Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: gcgewkL4nj7W9P3/USzGOd/76a/Sy+N3dK2PoAgqL6g=
Subject key identifier: 5A:2B:B6:CB:95:61:86:D0:82:A5:0C:1E:82:A0:72:1A:CB:31:21:7B
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 01A13DB7CFA499804D6C1A3153513E71A5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:18 +0000
Manifest this update: Thu 15 Oct 2026 04:00:18 +0000
Manifest next update: Fri 16 Oct 2026 04:00:18 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: DE1W+BXmrUAAwvVhUzyvyIjeCJqCHcHsBgb891bZPrI=)
2: BQzh2z0KThYiq9nldvTFN7xr1hY.roa (hash: kQeadxjS7hkE7Ea7E7epq7OwwMLIVC/GLGRRKCK52Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:cf:a4:99:80:4d:6c:1a:31:53:51:3e:71:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Oct 15 04:00:18 2026 GMT
Not After : Oct 16 04:00:18 2026 GMT
Subject: CN=5a2bb6cb956186d082a50c1e82a0721acb31217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:60:68:4b:c5:07:76:75:2c:c7:08:fc:93:
ff:1e:8b:34:a6:28:63:79:7f:61:25:3d:7a:ef:9a:
65:f8:d3:b7:57:9d:fb:aa:d1:66:05:de:0c:bb:e4:
2a:83:43:85:e4:4f:26:50:6c:d6:de:25:35:39:a8:
84:4a:39:bf:cd:d1:60:77:c9:f1:0f:22:67:4a:dc:
ca:a0:8b:bc:70:c8:f2:bc:ac:e6:54:da:d8:11:8c:
1e:ed:4d:0c:7a:83:fa:58:8f:d5:6d:9b:b6:3d:a7:
34:bd:78:41:51:fe:00:21:4b:6a:82:5c:65:43:c3:
25:ce:e3:74:06:9b:a3:e4:a7:0d:fb:68:ed:a4:66:
6c:c5:e5:be:7f:3d:1c:78:a0:3c:c0:f3:51:76:95:
c4:37:2f:3e:08:b1:da:62:40:e9:2b:d3:02:a1:61:
5c:35:6b:e9:d7:ae:46:a5:52:7c:ae:11:22:5f:82:
21:3c:a0:ca:9f:27:03:4d:fb:f5:79:fe:39:ab:6e:
e3:39:8b:ab:9a:5c:ba:29:4f:91:c0:ae:af:db:c8:
2d:a4:0a:61:3b:a8:91:6e:59:8e:17:3d:a9:3c:ca:
36:89:9a:c5:b2:d3:a7:69:6c:a2:4a:65:f8:76:2d:
31:f5:02:f7:a7:8a:af:a5:99:78:5d:93:b8:01:51:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:B6:CB:95:61:86:D0:82:A5:0C:1E:82:A0:72:1A:CB:31:21:7B
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:42:41:1e:79:da:21:74:f6:e8:e7:53:0d:1d:7e:09:00:10:
1f:2e:88:29:68:41:7a:b2:11:1a:9b:91:85:3a:65:58:04:b6:
18:67:9a:73:27:f9:5b:fe:2c:0d:1a:d1:6e:b4:de:79:50:48:
65:e3:58:97:b3:db:3e:77:c8:98:3d:08:c7:50:64:74:56:57:
04:24:d0:b0:32:80:86:48:04:85:86:1c:c4:0d:db:5a:d3:b9:
b8:ab:f7:9b:69:c7:e9:1c:d3:83:94:48:cf:17:87:1c:96:56:
d1:31:e6:36:61:a4:b6:3f:25:a9:be:ec:e0:f9:cf:a1:51:11:
34:3e:25:fc:04:f7:cf:d9:ce:db:dc:24:5a:22:fa:36:44:ed:
e7:32:8e:2c:a6:ea:18:30:4f:84:b7:de:49:29:40:56:6e:7d:
36:ac:37:d5:7a:b4:75:c1:4e:0c:ab:16:e7:92:8c:f0:5e:da:
31:c6:81:74:96:03:83:c2:eb:29:62:77:89:e5:1e:c2:dd:a2:
08:11:98:99:02:c3:3d:9e:d1:85:1e:fe:06:1f:66:91:20:03:
bd:a2:c8:f7:e9:52:9e:c2:2d:a0:9c:28:9d:dd:9c:63:bb:f2:
85:66:ec:27:28:23:e0:dc:cf:1f:b1:40:66:dd:d7:87:9f:99:
b4:f9:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:04:07 2026 by rpki-client