Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier: /p3EwbxPBiu++7NQjfC2uWVAi6YPUArtVw79HOGcHY0=
Subject key identifier: EF:52:B1:02:E9:4A:47:FF:92:64:37:76:17:ED:F7:91:49:17:47:40
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial: 019CAB3406D55120D91AFEB59EB2E8774307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number: 0D78
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: KW7umHVJ56QoDNMnSiTEYaBt9H4.roa (hash: WMo2Ql6XzExg3Mapj6piiDG4OCCwUTpcEwMdawtps4g=)
2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: /WgKwttgYfhwaocpdA2OCLWOGSEsNaagub9IGv4U0jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:06:d5:51:20:d9:1a:fe:b5:9e:b2:e8:77:43:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=ef52b102e94a47ff9264377617edf79149174740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:46:2b:ec:28:53:0b:2c:5f:a6:df:5c:81:
79:bd:39:f7:c3:b6:a8:7d:9b:b1:64:93:6d:d7:ce:
b0:1f:62:30:3b:53:9f:93:c6:6b:22:86:30:11:ea:
f1:d8:98:99:aa:39:27:93:96:50:bc:28:11:77:53:
73:ec:79:da:70:8c:9c:a7:49:65:b8:03:5f:60:12:
df:25:2d:de:6e:6c:8e:a9:aa:40:d8:cc:76:e8:b4:
dc:11:a5:91:69:f8:62:69:e4:55:dc:c4:d4:3b:eb:
a7:39:4b:6c:c7:e5:e4:93:60:1b:c4:72:ff:d0:e2:
cb:88:e4:71:55:a0:b6:da:b0:bb:53:be:34:79:a3:
d8:8a:5c:be:4d:b4:63:9e:70:e0:97:47:9c:a2:8c:
4c:05:37:a3:67:a8:81:db:54:bb:ef:4b:0f:7f:0b:
12:f9:7a:74:19:94:aa:3c:07:1d:1f:c5:b6:1a:85:
16:e6:7f:be:6e:35:9e:0b:22:c0:2f:28:a2:ac:72:
d5:10:ae:a1:97:a1:53:ba:56:98:1f:86:cc:7d:33:
b6:2b:74:f4:5e:40:fc:25:50:95:62:c3:ac:15:54:
3d:b5:96:4c:41:42:11:eb:a3:88:5c:e0:9d:23:6d:
b8:20:10:dc:67:18:4c:a8:a4:41:77:12:f4:25:a7:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:B1:02:E9:4A:47:FF:92:64:37:76:17:ED:F7:91:49:17:47:40
X509v3 Authority Key Identifier:
keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:93:a4:a0:ed:ce:5d:69:70:d2:82:dc:07:e8:bf:54:e3:
e0:21:fb:e1:92:e8:eb:ed:24:b2:50:78:e7:d7:a7:cc:6d:75:
29:4f:1f:9d:4f:06:e3:77:d5:29:4c:6d:01:e6:0b:c5:c5:ae:
63:8d:26:88:72:46:f0:3f:47:d1:bf:dd:54:32:33:49:f7:26:
b8:d1:78:04:f3:ce:16:56:64:91:e4:71:5e:d1:0d:e5:48:97:
67:62:c4:15:2b:b5:31:20:80:43:e1:d5:d4:0c:6e:09:2e:fa:
fb:db:b3:fe:dd:54:ad:bf:df:0a:c4:c0:3a:f1:e7:d8:fa:46:
e7:5b:35:a5:77:90:8b:b1:f5:ff:ad:2d:d2:ba:e8:60:b2:53:
03:39:59:6b:5d:7e:85:6e:4a:1e:00:89:6d:ef:89:7b:21:8c:
c6:ed:96:50:76:bd:26:d7:54:7a:fc:83:19:a0:fd:94:26:c7:
5c:16:26:45:14:d4:52:ef:e0:41:92:ce:1c:48:05:1e:46:14:
c0:5e:2b:49:e2:e8:86:ee:7f:18:e9:c0:26:da:d9:72:fc:9e:
5c:2b:c7:62:8b:d5:9b:b5:39:2d:d8:78:ec:d5:13:a1:eb:b5:
fb:7d:62:89:e3:44:6d:ef:13:1e:f4:45:7e:ef:ef:8f:1a:45:
92:cf:5c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAbVUSDZGv61nrLod0MHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1
OWY0YmYwHhcNMjYwMzAxMjEwMDM5WhcNMjYwMzAyMjEwMDM5WjAzMTEwLwYDVQQD
EyhlZjUyYjEwMmU5NGE0N2ZmOTI2NDM3NzYxN2VkZjc5MTQ5MTc0NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7NGK+woUwssX6bfXIF5vTn3w7ao
fZuxZJNt186wH2IwO1Ofk8ZrIoYwEerx2JiZqjknk5ZQvCgRd1Nz7HnacIycp0ll
uANfYBLfJS3ebmyOqapA2Mx26LTcEaWRafhiaeRV3MTUO+unOUtsx+Xkk2AbxHL/
0OLLiORxVaC22rC7U740eaPYily+TbRjnnDgl0ecooxMBTejZ6iB21S770sPfwsS
+Xp0GZSqPAcdH8W2GoUW5n++bjWeCyLALyiirHLVEK6hl6FTulaYH4bMfTO2K3T0
XkD8JVCVYsOsFVQ9tZZMQUIR66OIXOCdI224IBDcZxhMqKRBdxL0JacyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9SsQLpSkf/kmQ3dhft95FJF0dAMB8GA1UdIwQY
MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt
NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5
LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIyTpKDt
zl1pcNKC3Afov1Tj4CH74ZLo6+0kslB459enzG11KU8fnU8G43fVKUxtAeYLxcWu
Y40miHJG8D9H0b/dVDIzSfcmuNF4BPPOFlZkkeRxXtEN5UiXZ2LEFSu1MSCAQ+HV
1AxuCS76+9uz/t1Urb/fCsTAOvHn2PpG51s1pXeQi7H1/60t0rroYLJTAzlZa11+
hW5KHgCJbe+JeyGMxu2WUHa9JtdUevyDGaD9lCbHXBYmRRTUUu/gQZLOHEgFHkYU
wF4rSeLohu5/GOnAJtrZcvyeXCvHYovVm7U5Ldh47NUToeu1+31iieNEbe8THvRF
fu/vjxpFks9cIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:11 2026 by rpki-client