Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: hn03T1hh/oDvor4quEix3Sf4aEq4EmSZcVOKk4LX80w=
Subject key identifier: A2:1A:A1:4C:BB:9B:AA:AB:E3:A5:05:82:45:67:CD:42:39:CD:A0:96
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 019D2AE140135565E08425D464B99CDD5DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 16:01:38 +0000
Manifest this update: Thu 26 Mar 2026 16:01:38 +0000
Manifest next update: Fri 27 Mar 2026 16:01:38 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: b7vww/2xPXRMWgECDI2uYWy5OtE5jHD1QPK8BiNXesY=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:40:13:55:65:e0:84:25:d4:64:b9:9c:dd:5d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Mar 26 16:01:38 2026 GMT
Not After : Mar 27 16:01:38 2026 GMT
Subject: CN=a21aa14cbb9baaabe3a505824567cd4239cda096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:27:f2:0f:c9:5a:70:38:98:b2:62:67:e5:27:
d9:17:c0:4d:55:61:07:c8:a5:8a:98:94:e9:df:e5:
3a:3b:22:34:54:16:8a:09:ca:de:39:90:cf:3f:36:
b7:38:54:26:48:9b:b6:c4:c5:34:ef:16:36:46:80:
6e:2e:71:da:98:a7:70:65:a4:0c:16:49:10:e8:0e:
ae:48:ff:1f:e9:f6:37:43:34:c5:2b:62:de:1d:b6:
cc:73:91:51:96:05:63:30:e8:5e:bc:bf:2f:12:9a:
35:d9:ec:90:81:d7:5d:f5:72:1c:b2:4c:87:66:a1:
17:59:39:85:49:7b:1b:45:58:9e:76:9c:6a:86:4f:
4f:18:c0:53:b3:dc:88:86:8a:3f:83:1d:7a:5a:2b:
91:a4:4b:4c:f3:74:c7:75:1f:ff:7a:48:d5:d1:90:
ee:29:84:70:c0:2d:4f:24:ef:4e:87:18:d2:bb:1f:
f9:de:f5:db:39:13:87:c8:cd:d9:a9:95:97:a7:16:
9a:17:37:27:c2:82:90:62:d9:55:0c:86:a8:ab:7c:
d0:18:4c:dc:5b:6e:24:47:a5:90:28:14:ec:4c:39:
99:eb:96:af:72:ad:b9:ee:78:d6:a2:f5:99:92:50:
f7:77:9d:7e:3f:2f:ed:58:50:60:20:aa:68:37:57:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:A1:4C:BB:9B:AA:AB:E3:A5:05:82:45:67:CD:42:39:CD:A0:96
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:99:f1:52:8e:5b:04:a9:6d:b9:d6:a1:62:a8:a2:15:f1:
02:de:48:f3:77:eb:2b:13:67:2f:54:32:6d:72:2b:15:e2:73:
d0:7c:bc:7c:5b:70:96:3b:5f:3a:5e:64:72:38:37:1a:63:c8:
12:cf:89:33:2b:75:01:62:85:bd:01:83:df:0f:c0:5e:97:c0:
8e:d1:fe:02:00:03:55:ea:ba:af:5d:f2:32:6b:70:70:48:59:
00:d1:a3:b7:10:52:13:c8:de:eb:8e:6e:9b:fb:f6:33:0f:a6:
85:91:19:f0:55:34:6c:ef:2f:85:5a:06:df:45:be:1c:b9:d5:
59:10:aa:58:51:41:2c:9b:4a:f0:b5:85:b7:d1:d5:88:92:db:
45:b5:94:40:41:6b:a5:8f:99:2d:63:71:1c:7a:3f:7f:b0:39:
63:91:c3:f9:ea:f5:3d:b6:b7:dd:d1:8f:db:40:1e:40:16:a7:
a0:49:96:34:e5:cd:98:db:11:6c:03:ab:6f:ca:30:aa:7e:29:
b5:79:13:2c:d8:37:ba:3d:96:89:7c:ce:d4:f7:f2:68:a9:cc:
0d:42:5a:cf:b7:b4:9d:33:1c:af:b5:5f:06:91:e9:34:9a:e6:
fa:38:b0:cb:e9:6c:21:a5:49:1b:de:10:21:4f:28:cb:eb:93:
0a:0f:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:30:21 2026 by rpki-client