Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: DAFgedAcluUiyphBltJTpcMH/3JCbvxfRZjcqS5rljQ=
Subject key identifier: 15:35:07:E9:44:16:B1:37:C2:EE:09:02:2A:4E:26:45:EE:25:B6:D8
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 019F8F106EB38288A2D95DC37410625ADAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 13:00:46 +0000
Manifest this update: Thu 23 Jul 2026 13:00:46 +0000
Manifest next update: Fri 24 Jul 2026 13:00:46 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: Nxe9IwQjNVeO0+H+700dmoGkbeLRnnyh78EO8GMHS7k=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:6e:b3:82:88:a2:d9:5d:c3:74:10:62:5a:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Jul 23 13:00:46 2026 GMT
Not After : Jul 24 13:00:46 2026 GMT
Subject: CN=153507e94416b137c2ee09022a4e2645ee25b6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:c7:5e:87:c4:f1:b3:f0:e8:4a:74:ee:74:
d9:6a:ad:b2:34:f9:83:1c:34:13:12:8b:82:c7:bb:
a2:60:66:32:d0:53:a1:d2:ca:f5:bd:c7:c5:0c:8e:
35:d6:99:8b:2f:5e:c5:8a:8c:60:1a:05:1b:dd:fc:
55:b5:35:e1:ba:a5:1f:6d:f5:f3:b8:22:55:93:79:
6a:0c:02:6f:dd:94:8e:64:3c:67:e3:ef:cf:7e:66:
bd:3e:c4:b0:10:6b:b2:35:9d:3c:e3:77:3f:bc:86:
2f:2c:ff:8c:fa:4f:90:e2:8c:55:16:8d:1b:29:58:
4e:91:8d:92:ed:7e:a8:8b:8c:f2:3a:f0:58:55:34:
93:5b:ef:b4:ac:9f:2d:7d:c1:fd:ba:38:10:f2:89:
82:de:9a:c9:f3:e1:ea:f7:d3:1b:55:3c:ec:43:73:
0e:0c:b4:82:d5:8c:f6:ea:1d:72:30:e9:af:a5:da:
d8:b1:61:fc:b3:5a:d7:db:fb:2a:6b:3f:90:b7:20:
7b:4d:66:8e:66:2c:0c:bf:26:5f:f2:e5:a5:a0:84:
ad:85:fd:a8:7e:7d:54:9a:b9:c6:f0:5c:8e:9c:41:
04:ed:de:18:95:d2:1d:9a:b3:78:49:ae:31:19:c7:
33:48:b9:d1:b0:a0:73:c5:db:e7:6c:7f:f2:52:7e:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:07:E9:44:16:B1:37:C2:EE:09:02:2A:4E:26:45:EE:25:B6:D8
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:4f:d2:13:ec:60:62:b4:44:87:c4:69:d1:65:d5:33:76:
a6:f3:8c:8c:b5:e8:79:33:f8:c5:4a:e8:7d:66:ed:e2:84:c1:
f7:2e:e7:2d:b5:26:56:76:67:48:a9:05:fc:f7:50:1f:05:82:
13:c6:1f:7a:00:d7:65:5d:5d:c7:3f:bd:bc:cf:39:be:1d:c7:
b2:c0:59:05:4d:e6:95:99:05:86:e9:b0:41:a5:c0:0f:d1:48:
9c:26:76:56:18:44:ca:0f:53:1e:dc:42:05:a4:0e:51:cd:3c:
ae:fb:ee:41:4b:f5:6d:10:61:33:3b:47:49:8a:b2:a3:3e:67:
e6:2e:ea:59:38:7e:00:a5:1f:36:43:45:fb:26:53:3f:9e:d3:
45:7a:6c:b9:08:a3:2d:0f:01:e1:1b:71:01:46:08:5b:8e:5f:
bd:24:6f:e2:fb:68:42:7f:c1:24:10:cd:07:f1:a5:e9:49:83:
bf:6c:16:a9:60:1c:0b:9b:39:ac:cf:37:f0:6a:e0:4f:d4:41:
60:2c:cb:43:fb:b7:26:49:6b:41:96:52:85:51:25:8f:51:d1:
70:ac:9b:af:c2:c5:04:ee:16:2b:47:55:68:2a:3e:08:55:e3:
d9:25:f1:f1:e1:bb:80:35:04:4c:73:fd:1e:58:f8:1e:ab:16:
b8:a1:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:23 2026 by rpki-client