Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: HFE8lc/kimR0NonPQHWmzSqOwITbXAWzx39Ug1z0yeU=
Subject key identifier: 01:27:E0:AC:E5:11:88:14:49:FC:B5:2D:61:3B:C5:A2:F4:6C:01:B1
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 01A08BD5F0D15D9119247927E90186343981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:00:48 +0000
Manifest this update: Thu 10 Sep 2026 15:00:48 +0000
Manifest next update: Fri 11 Sep 2026 15:00:48 +0000
Files and hashes: 1: iTdbSRkeeUov9QjxN4mvAn9ldlo.roa (hash: tg/DcKEQ9TahkTXZCbdJ5Aa1YXNL0sEz+WPlApm58zQ=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: YFoFhI2VNAT3KCnMHXba9XAb7wfLxPYid4UMsvYFgVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f0:d1:5d:91:19:24:79:27:e9:01:86:34:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Sep 10 15:00:48 2026 GMT
Not After : Sep 11 15:00:48 2026 GMT
Subject: CN=0127e0ace511881449fcb52d613bc5a2f46c01b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:90:2a:e0:49:2a:33:b8:c3:81:1a:6c:f2:
79:65:1d:85:67:8a:21:e9:91:24:0a:13:93:a9:1f:
bf:2b:88:a6:a6:d1:df:48:1d:5e:18:d4:6c:7a:b1:
2b:32:fa:b9:30:df:9e:29:67:44:94:ab:be:96:76:
50:a3:ef:5b:fb:39:57:d7:39:1e:76:94:f0:ae:3c:
90:66:4f:bd:21:e7:86:16:fc:64:d7:90:4d:90:e9:
2e:b6:61:8e:db:e2:c2:05:0e:03:c6:38:3d:5e:48:
07:f8:01:35:26:d3:10:de:be:55:87:2a:5b:e4:da:
de:a4:35:35:02:ec:20:cf:77:7e:b2:4f:75:f6:b4:
ed:3d:d5:16:1e:e3:b2:0c:ff:ba:22:e0:46:a4:76:
6c:75:2f:40:5b:ce:41:7c:64:3e:fb:fe:ef:0a:80:
84:65:5c:97:e9:1a:3c:9d:be:97:59:98:23:2d:01:
c4:e9:07:b1:28:88:a3:6e:6d:e4:b6:fb:2b:8d:8f:
c8:e1:9d:20:19:55:2b:0b:6a:02:66:45:e2:24:40:
7b:e0:0f:7b:7d:95:56:0e:8f:1f:88:0d:83:89:68:
78:85:0b:c0:01:ba:ce:99:ce:ec:6e:4f:f0:fd:bb:
94:94:ac:14:fa:32:79:9a:48:c9:55:da:68:d1:01:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:E0:AC:E5:11:88:14:49:FC:B5:2D:61:3B:C5:A2:F4:6C:01:B1
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:97:2a:39:ef:7e:51:5c:5a:f9:52:ea:0b:fa:16:2b:3b:
f7:9a:9d:29:50:0b:9d:f0:ec:45:cc:75:a7:78:e7:09:cb:9c:
c0:9e:8b:4b:b7:db:42:a5:12:96:e3:07:b4:65:52:3f:1a:90:
3b:b2:5d:08:77:7a:6c:13:68:f1:72:97:7c:0f:17:9d:54:b3:
e0:bb:be:c8:0c:d4:f3:7f:c8:29:27:dd:99:41:79:88:97:ca:
fe:ad:ae:be:61:e7:0b:fe:fe:24:33:34:01:a5:cc:09:e9:e0:
89:e8:16:f4:50:8b:43:d5:78:7e:af:26:39:0f:f5:64:58:c6:
3d:bb:bb:90:2e:c5:1f:e3:55:89:a3:00:e7:b9:21:ee:73:9e:
cb:19:93:4d:4a:cb:53:d6:bf:a5:7b:8d:cb:51:2d:91:45:ff:
e6:c0:f7:c0:7f:f9:e2:45:64:fe:f2:6a:e3:7d:a5:d7:02:9d:
5e:12:7f:c6:bd:49:a8:08:b8:25:b2:d3:b9:f6:e6:40:c6:ae:
00:a1:13:51:82:24:d1:e6:14:1c:13:cd:fd:be:a3:1b:19:6a:
85:e8:5c:e5:eb:ee:b7:2d:d5:93:91:1a:90:6b:3e:82:64:3f:
a7:ac:18:6f:09:97:c5:a7:d2:b9:86:ff:ab:bb:d4:81:13:af:
ba:2f:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:56 2026 by rpki-client