Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: S25u9q8fLIKEvwR/9ljl+h5m+8A5kkUJQ1Lgta+HCuY=
Subject key identifier: 12:90:2F:C1:34:92:E9:7D:4C:09:72:BB:61:E3:A7:57:3B:C4:27:86
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019E299497CCA19010F9A175BCD8F0D4EADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 03:01:04 +0000
Manifest this update: Fri 15 May 2026 03:01:04 +0000
Manifest next update: Sat 16 May 2026 03:01:04 +0000
Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: xwlgGwqbbStL2GuPmUhD7pRPxq8VAbCVSaBjPWZozaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:97:cc:a1:90:10:f9:a1:75:bc:d8:f0:d4:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: May 15 03:01:04 2026 GMT
Not After : May 16 03:01:04 2026 GMT
Subject: CN=12902fc13492e97d4c0972bb61e3a7573bc42786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:14:ed:44:e2:ae:79:14:ce:22:d9:1a:40:
7f:4e:43:67:23:d3:fa:a2:c0:5a:79:49:86:9d:6f:
25:0e:83:ba:b3:65:e4:cf:24:5f:3c:5d:75:12:20:
f7:6c:6f:18:54:72:6b:66:73:37:d3:a1:81:21:1e:
2b:71:c6:a5:a9:6e:82:90:9d:ca:ff:f9:90:3d:4c:
45:5e:c8:93:b3:b7:36:65:6d:61:5a:c9:e1:ad:9e:
72:2c:d4:aa:24:d4:a3:15:16:71:86:af:96:bd:58:
46:d0:64:d1:0c:48:f0:a7:e2:96:c5:66:9d:b2:d8:
35:97:b9:68:7c:89:0e:06:7c:ba:27:1d:f0:da:53:
e9:5f:a1:0d:36:4f:6a:6f:27:28:a3:8c:87:5f:d2:
b5:c1:68:6d:29:56:c1:d8:80:eb:2b:c5:b0:01:0e:
6d:ca:c6:d5:0f:b6:d8:aa:25:00:90:75:4e:90:08:
d1:00:10:de:05:27:1d:eb:8d:bc:44:40:33:b7:d8:
99:8b:ed:97:d4:f4:e9:b8:c5:dd:b1:99:78:68:5b:
7b:57:60:51:a1:2b:8e:a8:74:8a:26:5a:4b:86:6d:
6f:ff:68:e8:3b:67:27:33:0c:d4:2c:5e:3d:2a:78:
71:95:cb:12:b7:49:73:80:22:f0:03:d1:6d:75:0a:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:2F:C1:34:92:E9:7D:4C:09:72:BB:61:E3:A7:57:3B:C4:27:86
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:af:dd:c2:95:f1:ea:89:fb:93:fc:95:02:b2:95:21:05:2f:
16:8b:02:07:d5:eb:da:c3:ef:5e:5e:3d:05:60:48:16:b5:26:
fb:cf:75:f6:a5:7f:ad:0f:f3:d3:1d:5b:27:ea:f6:1d:c8:e4:
dc:e4:75:26:25:d5:69:1d:8c:f1:65:6c:09:7b:32:09:57:83:
1c:b2:6e:81:c0:7c:27:e0:28:ea:c3:82:a8:34:9b:cf:93:77:
87:08:e2:86:ec:29:21:93:f0:90:3e:ca:65:d1:18:e7:87:eb:
85:b2:7a:1f:0e:5f:b6:7a:de:12:25:26:7c:f3:e4:60:f8:a8:
54:c1:3f:b9:df:04:48:b2:f8:b9:d5:b6:bd:78:2e:1e:0a:81:
86:39:c5:61:b5:3d:41:4e:68:50:76:cf:7d:86:33:e3:8a:eb:
fc:05:70:18:1f:78:f9:43:95:7f:d8:6e:b7:ed:74:48:1c:6a:
f5:31:71:41:f1:5f:51:c2:b6:06:5c:39:b2:aa:2b:bf:a5:6b:
1e:ad:b5:ec:7f:f1:d1:3e:b0:3e:d8:c1:f3:6b:9f:cd:b0:5d:
96:0a:bf:4a:00:1e:56:c7:2a:83:f1:c4:f7:9f:9f:6f:69:a2:
3b:0e:a7:1e:ba:5f:ae:9a:33:88:e4:72:64:00:2b:b0:f7:a6:
27:d6:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:28:23 2026 by rpki-client