Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: M8JsspkL2CjLSVsk6iGGNPe7GYqH9w7GVBHKrA8e85g=
Subject key identifier: 56:8B:C5:BE:13:00:26:BA:30:FB:57:7D:57:E0:58:59:8A:C5:C5:6A
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A12C2008CA834B6B827E1C880DE70C07CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 18:00:59 +0000
Manifest this update: Sun 11 Oct 2026 18:00:59 +0000
Manifest next update: Mon 12 Oct 2026 18:00:59 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: uPlxiNBX9C2crM8NmYqRNoJy/yP9MFK5tv/55gJOP84=)
2: odgvgX5OKnBuqpCEQFyifLcuH4A.roa (hash: TEyEnNRYzz8D2aikUvWtRtpqlSUUtFDnA9JCdB95CsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:08:ca:83:4b:6b:82:7e:1c:88:0d:e7:0c:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Oct 11 18:00:59 2026 GMT
Not After : Oct 12 18:00:59 2026 GMT
Subject: CN=568bc5be130026ba30fb577d57e058598ac5c56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:f3:d1:38:10:bb:1a:25:61:1b:85:30:d4:
49:c7:1f:7f:d8:e5:d7:e0:c3:d0:59:f0:b0:c9:7e:
70:f8:72:42:43:6e:c0:85:ec:4b:a0:19:bd:2c:cc:
e3:f6:ee:f9:70:54:eb:b0:4f:69:40:4e:f8:04:e0:
ef:5d:dd:a9:ed:60:fd:cd:10:12:2a:bf:0c:29:24:
5a:7b:66:92:80:43:b6:38:c3:65:23:fd:a9:44:fd:
39:03:9f:53:c4:ae:43:fc:bb:29:8c:71:af:44:8d:
bc:8f:db:20:4e:a3:6c:e5:dc:d4:12:a6:aa:35:0e:
ee:23:67:87:e8:4d:f5:9c:ad:6e:8e:8f:49:cf:52:
61:31:ae:37:b1:d7:1b:4e:e1:a3:5d:31:35:06:23:
82:d3:6f:af:16:8f:b7:7c:0f:15:cf:65:2e:ce:06:
e1:d2:f9:9c:ce:63:27:6d:03:22:b4:ea:98:16:69:
90:d5:28:6c:e0:92:18:55:c2:55:7a:b2:ea:c0:a0:
a9:f0:e8:60:e5:74:2e:01:59:2d:18:f2:e6:1d:f8:
af:19:8f:9c:89:aa:64:7b:83:c0:7a:3c:d1:a8:1c:
2b:ad:83:5f:1e:9b:d0:0f:61:16:ad:9a:7c:13:bd:
59:21:48:71:84:1c:4e:84:4f:2f:91:1c:69:a7:31:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:C5:BE:13:00:26:BA:30:FB:57:7D:57:E0:58:59:8A:C5:C5:6A
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:95:51:31:fe:3e:50:cd:41:40:80:66:1e:5b:28:ca:f2:
ea:7f:df:05:55:d1:84:88:53:eb:ab:44:18:48:a3:3d:db:08:
44:fb:a9:6f:06:25:3f:c9:eb:3b:8e:cd:e3:e0:1e:f3:b2:df:
db:0c:73:86:84:2b:96:76:82:e5:04:77:47:ed:44:f7:fc:6d:
af:ab:00:6f:b2:ed:38:2c:ce:b9:a6:44:65:39:d9:e7:43:6e:
4e:8c:a6:32:2a:32:4c:21:2d:1c:ba:db:e3:78:52:d2:cd:40:
19:eb:93:74:b1:85:76:1d:d6:83:75:0d:f5:2f:7c:23:f5:34:
ed:f2:de:c9:d2:e7:c3:8d:5b:c9:b0:3c:82:d7:89:7e:a8:8f:
d7:e9:43:1e:28:ce:ab:19:65:e8:d3:76:42:8a:68:d8:30:b0:
76:7a:be:99:78:a7:69:dd:6d:9c:b6:7b:d9:6d:ac:5f:1f:8e:
ca:13:36:23:ef:c8:1d:b7:69:40:1e:53:c1:66:2c:59:7c:1c:
d9:5f:42:65:ce:dd:45:90:96:ae:53:f7:58:15:9a:fb:cf:65:
de:d0:2e:bf:fb:00:b6:c5:16:64:d0:ed:4e:2f:92:11:ec:13:
60:7a:b1:1f:75:a3:7b:70:e6:c1:1b:ca:c3:76:d3:01:79:83:
e2:8d:65:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:29:30 2026 by rpki-client