Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: j5yXFB8C1z7BFOSxYKoa+k2mCR7wk2499C0WxAE8iX0=
Subject key identifier: 30:95:37:2C:9C:F7:C5:ED:E5:26:E6:49:56:40:7B:5A:7A:0E:67:8C
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 019CAE352A2B6EDE4D08BF26A659F1C26184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 11:00:45 +0000
Manifest this update: Mon 02 Mar 2026 11:00:45 +0000
Manifest next update: Tue 03 Mar 2026 11:00:45 +0000
Files and hashes: 1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: XgSjoNhsI8H4KcRA1M05B1xs9okiEDbY3/e02Nz5ejA=)
4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:2a:2b:6e:de:4d:08:bf:26:a6:59:f1:c2:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Mar 2 11:00:45 2026 GMT
Not After : Mar 3 11:00:45 2026 GMT
Subject: CN=3095372c9cf7c5ede526e64956407b5a7a0e678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:ae:32:af:21:7e:c5:59:40:74:41:a0:ab:
39:6e:3d:a5:c7:fb:dc:60:95:0e:47:9d:ac:2d:ef:
35:c1:0d:18:23:67:6a:18:70:5e:d4:f7:7c:e6:f7:
d6:d2:86:1e:44:d8:d0:97:35:cc:b0:b7:3a:8a:73:
47:1c:0e:b5:f5:3d:f0:40:e9:ea:4b:3a:a9:d4:46:
72:b7:27:33:bd:bf:d9:8c:58:58:2e:21:c7:9c:be:
2c:c3:d7:1c:1c:d1:53:21:27:5d:bc:bf:4c:6e:4c:
69:73:5b:0c:1d:6c:70:64:21:2b:c1:e6:5e:17:b0:
1d:24:7a:89:4b:93:f5:99:ab:7a:7b:cf:63:5f:81:
88:5c:17:51:6c:39:f8:44:94:e3:54:0c:5b:55:7a:
df:23:c9:01:7c:a8:32:10:8d:ea:47:f9:00:91:46:
5e:84:aa:0f:d5:48:1f:29:26:32:f8:97:6f:2d:65:
b0:55:8b:cd:04:80:52:e5:23:ba:c5:4c:f0:9d:14:
50:ce:85:86:a7:11:82:36:d9:2a:44:0d:6c:1a:98:
73:a0:3e:a5:88:39:ed:7b:16:ab:f7:5e:e6:8b:e1:
c9:49:20:6f:75:9a:0c:29:72:6b:3d:af:fe:33:df:
c3:1d:99:b5:bc:b9:03:b7:98:c6:b4:b5:91:1c:4f:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:37:2C:9C:F7:C5:ED:E5:26:E6:49:56:40:7B:5A:7A:0E:67:8C
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:45:b5:34:29:e3:38:87:ee:dd:b0:2d:40:8a:03:02:1c:
38:3d:d2:5e:dd:65:34:33:0e:8d:78:69:4b:bf:98:98:88:b0:
9b:5b:84:2a:b4:0e:6f:c9:fb:45:43:95:dd:27:fd:46:ad:0f:
9f:47:63:9f:2c:84:b8:9a:a6:8a:36:1a:93:00:77:05:aa:53:
ed:48:38:4a:70:7e:c1:ab:f1:a6:0e:ab:d8:01:86:f2:6a:fb:
52:92:b6:ed:98:fb:15:83:65:83:e1:21:80:68:d6:fc:b0:64:
e9:86:75:e0:09:64:67:4e:5e:d9:21:d7:64:1b:4d:42:8a:f8:
91:2a:5f:41:34:4e:74:84:36:50:d3:37:94:16:3d:4a:81:e7:
d2:19:e6:1c:61:cc:83:91:29:a4:8a:0b:61:da:e3:3b:33:71:
09:53:88:08:12:a6:3c:b5:d3:3b:a1:83:06:be:f3:67:e4:8b:
12:1d:8b:11:8f:78:16:76:51:5c:1f:57:89:3c:8a:fa:11:6f:
16:23:f4:89:25:41:1c:08:04:01:f6:f3:bf:ed:52:05:4f:83:
30:eb:9d:3c:03:b3:55:f9:f6:c7:3a:7d:66:56:1c:ef:a0:82:
7c:70:4b:02:e6:f4:b7:ce:5b:04:45:ad:1b:af:64:9f:86:6b:
89:3e:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:15 2026 by rpki-client