Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: +MAgm1dccfxOtRup/ARaT/SABee/OIlqqdIJ6MtwROs=
Subject key identifier: CE:0F:4D:E4:5A:65:5C:FD:BC:44:5F:5D:83:41:44:7A:A1:24:05:B4
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 019CAB342E0B97DDF8343A3407C4412FD32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 1743
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: toLmqzCRzVNJNdKtmHH8PbL7LZfgGATTlCKEHDxZPUs=)
2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2e:0b:97:dd:f8:34:3a:34:07:c4:41:2f:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=ce0f4de45a655cfdbc445f5d8341447aa12405b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:ec:1b:91:78:86:13:34:3d:df:2b:0c:3d:
68:b5:b6:d2:6b:44:82:a4:6b:4d:44:8e:49:61:86:
2f:4d:c4:d0:39:8a:af:84:cb:65:00:bc:76:b7:4d:
54:59:cb:11:8a:d9:6c:6a:2d:29:60:dd:ac:13:ef:
1f:75:41:2d:15:28:41:d0:e1:56:51:95:a1:ad:49:
4a:64:69:4f:91:10:e6:18:55:5e:44:a0:b2:a3:33:
70:7f:5e:f1:e8:e8:7d:0a:37:ba:b5:3d:87:0a:64:
3d:56:07:7e:9e:14:8a:b3:a1:f1:2c:23:12:b3:ec:
ff:0c:50:fb:62:d0:9f:7e:ae:a6:3a:66:92:82:e5:
d1:41:be:ef:bd:0a:a8:bf:e1:96:5a:99:78:36:1f:
88:97:44:8d:f2:22:15:fe:97:a8:bb:02:5b:81:84:
95:ae:02:00:17:38:3e:a7:5d:2a:dc:35:a1:4e:3a:
7d:08:3a:08:af:89:4b:64:2d:11:30:23:63:89:46:
db:65:6a:ab:58:df:2f:ba:40:09:4b:40:b2:a8:d8:
b5:aa:f6:94:70:cd:4a:66:5d:ae:a6:a8:15:09:5b:
30:c1:d6:1b:03:38:f9:18:49:e0:63:c7:fc:b7:0f:
42:f9:8a:a3:e0:69:a0:88:87:77:fd:dc:e7:0d:b9:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:4D:E4:5A:65:5C:FD:BC:44:5F:5D:83:41:44:7A:A1:24:05:B4
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:cf:60:06:2b:64:a2:a3:2c:5d:db:17:15:83:c0:43:19:
62:06:f0:a1:f1:c1:e3:35:9f:6f:87:f3:2a:6f:1a:99:88:e4:
ef:e3:db:b4:67:d9:07:5e:4b:58:1d:d5:c3:cb:b6:bb:8a:89:
6a:de:11:69:f7:86:c0:19:10:ef:e3:20:2d:3f:af:51:73:5b:
74:87:fe:e8:72:55:7c:c2:b5:37:8c:67:6f:1d:05:69:56:0c:
31:97:90:e8:7a:70:dd:4c:2f:5d:9f:4d:4d:a3:7e:eb:5e:30:
57:7a:f0:e4:52:b1:52:c2:78:1c:5e:92:87:a1:84:ce:60:09:
08:53:65:71:5b:95:80:e3:62:8e:ae:70:74:71:37:a6:59:63:
01:04:ad:10:62:bf:d1:9d:65:cd:64:16:3b:b9:ee:21:64:be:
b6:cc:ed:94:cd:60:18:6a:50:32:49:1f:56:48:bd:fc:8c:93:
92:27:33:33:fe:5d:5a:81:bc:52:ef:41:26:f2:02:c1:3d:57:
04:d1:50:f2:c2:fd:24:40:b6:39:de:1e:c4:3f:5b:b6:83:e3:
78:73:9f:9b:6f:25:23:3b:af:95:0c:5f:44:c5:dc:49:a5:09:
da:95:8f:f1:b2:a7:59:9b:ab:5c:e7:f1:87:9d:7e:66:06:99:
d2:b0:68:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNC4Ll934NDo0B8RBL9MqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0
NWIyNmEwHhcNMjYwMzAxMjEwMDQ5WhcNMjYwMzAyMjEwMDQ5WjAzMTEwLwYDVQQD
EyhjZTBmNGRlNDVhNjU1Y2ZkYmM0NDVmNWQ4MzQxNDQ3YWExMjQwNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HjsG5F4hhM0Pd8rDD1otbbSa0SC
pGtNRI5JYYYvTcTQOYqvhMtlALx2t01UWcsRitlsai0pYN2sE+8fdUEtFShB0OFW
UZWhrUlKZGlPkRDmGFVeRKCyozNwf17x6Oh9Cje6tT2HCmQ9Vgd+nhSKs6HxLCMS
s+z/DFD7YtCffq6mOmaSguXRQb7vvQqov+GWWpl4Nh+Il0SN8iIV/peouwJbgYSV
rgIAFzg+p10q3DWhTjp9CDoIr4lLZC0RMCNjiUbbZWqrWN8vukAJS0CyqNi1qvaU
cM1KZl2upqgVCVswwdYbAzj5GEngY8f8tw9C+Yqj4GmgiId3/dznDbkVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4PTeRaZVz9vERfXYNBRHqhJAW0MB8GA1UdIwQY
MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt
OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw
LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdTPYAYr
ZKKjLF3bFxWDwEMZYgbwofHB4zWfb4fzKm8amYjk7+PbtGfZB15LWB3Vw8u2u4qJ
at4RafeGwBkQ7+MgLT+vUXNbdIf+6HJVfMK1N4xnbx0FaVYMMZeQ6Hpw3UwvXZ9N
TaN+614wV3rw5FKxUsJ4HF6Sh6GEzmAJCFNlcVuVgONijq5wdHE3plljAQStEGK/
0Z1lzWQWO7nuIWS+tsztlM1gGGpQMkkfVki9/IyTkiczM/5dWoG8Uu9BJvICwT1X
BNFQ8sL9JEC2Od4exD9btoPjeHOfm28lIzuvlQxfRMXcSaUJ2pWP8bKnWZurXOfx
h51+ZgaZ0rBopA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:58 2026 by rpki-client