Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: hZ7fuFkJLCupFG89iMa/Py6EbShbRBLvJTnl1YCensQ=
Subject key identifier: 06:E6:45:98:DE:BE:3E:47:AE:3C:11:6B:67:37:69:44:1B:5B:5F:8B
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 019F90FF439620EC009C89FA757B46AB74C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 22:01:15 +0000
Manifest this update: Thu 23 Jul 2026 22:01:15 +0000
Manifest next update: Fri 24 Jul 2026 22:01:15 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: KOgG8ieIC2qslrUcIBHIgsZ6s64Vb3/tGVOaYRtmjsY=)
2: WeJgs7A95jwqtwLgB758IcXv4EU.roa (hash: 84hLdtwmT7VOnkUt9Z3ak3sP5MNYReF+bmVuaSuUp4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:43:96:20:ec:00:9c:89:fa:75:7b:46:ab:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Jul 23 22:01:15 2026 GMT
Not After : Jul 24 22:01:15 2026 GMT
Subject: CN=06e64598debe3e47ae3c116b673769441b5b5f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:3d:71:d5:d7:88:90:f7:a3:b0:22:45:33:
a6:be:e2:a8:96:71:20:f7:2f:17:6f:c1:28:0e:9c:
da:61:29:6d:ee:02:8c:9c:1d:2a:e3:89:f0:c5:97:
3d:66:08:cb:98:5c:65:da:d9:0e:22:a6:c2:b7:db:
46:2f:f2:e2:be:a4:c1:3d:e5:bc:fc:bf:86:01:e8:
dc:4d:5e:ec:92:da:d4:93:18:38:37:5a:d8:f5:ed:
21:f1:87:0a:0a:ad:3c:ce:0f:3b:05:0a:da:7c:87:
51:8b:c8:b0:ab:bc:77:9e:ea:2f:b2:bd:ed:40:be:
d9:fe:91:1f:8a:65:ed:e0:0a:dc:86:3e:42:e0:db:
68:46:e1:a6:d2:48:bb:3b:27:bc:c5:2a:77:1e:9e:
51:a3:31:75:ac:21:2e:33:5d:01:15:7c:90:53:be:
70:fc:da:b0:df:08:57:cb:f1:7e:95:43:fd:eb:0b:
ef:92:76:db:75:c3:b1:e9:1d:25:3f:0e:9a:ba:2e:
72:75:53:74:5f:ca:1d:64:a3:a9:c5:b6:e4:f7:f6:
5d:69:43:6b:d6:95:34:20:4f:70:67:d6:72:96:03:
a7:3c:11:24:ad:74:0b:06:5e:b2:66:b9:7f:9e:d6:
66:36:45:8f:e4:86:ae:24:74:a5:35:67:13:1f:3b:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:45:98:DE:BE:3E:47:AE:3C:11:6B:67:37:69:44:1B:5B:5F:8B
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:0b:c0:15:95:34:81:59:b0:8a:a7:6d:92:26:6d:0d:d0:
8c:e9:3a:1d:e3:ab:cd:8d:d2:14:11:59:b6:07:dd:26:65:d0:
73:0f:73:0a:e7:0b:82:64:0a:53:84:5e:88:aa:5e:7f:b3:2f:
16:38:b7:17:a8:1f:99:df:74:e0:c9:1d:d3:ee:55:52:1a:21:
56:da:91:4f:33:c0:24:66:f5:d4:c3:35:cd:ad:d5:23:53:8f:
55:c7:38:74:3e:53:c1:b4:33:f6:6a:b8:59:0b:d3:c7:d5:d2:
57:bd:64:ea:02:43:00:64:ee:2d:29:a6:f2:93:95:40:a3:d0:
4b:dd:72:37:f3:bb:fb:20:df:55:73:97:b9:75:f0:02:3b:fe:
0f:ba:5a:5b:9c:2a:a8:70:0a:b9:61:d8:08:74:f0:9a:40:c7:
ee:4b:4b:95:9b:eb:c5:50:f8:c2:84:0b:8e:65:e4:68:0f:31:
de:13:4d:bf:9d:df:d3:f7:1b:84:4f:64:0d:c4:b0:7e:0a:f3:
fd:14:30:9c:33:0d:d5:e2:36:4c:c3:45:14:ee:7b:da:1d:d2:
fc:36:4f:8c:38:73:e5:0c:a6:83:1e:68:a0:ad:3e:d8:c8:65:
74:f3:61:ea:43:fb:eb:a0:64:4d:a5:33:03:a8:6e:b2:9a:a7:
5b:71:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:13 2026 by rpki-client