Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: 5iMBn0BcZYMUuZHZqfAcd9HYGArqCo2eeOtk+5lDAZ4=
Subject key identifier: 6A:46:F9:02:2F:5A:5F:76:08:BC:EF:7F:42:F7:B9:BF:2A:50:F2:6E
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A0D94C79988C285682BD5EF7B54C47822C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 16:01:02 +0000
Manifest this update: Fri 25 Sep 2026 16:01:02 +0000
Manifest next update: Sat 26 Sep 2026 16:01:02 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: Cnxxixmpw86yjT3stBwer+4ojbHvC0pClw4lVvHnRAI=)
2: WeJgs7A95jwqtwLgB758IcXv4EU.roa (hash: 84hLdtwmT7VOnkUt9Z3ak3sP5MNYReF+bmVuaSuUp4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:79:98:8c:28:56:82:bd:5e:f7:b5:4c:47:82:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Sep 25 16:01:02 2026 GMT
Not After : Sep 26 16:01:02 2026 GMT
Subject: CN=6a46f9022f5a5f7608bcef7f42f7b9bf2a50f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:9d:f5:5c:c6:26:8c:be:e5:b1:07:37:d9:
14:48:ec:dc:92:88:0e:44:96:f2:62:c3:91:4d:ab:
9d:d6:f8:c2:48:96:bb:72:40:47:78:e7:52:9d:f5:
b3:dd:d5:eb:13:6c:0e:3c:3e:b4:2d:43:38:09:03:
d8:91:85:f5:73:17:a6:c1:ce:68:a0:e4:a2:31:80:
4d:3e:01:25:54:e5:56:ed:3c:0b:56:d7:12:48:1a:
ab:37:e2:04:54:e6:2e:59:ae:50:b8:19:19:24:41:
89:b4:11:b6:b4:05:e4:db:c8:66:fc:7c:2a:25:44:
1a:5b:e3:8b:a9:c9:f7:04:38:42:95:06:16:92:79:
52:e4:41:da:fe:c4:c1:ff:0f:7c:32:91:c7:89:94:
4a:98:aa:21:e6:0a:ef:7c:f6:93:7b:b4:ba:c4:84:
b8:fe:90:bd:2a:66:97:df:26:6d:bb:77:70:09:83:
7f:e0:cf:43:03:98:52:95:c3:12:d3:4d:cb:e8:56:
2b:b2:2a:29:eb:69:ef:76:ae:65:95:67:86:c1:1b:
2d:12:be:b6:e1:3c:f6:6c:bd:78:d0:5c:14:73:d0:
da:3e:b6:45:e2:d3:dc:1f:10:f8:5b:a4:8c:59:9f:
98:c0:ef:72:db:5b:49:3c:84:99:df:30:e0:53:68:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:F9:02:2F:5A:5F:76:08:BC:EF:7F:42:F7:B9:BF:2A:50:F2:6E
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:68:a1:bd:45:43:b3:2d:7f:c5:7c:02:45:78:03:d4:77:e5:
80:02:5d:fb:22:7d:c5:10:01:a7:a7:ee:75:00:b2:0f:eb:7f:
fa:99:d2:5b:d9:78:59:cd:94:1e:ec:79:44:c0:00:9d:13:54:
8f:14:46:0e:13:fd:f7:0f:c3:47:8f:b5:15:6d:5a:9c:fe:d8:
4e:e4:b9:0b:75:9c:6b:80:af:f0:c8:19:9a:5b:ce:44:c5:6c:
b6:51:de:a6:79:5f:d0:8e:8d:47:e0:8c:42:64:07:d8:55:a2:
77:42:db:56:a2:f7:cb:4c:e9:18:66:c6:ab:b6:3a:54:12:ea:
73:3d:7f:6d:dc:5c:7a:4e:a1:69:d4:09:a1:4e:04:a0:30:e1:
c8:b1:1c:62:eb:81:94:b3:76:bf:2b:b6:d7:33:80:1b:fb:93:
f2:c1:d6:cb:b3:bc:0e:24:7f:80:e8:63:95:90:10:93:e9:fa:
85:c0:53:e8:7f:92:de:0f:ff:c8:c9:a9:27:6c:27:e9:bc:f9:
12:49:c6:16:1c:3a:50:4c:f2:8b:f0:81:3e:c4:a4:7c:d9:01:
1c:18:4d:e3:62:c6:dc:71:40:3b:cc:93:76:7e:e9:49:5e:24:
81:bf:4e:08:bf:9f:0a:b0:c1:d9:c0:4c:e8:19:d8:dd:40:d6:
f3:f0:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:46:32 2026 by rpki-client