Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: q/vtr4b33B12joyNUfwMMTSe2N8naDuWfyNz5nhSQxA=
Subject key identifier: C2:F9:DF:89:5B:9A:96:85:2E:49:C6:C7:C0:4B:DA:7F:BF:5C:F2:62
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 01A0CBC7D93C47D098CB4475E5D51D233CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 01:01:06 +0000
Manifest this update: Wed 23 Sep 2026 01:01:06 +0000
Manifest next update: Thu 24 Sep 2026 01:01:06 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: 5SujGkcprqF/KTkQj2g4DYAHlrK9fuJkvTtE5Iq9Bs8=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:d9:3c:47:d0:98:cb:44:75:e5:d5:1d:23:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Sep 23 01:01:06 2026 GMT
Not After : Sep 24 01:01:06 2026 GMT
Subject: CN=c2f9df895b9a96852e49c6c7c04bda7fbf5cf262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:3b:04:26:f4:b7:88:ad:30:2d:0f:cf:fa:
54:01:bc:1a:d8:59:1b:4a:88:5d:43:31:c6:3d:f7:
a0:c6:c9:89:c2:8b:49:6a:a4:17:2b:97:ed:e6:e9:
82:9c:b5:ea:51:d4:59:e6:e9:b7:6a:a1:8b:3e:06:
db:59:0f:2d:f9:1c:a2:7e:29:1d:18:7e:db:aa:fb:
09:16:da:ae:3b:b9:1e:e2:79:32:e1:54:78:0a:45:
ef:52:7c:1a:84:7b:01:31:68:ae:01:3a:26:47:62:
e5:79:bc:25:b9:60:2e:d0:93:e2:e1:a0:fe:6e:44:
f8:0c:8e:27:0b:a8:7a:0f:61:31:cc:36:fb:47:fb:
77:1f:97:e0:bc:61:5f:46:90:4f:01:52:0d:e8:52:
90:4e:a8:54:24:48:fd:91:02:d6:59:89:d1:ab:dc:
e0:52:bf:4b:90:0f:6b:55:b4:2f:da:c9:38:83:74:
35:5b:4a:32:81:36:4b:c7:41:9d:1c:be:de:27:d1:
29:eb:fc:c3:4b:61:a7:b7:33:b9:0e:8d:1a:96:d4:
69:49:22:e0:29:20:7d:51:c1:60:9f:8a:b8:2b:44:
c6:cd:ca:33:cc:b1:32:78:4c:86:d0:dd:ba:41:d8:
aa:1c:ca:8d:31:a0:11:e8:ca:7f:53:38:4f:5c:72:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:DF:89:5B:9A:96:85:2E:49:C6:C7:C0:4B:DA:7F:BF:5C:F2:62
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:bb:33:2a:cf:85:52:e4:3b:b7:37:e7:70:36:61:ca:a7:
e9:d2:81:a8:83:6d:69:ee:71:b3:12:51:c2:2a:27:2b:23:1d:
68:a0:3e:f3:85:82:bf:40:8d:cc:b4:d2:c9:70:ba:46:19:2d:
25:39:41:b6:66:11:40:26:f7:18:1b:2e:02:aa:52:fb:9a:c7:
9d:d1:a7:09:40:61:6a:86:c9:f6:76:8f:cd:09:a9:7c:52:59:
7b:09:fc:d2:29:3a:40:33:4f:8b:44:78:53:28:99:23:37:92:
da:95:df:d2:b0:03:ae:b2:a3:51:b6:22:aa:e3:95:c3:57:39:
ea:c2:8c:2b:17:c8:6c:69:8d:36:10:7d:2c:53:9e:de:1f:a9:
0e:50:62:af:d4:da:2e:00:c5:b1:d1:87:b0:0c:f5:34:8d:2b:
7c:e1:d2:10:54:17:5e:6f:03:01:d3:9c:33:64:c3:23:b9:bd:
d5:31:8b:be:67:f9:10:c2:2c:77:c0:7e:b0:93:00:73:d4:0c:
a2:46:50:85:13:bf:e5:6f:78:e4:63:0c:ba:e4:ea:28:18:6f:
24:4d:b5:16:ad:cd:4d:a6:68:85:d8:03:69:37:21:b0:f4:29:
81:3f:8a:86:68:6d:cd:58:6d:d8:5e:12:9c:f2:23:55:0f:3e:
5c:f2:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:29:56 2026 by rpki-client