a8:73:35:3d:66:3c:25:13:ea:3f:ad:1d:52:86:96:f5:
40:2d:bc:93:d8:a2:5b:ab:01:77:5f:a9:04:a2:c2:f5:d0:71:
f1:3a:6e:0b:55:fd:d3:94:72:51:24:ad:63:7d:bc:2d:8e:14:
a1:72:c7:32:f6:35:e2:d2:da:c7:ab:df:18:49:65:0d:11:ca:
02:9e:e4:a6:10:28:47:de:c2:82:cb:b1:6a:59:2c:57:d1:5e:
fa:b5:77:08:c7:f9:76:ea:3d:53:f1:ed:57:c6:fc:26:cc:50:
2d:00:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:34 2026 by rpki-client