Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: xjjdgwH2RdYqf/ZKzrW4+ADlPkysJnfkbKZx+iLDeVU=
Subject key identifier: 61:CF:47:5D:72:2F:A5:50:32:D7:A2:62:2D:AD:D3:D9:9D:05:54:77
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 019D28BB8BE5746D9D1CE416B4A99E33D32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: iTdbSRkeeUov9QjxN4mvAn9ldlo.roa (hash: tg/DcKEQ9TahkTXZCbdJ5Aa1YXNL0sEz+WPlApm58zQ=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: 8w3N2YAOo/yD+Uq3I7mhroX6E42wjYP4+XH6GKMqM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8b:e5:74:6d:9d:1c:e4:16:b4:a9:9e:33:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=61cf475d722fa55032d7a2622dadd3d99d055477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:91:fd:7d:4c:7a:01:85:db:37:47:0a:5b:
5f:7d:e1:ad:a8:78:0e:4c:fd:f1:a9:f9:1b:1a:cc:
c5:4e:1d:f5:99:52:df:68:0c:85:dd:db:5d:ac:14:
7a:7b:6f:11:8c:52:c2:4e:ca:cf:55:4f:76:82:74:
cb:c9:fa:de:c7:e1:3b:66:75:6a:c4:54:98:0d:24:
7b:0f:8f:32:b2:39:fe:58:00:59:33:6d:66:1a:76:
42:72:0c:e3:e1:35:54:bc:5b:9e:64:a7:5e:88:51:
ff:ba:a4:76:b7:c1:0c:30:ab:a8:bd:c5:e9:e1:8a:
5a:45:09:de:af:fa:2a:33:33:ed:70:e1:45:18:dc:
37:18:a6:38:d3:ab:de:72:3d:d5:93:c0:a5:d6:3b:
23:0c:3c:f4:5e:57:62:1e:d0:bb:e4:0e:9f:8e:e1:
51:b8:d6:9b:39:6b:e8:30:da:ef:0d:9d:21:37:a6:
97:ca:29:4a:d1:d1:44:4e:50:34:8b:86:6e:2e:b7:
2c:27:df:c6:f1:b8:1e:e3:54:f3:a1:c6:92:b6:c2:
47:e5:e7:10:1d:ed:4c:62:45:f5:16:5c:21:90:84:
09:b1:39:7b:6b:09:e3:94:f4:ad:a7:dc:fe:c7:7d:
ca:60:9c:c9:4e:97:a2:3a:c2:a1:1f:ae:d1:51:ce:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:47:5D:72:2F:A5:50:32:D7:A2:62:2D:AD:D3:D9:9D:05:54:77
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:40:12:b6:d0:ea:0a:3f:db:63:97:ad:ae:13:d1:37:70:
5a:e8:a4:08:12:33:d3:fe:9d:d3:62:df:f1:2f:e6:e3:2a:09:
51:eb:65:1c:f1:b7:a5:45:65:e0:4c:a4:50:42:27:40:41:1f:
87:39:c8:00:23:62:b1:69:f4:69:f8:33:0e:6e:33:b2:9e:f4:
3f:f5:d2:74:dd:c7:cd:9c:a8:62:3a:fc:b0:21:62:f2:a3:bf:
ea:ed:bd:02:47:c0:d0:1a:aa:36:cd:4e:af:8e:8a:86:7e:cc:
29:08:90:86:b7:77:aa:9d:29:00:c2:fc:dc:51:c0:e4:89:84:
f2:8b:03:62:31:50:0b:09:6b:74:f4:f2:44:b7:80:64:72:d3:
03:91:9f:15:dc:65:70:4d:25:00:d8:c3:8a:e9:88:a8:90:d2:
14:4d:73:ce:68:ca:83:58:f3:7d:ed:bb:6b:f4:db:44:9e:df:
f1:37:0b:71:b2:5c:3c:17:8c:32:7c:5f:ee:0c:70:88:e7:b9:
36:3f:1c:9f:e7:51:bf:92:b1:b0:9a:35:fc:8d:2b:e4:b5:24:
b4:2b:81:db:29:92:71:85:0c:81:5e:39:e4:bf:5f:04:62:03:
dd:e4:57:66:c5:f9:8c:b9:52:9c:f2:75:82:3c:a6:bb:e4:5e:
a9:e4:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:41 2026 by rpki-client