Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: A3ZdGZmGWiswOWHwzUv0/nMRv8q9YBG8lNru+fAWVic=
Subject key identifier: 30:A6:42:F3:A8:32:31:66:B9:6E:5E:4F:84:A5:06:CC:E3:ED:12:DE
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01A0599F9710B5836341DEA20F5FD489473C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1A30
Signing time: Mon 31 Aug 2026 21:00:26 +0000
Manifest this update: Mon 31 Aug 2026 21:00:26 +0000
Manifest next update: Tue 01 Sep 2026 21:00:26 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: vNS0eKkBqoIFk6K5/QlDQ6A9KH1oOsj1Lnu3bVmWQck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9f:97:10:b5:83:63:41:de:a2:0f:5f:d4:89:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Aug 31 21:00:26 2026 GMT
Not After : Sep 1 21:00:26 2026 GMT
Subject: CN=30a642f3a8323166b96e5e4f84a506cce3ed12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:c7:4b:30:e9:51:8d:ce:81:06:ec:17:01:
6d:60:1c:c0:f0:4d:8e:4e:bf:31:cd:05:dd:65:03:
6f:27:8a:5a:1a:5f:fb:90:64:78:13:78:b2:a7:c9:
0b:d2:47:cb:5d:da:32:65:62:45:1a:9b:91:7a:4e:
4a:a3:dc:b3:15:ef:8b:54:9c:1e:1a:eb:77:74:ab:
3e:7b:f0:22:07:ed:1d:66:bc:62:9f:2c:48:95:76:
37:de:e8:24:9c:a2:b7:08:e8:cf:99:e6:3f:2d:6d:
c3:e8:fa:13:14:d6:9d:f6:b4:da:b9:a7:05:38:67:
10:7f:b9:8d:7d:c2:d2:71:d3:99:64:81:d3:22:29:
3e:07:df:12:47:74:5a:53:c6:9b:ed:1c:28:86:91:
7d:e8:4b:1b:d6:99:cf:03:36:ab:8e:e6:2c:b6:6b:
90:59:79:7f:de:31:6b:7b:eb:b6:f1:bd:18:46:85:
9d:35:5e:63:aa:d5:d5:68:ed:91:e3:81:ef:6e:15:
dd:13:ce:dc:61:54:f7:51:0b:59:c4:ca:b6:74:0a:
d0:39:73:b5:4b:c2:11:dc:c8:3d:49:a5:65:d5:61:
9e:88:ce:32:a3:ff:58:39:4c:d4:4e:38:4b:d6:c4:
8e:04:54:ed:3a:a0:dd:77:e8:2d:39:6c:62:29:d8:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:42:F3:A8:32:31:66:B9:6E:5E:4F:84:A5:06:CC:E3:ED:12:DE
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1e:28:34:82:72:b7:d7:d7:79:05:56:62:ba:40:8c:39:69:
a2:b0:cd:47:32:6f:51:bf:77:6f:3f:22:b8:e1:43:10:13:ff:
73:09:56:e2:b3:0f:42:5f:9e:c2:39:0a:fa:8b:ed:25:fb:20:
cc:a3:9b:bb:be:08:a7:6c:c9:86:38:5e:e4:40:d4:99:4d:b0:
2c:1f:24:0e:88:7e:13:eb:84:cf:d4:f1:3b:18:4c:0b:9c:31:
a6:93:1f:e5:90:c6:df:87:51:9f:85:a0:9b:e3:41:b8:4e:f9:
4c:b8:d1:4d:82:3d:65:40:cd:22:fd:71:d7:8d:dd:77:6a:92:
45:b0:d8:96:54:86:66:89:10:72:d9:18:9a:42:0d:d9:66:85:
24:ea:2b:d3:0b:2e:95:ad:2a:76:56:33:e4:dd:f2:55:d5:9d:
17:bf:8b:c3:2a:0c:66:5f:db:97:c3:4a:e5:2b:f0:ba:bd:e1:
e2:71:73:c3:bb:64:0a:3d:93:c9:6f:bc:2d:89:6c:a6:ef:14:
2a:0b:a0:51:f0:50:83:15:de:aa:cf:0f:33:71:68:53:c3:8e:
5c:ac:07:fb:d5:a4:ad:37:7a:14:5c:4b:8b:3a:0d:c1:4a:e0:
33:a8:b0:a6:0f:e1:b4:bf:f9:c7:90:99:b5:5b:a6:89:72:99:
30:ce:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:33 2026 by rpki-client