Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: tXjeCWiHTTm6p22eLt5rXXyVdX8cI1DXJOImpQQCCYc=
Subject key identifier: 76:B2:F9:C7:D1:A0:63:E6:4F:91:DE:A1:8A:80:6D:17:D6:7E:DB:67
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019FA74FDD9285B58C544CE8AD78FD54B4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 03A3
Signing time: Tue 28 Jul 2026 06:00:56 +0000
Manifest this update: Tue 28 Jul 2026 06:00:56 +0000
Manifest next update: Wed 29 Jul 2026 06:00:56 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: /T1ESl8hH7eXuehq9Jxi/rZirGFM7Ez/Pa4c0SiFS7w=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:dd:92:85:b5:8c:54:4c:e8:ad:78:fd:54:b4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Jul 28 06:00:56 2026 GMT
Not After : Jul 29 06:00:56 2026 GMT
Subject: CN=76b2f9c7d1a063e64f91dea18a806d17d67edb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:18:1c:89:d8:00:f0:b6:ac:af:c7:38:75:
d3:e7:33:91:1d:cc:6f:45:ea:15:e0:19:5d:f1:99:
8a:6a:a6:8a:1e:94:d9:29:7e:c3:b9:85:3c:58:68:
70:98:3b:fe:7c:f4:fe:53:1e:ab:b4:c3:c2:9a:2b:
13:ad:6c:8c:17:92:18:5a:6b:f6:cb:24:ee:ff:f8:
a5:41:ef:56:db:a7:59:d3:ad:3e:9c:12:f9:67:1c:
1d:b7:00:ef:db:e9:44:53:78:99:67:c5:92:1b:a6:
33:90:95:79:9a:ac:3b:95:82:6f:a9:ef:7f:75:6f:
03:2a:f1:10:76:bd:33:66:4d:c5:be:eb:5d:02:ac:
7f:a5:b5:29:8e:d8:36:20:c0:ef:0e:89:02:56:5a:
42:20:ac:5c:3f:86:0a:ca:c3:9c:5c:68:14:ac:9e:
3e:63:4b:48:91:75:ba:5c:0a:f0:9c:52:ef:c0:f8:
6c:21:80:54:b9:4c:45:e6:9e:34:58:4b:7c:b5:37:
8c:82:05:c2:15:6e:12:7e:e4:a1:4c:a2:18:6e:4d:
98:2f:d0:82:03:7e:85:3a:27:53:11:b6:65:75:a0:
bb:65:dc:5f:57:8f:4f:04:f7:12:24:83:8a:51:42:
8d:84:7a:88:7d:19:3e:23:c1:cb:89:86:0a:8f:01:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:F9:C7:D1:A0:63:E6:4F:91:DE:A1:8A:80:6D:17:D6:7E:DB:67
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:f6:0e:3b:e6:49:00:f3:59:f3:37:54:dd:b1:da:4e:c5:
5f:6d:56:cf:e1:59:92:e4:3b:67:97:04:8a:44:ea:4c:e7:23:
d5:31:77:d8:2f:20:84:79:d2:51:c7:72:1d:5b:56:e1:7a:d8:
be:50:d1:4c:53:41:45:c1:4b:48:5b:1e:f8:28:40:15:47:e9:
70:69:15:2c:c7:b5:c0:fc:03:6c:7b:8e:36:fa:fb:11:e3:d9:
36:64:13:e1:c5:2d:fe:66:8c:1b:e4:59:96:d6:38:97:53:ff:
f0:bc:32:22:27:cd:3b:9b:0a:be:6e:dc:ba:19:b1:a3:b6:41:
5b:4e:3e:c6:13:48:9c:91:00:29:42:aa:80:bd:d4:35:f1:2c:
d0:a1:06:0d:bd:7d:24:c1:eb:6e:34:b4:1a:c1:f6:13:5d:8d:
ca:c9:53:18:fc:cc:3f:d4:88:5d:40:1f:5e:45:16:41:42:ef:
af:a3:c6:ed:bf:54:a2:42:0c:11:dc:ae:4b:a7:4c:80:42:f8:
44:88:49:f4:90:0d:ce:81:b7:1e:8a:80:10:c6:7c:df:a9:66:
75:84:25:c1:98:fd:49:6f:fd:10:c3:b1:62:da:be:71:a4:30:
12:28:0a:2c:d3:47:e7:ed:87:82:cf:4c:67:8f:61:36:29:b8:
39:50:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:07 2026 by rpki-client