Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: w4m9Y1vhws3NQv7l04cxnQ3E7wgUDG2ZRsWBJd8e/j4=
Subject key identifier: 2A:BF:64:9E:D9:0B:A5:FC:2D:FD:4C:9A:A6:25:55:4B:05:04:30:9F
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A1D9EF4E743454F4DC5427A42738A8695E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1AFA
Signing time: Sat 14 Nov 2026 12:01:41 +0000
Manifest this update: Sat 14 Nov 2026 12:01:41 +0000
Manifest next update: Sun 15 Nov 2026 12:01:41 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: roQPS60sGPOOY3kCUIQmHY6HzydRRpvMU+5wuXaN2kk=)
2: odgvgX5OKnBuqpCEQFyifLcuH4A.roa (hash: TEyEnNRYzz8D2aikUvWtRtpqlSUUtFDnA9JCdB95CsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:4e:74:34:54:f4:dc:54:27:a4:27:38:a8:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Nov 14 12:01:41 2026 GMT
Not After : Nov 15 12:01:41 2026 GMT
Subject: CN=2abf649ed90ba5fc2dfd4c9aa625554b0504309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:e0:1d:3b:68:04:95:1c:81:65:9f:d8:46:
b8:56:9d:2b:fe:0e:8d:66:6f:14:84:7a:10:9a:07:
34:c1:3a:c4:29:0a:ad:8f:ce:52:cb:48:18:3a:e6:
60:02:0a:ca:a0:69:e7:2b:6b:89:e3:a7:82:9d:b8:
43:a9:bf:1f:a3:f2:57:9e:cf:09:08:b1:13:98:8f:
1b:18:b0:00:c4:e4:39:90:c7:67:a6:38:4a:fd:aa:
1b:92:0e:f8:b7:83:f9:0a:7a:8e:9c:ec:35:21:36:
72:e2:d5:ba:54:c4:af:a7:f2:20:86:d2:43:8a:f8:
88:b4:9d:a9:a3:e6:c6:ca:5a:74:d1:db:5e:cf:df:
18:2f:e4:ac:cf:a3:f2:92:e3:98:66:1f:e4:2a:f6:
f3:96:28:b2:2d:d1:ba:75:71:80:ec:76:81:8c:23:
68:37:2e:f0:1b:c1:4c:5e:81:13:6a:88:2b:c5:42:
9d:72:32:59:c4:08:98:08:81:df:1c:79:17:ad:98:
8d:b4:17:93:3a:fe:cd:4f:bd:b2:1d:f6:a6:65:1c:
aa:4d:fb:11:55:15:c3:d0:dd:75:a6:61:de:0c:2a:
11:b1:38:1c:f2:02:7e:7b:ec:7a:be:7e:2c:65:45:
c9:13:d6:a0:af:12:b8:24:68:e2:e9:37:eb:03:c4:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:64:9E:D9:0B:A5:FC:2D:FD:4C:9A:A6:25:55:4B:05:04:30:9F
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:89:44:bb:d1:f2:46:02:0c:f5:56:7e:36:f3:03:4e:a8:
1f:b3:8e:50:be:82:b0:b8:d6:b5:4f:d5:a0:23:50:1c:dd:45:
14:e8:5d:e0:c3:7d:d6:a3:57:18:3e:9d:af:aa:91:15:11:84:
0e:d2:ec:02:f1:4d:44:27:c3:bb:23:3c:c5:bc:c3:11:c6:04:
a9:dc:b0:01:ad:99:80:13:cd:5d:f8:d8:ba:7c:1c:22:8e:b6:
e3:a3:b4:9d:b7:ac:32:1e:be:3a:d6:01:aa:fc:4c:30:67:7f:
3f:e4:62:b5:79:bc:b5:5b:ec:4b:64:4d:53:8f:c0:54:65:95:
9b:e4:c2:16:68:af:98:be:c8:d2:fd:34:5d:eb:74:cb:64:de:
57:be:ca:d1:2c:f7:5d:e2:fc:58:4c:cc:5c:df:54:58:2c:e3:
a4:84:46:a1:84:18:cd:34:dd:40:63:52:05:e4:c1:91:4b:0b:
bc:bd:83:d5:04:c3:df:4b:9b:3d:4a:8f:5c:b5:de:c0:32:a1:
4e:7a:29:fd:18:94:25:07:1d:47:eb:c7:88:72:7a:80:29:76:
de:60:a5:98:03:aa:25:ea:72:ee:52:0a:70:c5:33:a3:c7:0a:
1f:93:f0:b2:81:a5:13:40:29:c7:68:0d:17:8b:13:2a:d2:0d:
4e:5a:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:50 2026 by rpki-client