Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: o+qit7W+Dh1q9/H3CTgHQCMzk4hZJIaZ6iu+PsOGCmk=
Subject key identifier: C4:92:56:62:A3:35:BE:FB:74:6A:9D:34:66:E1:18:19:18:EA:3E:CB
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019F6080AA68669EEEC6544F65F91042D6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 19AF
Signing time: Tue 14 Jul 2026 12:01:12 +0000
Manifest this update: Tue 14 Jul 2026 12:01:12 +0000
Manifest next update: Wed 15 Jul 2026 12:01:12 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: 4yXT1jTu8XLZt/BhK/A/jsInmERT2FUQ0GfKItQruUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:80:aa:68:66:9e:ee:c6:54:4f:65:f9:10:42:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jul 14 12:01:12 2026 GMT
Not After : Jul 15 12:01:12 2026 GMT
Subject: CN=c4925662a335befb746a9d3466e1181918ea3ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:23:07:52:ad:2c:6f:69:0e:eb:59:21:f3:
8d:e0:0c:d8:25:af:c5:75:d7:da:e1:1c:21:6e:13:
d7:3d:9d:14:a2:96:5e:a3:d5:63:04:bd:0d:11:66:
1e:44:b4:1c:09:2a:22:8a:38:61:e6:f3:9f:35:b6:
1e:d2:6b:03:71:08:89:5d:27:50:a7:6d:a4:8d:4c:
9b:96:c7:3d:00:5f:85:27:aa:8a:29:6a:29:e4:fd:
d1:36:5c:fc:3d:93:14:a3:9b:c1:75:fe:c5:82:15:
78:78:54:27:a8:ff:0d:cc:81:99:1a:4c:f4:41:2d:
e4:22:9b:a7:6d:1a:e6:68:c8:ad:3b:33:f1:5a:62:
d7:16:c6:9d:38:a9:e4:7c:5d:e0:58:b4:50:94:91:
37:1f:ae:3b:f5:5f:1b:8f:2e:22:e6:42:94:3a:0c:
2d:73:75:69:09:19:40:5b:1a:29:94:27:8f:e4:d0:
6d:37:69:c0:fe:39:bb:33:0e:50:b2:6d:ee:32:24:
8d:8e:dd:2d:a7:10:99:5b:f2:44:c8:2a:d8:fd:1e:
f4:e6:c6:aa:5d:75:a4:9b:2e:38:24:ed:e5:66:c6:
69:e7:ff:00:2e:37:39:07:0d:b0:77:38:fb:8a:03:
c8:89:dd:73:ba:78:08:8a:9a:70:a9:5f:ce:57:c7:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:56:62:A3:35:BE:FB:74:6A:9D:34:66:E1:18:19:18:EA:3E:CB
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:63:91:2f:3f:ac:2b:cb:63:53:83:19:c8:12:ac:91:60:
e0:49:a9:f8:53:db:09:35:c3:75:b9:f1:10:0b:0c:b3:a0:67:
f8:dd:da:7f:3f:60:17:31:f0:bb:7f:15:63:d5:22:57:d0:8d:
e4:3c:a4:ca:b0:9d:07:f0:b3:85:84:7e:24:42:e4:43:7a:51:
eb:cf:a8:41:85:fa:96:42:99:31:a7:14:1e:c2:4e:0f:08:63:
27:e5:86:f0:91:a4:e5:39:b7:2f:df:b5:bf:39:28:97:ce:48:
d1:62:be:4c:ca:99:5a:4b:40:6b:c9:53:e1:e0:93:b4:dc:c5:
41:cf:be:53:57:ee:1d:8c:cc:4e:9b:26:26:7e:cc:41:69:06:
bb:ed:22:66:b0:d6:78:f2:55:e5:f7:5f:b2:69:54:5c:cd:9f:
d5:d6:50:28:7d:9d:3d:82:fc:5b:ef:e8:50:1e:8c:5f:6f:1a:
41:5f:ff:9c:0f:ad:43:39:a6:92:1d:49:55:b5:04:67:dc:8e:
a2:e8:4a:c4:18:2d:9d:6f:fb:ac:b2:6b:c5:39:d9:15:b2:32:
a7:3a:a3:b7:0d:e0:ba:fe:97:2b:9e:67:8a:f8:87:89:52:ef:
56:5b:56:d6:0e:6d:fc:52:08:98:12:8b:e2:f1:40:52:0a:60:
ff:1f:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 14:35:45 2026 by rpki-client