Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: 2EHV0uZHjEbvmzcdEvlVFJt2TmsEqT0NsOCsNXlk0V4=
Subject key identifier: 0B:73:78:90:AA:8C:08:4A:6F:F0:0F:52:F7:4A:7F:4F:2A:EE:29:A1
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01A0C8C6193CF11999DE87B00E8B53DC2B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 11:00:20 +0000
Manifest this update: Tue 22 Sep 2026 11:00:20 +0000
Manifest next update: Wed 23 Sep 2026 11:00:20 +0000
Files and hashes: 1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: ePF3oUt9D1KtKldX4c2eEo4tXj1rdiUIfriECv+Y2P4=)
4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:19:3c:f1:19:99:de:87:b0:0e:8b:53:dc:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Sep 22 11:00:20 2026 GMT
Not After : Sep 23 11:00:20 2026 GMT
Subject: CN=0b737890aa8c084a6ff00f52f74a7f4f2aee29a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:b8:1b:a4:b1:f1:7a:1c:7c:f0:a4:f4:8c:
3f:ee:f3:9e:75:27:b2:ee:c4:7d:c3:d0:78:18:89:
eb:0a:68:47:94:f4:11:e6:8d:46:e4:f6:be:28:eb:
e5:77:31:2c:51:f3:0f:1c:2e:08:1d:18:39:77:64:
bd:a0:75:55:01:51:74:7a:cf:42:bb:30:39:f2:61:
1e:bb:65:33:53:b1:e1:11:38:17:08:f2:cf:67:68:
cb:56:6f:c7:29:c4:a7:20:8f:3e:cd:ff:66:2e:d9:
b5:f3:8d:2c:4f:f4:0a:2e:fa:5f:bb:25:4d:d3:13:
76:a9:37:ab:19:d9:07:ab:40:06:64:cf:6b:65:0e:
da:17:43:3c:64:07:98:fd:49:80:7d:41:29:ba:95:
39:df:c6:2f:d9:b4:2c:29:94:88:06:01:13:64:df:
7d:08:2e:d3:d2:f7:94:98:76:e2:97:84:1c:fb:f2:
78:51:01:14:03:5b:9a:95:62:b0:b6:84:c4:4c:75:
c6:2b:14:45:ca:de:0d:30:56:a6:5f:36:49:9c:bd:
86:d1:78:07:f5:e2:fa:84:eb:36:b5:0b:79:d7:2f:
ae:77:09:20:cb:d9:02:d3:70:10:67:b6:c1:39:cd:
ee:28:d4:4e:01:f7:7f:79:65:84:73:d2:75:e4:a2:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:78:90:AA:8C:08:4A:6F:F0:0F:52:F7:4A:7F:4F:2A:EE:29:A1
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:20:00:fe:de:17:20:3d:ad:85:2b:a4:20:93:f2:b0:ab:
65:a5:6f:09:1f:e2:78:19:73:51:32:a5:b2:8d:68:fb:6e:26:
d6:ec:73:9e:09:e1:0f:f2:e2:9a:a9:eb:b0:0b:d1:69:2c:1a:
e4:6d:3e:fa:69:c9:19:93:29:d5:81:db:d8:f1:9d:f1:dc:b8:
a0:58:6c:86:07:a2:e0:ea:b4:48:1f:3e:87:ac:bb:cd:ce:af:
77:54:be:e3:7f:40:b3:28:8d:c6:7b:35:99:1c:aa:76:df:35:
d5:df:99:dc:b3:34:c0:2e:e9:66:4d:e3:c8:44:11:1a:c0:39:
c3:32:8e:58:39:4d:6e:2b:5c:e6:9b:1a:9f:d8:9b:c6:3b:b5:
a4:63:d3:ca:19:d7:67:85:db:95:38:59:16:cd:3a:c6:e0:56:
3c:f3:23:01:ca:5b:a2:b0:c5:58:39:92:c7:a0:47:cc:e7:7f:
08:6b:d9:ee:c0:da:f1:9d:b5:a0:af:90:fc:5e:d5:5c:94:a3:
89:2f:8a:b7:ab:b4:fe:26:25:77:9a:88:f9:4b:cf:72:70:65:
7f:55:33:41:04:86:53:64:71:2e:33:cc:28:a2:0d:1a:b7:da:
c3:e8:2c:a9:89:4e:3c:2e:cb:b0:0a:95:d8:12:c6:6e:64:38:
7e:b3:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:32 2026 by rpki-client