Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: vzB3i3i7OebYc5zwQpq/A26BWAeTv7KJxLNGUuwHpeA=
Subject key identifier: FF:D8:FF:F8:9A:3F:D2:19:E2:5F:52:74:A9:16:FC:52:2D:08:DD:71
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A002F006521C1A5D2F452214350D82F4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1A06
Signing time: Sat 15 Aug 2026 01:01:19 +0000
Manifest this update: Sat 15 Aug 2026 01:01:19 +0000
Manifest next update: Sun 16 Aug 2026 01:01:19 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: KyTuFNorMZzA/kVF/FbG94ec1r8a5/Chc5OOrFl2NEE=)
2: WeJgs7A95jwqtwLgB758IcXv4EU.roa (hash: 84hLdtwmT7VOnkUt9Z3ak3sP5MNYReF+bmVuaSuUp4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:06:52:1c:1a:5d:2f:45:22:14:35:0d:82:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Aug 15 01:01:19 2026 GMT
Not After : Aug 16 01:01:19 2026 GMT
Subject: CN=ffd8fff89a3fd219e25f5274a916fc522d08dd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:0b:82:db:9c:a8:b0:6a:5f:3e:f9:cc:ee:
cd:dc:f6:4a:6c:3e:c9:0f:82:78:76:91:fe:da:db:
87:90:4f:f5:eb:ea:59:f7:cb:e7:07:a2:2f:81:f7:
37:e2:60:66:ab:29:56:25:cb:08:d0:30:32:41:35:
2b:d1:96:db:e1:1b:73:78:91:7c:97:cd:0d:45:e7:
ea:54:57:ab:cf:dc:e4:a1:75:fb:c3:15:a9:2b:46:
fd:a1:b3:df:4e:8d:32:73:e6:e1:f4:bc:9f:4c:89:
84:79:3d:df:5d:1a:c3:fb:7a:7d:8c:14:22:1d:80:
26:c9:e3:83:9c:e3:3a:cf:6f:43:72:c8:ba:6e:10:
a1:53:67:4f:53:df:ac:24:57:d8:28:fd:06:7d:dc:
99:27:1f:9f:b4:ce:bf:8e:2c:69:a8:ba:8d:0e:25:
83:f8:27:f3:c8:47:9c:30:ec:9e:82:df:2d:42:41:
b9:e9:e2:b5:ea:bf:ca:eb:c3:85:dc:f0:d3:ed:62:
94:0b:9f:07:63:52:bc:e4:ac:cb:92:25:f2:24:9b:
b4:06:7c:d6:b5:aa:04:83:0e:00:ed:4d:d5:ae:f5:
12:d4:70:6d:7a:40:5e:e4:2a:b2:93:51:2a:08:42:
d8:63:1a:ec:a4:c1:8b:b9:8e:54:d1:b4:57:f6:56:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:FF:F8:9A:3F:D2:19:E2:5F:52:74:A9:16:FC:52:2D:08:DD:71
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:99:2d:c0:d0:bc:59:99:79:d9:be:ad:0b:5d:cb:c8:dc:49:
d2:67:9f:49:ff:3c:95:80:c3:22:b4:ad:c1:9a:fa:18:ee:6b:
98:52:81:6a:6b:13:e8:f7:f6:67:12:5b:e6:d8:27:4b:91:e2:
80:07:40:b9:20:36:7a:d9:67:9b:53:ed:5d:98:e6:f1:42:ca:
1f:90:97:be:e2:f8:5e:ed:d4:43:5b:b1:88:8c:41:19:c1:63:
30:b3:15:1d:a1:28:a3:b7:ff:56:c7:eb:62:49:ca:75:64:3f:
92:b9:87:14:ee:20:d0:ca:de:5f:50:5f:b3:7c:84:98:01:c4:
94:8a:dd:67:d8:33:35:52:b2:81:9f:25:7d:aa:b9:d1:20:6c:
96:6d:93:1e:94:77:b1:44:09:33:16:a5:d7:12:a6:9d:8d:84:
d9:38:50:3f:94:cc:0d:ff:f1:dd:99:4c:c1:60:83:8d:59:ed:
ee:da:92:19:8b:ab:44:2c:bd:e8:69:a4:a1:e0:97:a0:b7:c5:
8f:f8:26:a1:b1:75:49:2e:42:84:4f:a5:aa:32:d7:97:42:40:
ab:7a:7e:10:f7:eb:d4:5f:c8:42:29:e5:9e:9a:1a:88:ee:a9:
ff:07:27:8b:34:2b:26:e3:59:33:72:d2:9b:9a:a3:37:4d:3a:
d1:2b:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:42:54 2026 by rpki-client