Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: 6b/76nnSGnPhN9KXtUNXrenwbad/XWHqRJtKXHGDj5s=
Subject key identifier: 1F:62:5C:80:05:29:B0:91:99:37:28:5E:7F:61:E3:22:6F:6B:C2:3B
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019D382DE3F6C6E9D882B150A1C146744159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: swhZLC6T/x3xM62hiloWwpIbDJNrh+K4Zvrc6Zc5J0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e3:f6:c6:e9:d8:82:b1:50:a1:c1:46:74:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=1f625c800529b0919937285e7f61e3226f6bc23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:27:76:b7:5a:ca:61:5a:32:ba:50:6d:49:
2a:48:51:b4:86:7b:ff:05:cc:9e:52:44:33:3a:aa:
72:19:e1:7c:5f:dc:c6:92:1c:d4:6f:8c:e3:45:e7:
c8:fb:23:f0:26:8f:49:84:8b:a1:7e:7d:be:2d:48:
b5:6a:53:a6:4f:1c:db:ac:16:1d:34:dc:65:81:e6:
c2:99:ae:e1:7c:6b:e0:2c:bb:dc:10:63:da:6f:7a:
e5:33:d2:63:61:09:3d:99:9f:53:b4:aa:c1:86:a3:
bb:51:f7:aa:61:4c:57:b5:41:1e:26:48:4a:4d:1e:
45:79:05:c5:3f:32:ce:a6:82:11:4e:72:f0:09:4d:
17:15:9c:21:d5:2e:46:f6:f2:b0:18:f6:11:fe:56:
13:70:57:3e:b1:60:1a:66:61:79:26:c4:d2:ef:86:
d1:a3:05:24:94:a4:89:f1:cf:8f:27:28:57:96:3d:
74:cd:8d:1b:84:40:6b:7a:b7:54:84:b1:bd:cb:10:
72:0c:02:99:b1:23:d3:17:44:76:97:3e:30:8e:4f:
4c:f9:26:9a:a3:4b:da:06:6f:9e:40:c9:f3:b5:b6:
b3:e9:ed:21:9b:e9:cd:d1:87:33:9b:b4:a0:86:f9:
e9:98:d3:1e:10:eb:c2:c4:2c:c6:1f:fe:5c:c8:cc:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:62:5C:80:05:29:B0:91:99:37:28:5E:7F:61:E3:22:6F:6B:C2:3B
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6e:e1:4d:72:84:69:2a:ba:90:a2:a4:08:7b:7b:8a:1a:0b:
4d:fe:76:70:91:d5:04:b9:96:78:1c:e8:ad:21:c5:d2:91:1d:
42:b0:02:35:30:48:f1:c4:82:85:7e:04:3d:f0:0f:44:55:02:
fd:dd:41:23:fa:84:04:d6:12:b3:19:36:fd:39:15:c8:8c:1d:
2c:d0:39:b3:59:c8:39:e3:af:12:33:4b:c3:bc:a0:ab:d7:37:
f3:ac:48:9a:98:02:5b:61:51:42:bc:86:9c:9f:12:a8:0b:44:
f2:25:2d:6a:9b:28:c3:d0:e3:5f:c2:aa:4c:cc:4d:fe:70:1d:
92:ab:15:fb:6e:e6:74:57:f3:ff:a2:35:68:d4:28:9a:4c:54:
13:8d:ad:e1:fa:a5:df:17:fe:b9:3b:57:5f:42:53:94:96:0a:
d9:3c:6e:aa:7f:87:d6:fd:80:0f:46:2f:d1:48:f6:6e:ad:a9:
b1:a9:e3:eb:d8:a9:d1:1d:18:02:77:e3:e7:52:2d:cb:e8:71:
0f:9e:84:b0:c6:fe:1a:6c:6a:7a:a1:4a:b8:35:21:21:47:6a:
cb:e8:4d:35:de:a1:0f:7b:f3:47:7e:44:ba:f3:a8:a8:c2:e8:
ce:c9:a7:b9:fa:d2:94:4e:50:45:5e:9e:6b:3c:0f:8f:86:8f:
37:be:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:39 2026 by rpki-client