Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: ign3/soiysAvsp+nEqB0UmE1c2rcyqSdL/WtPhZFeSk=
Subject key identifier: F7:4D:D9:B5:FD:DD:98:BA:D2:3D:48:AC:D4:D7:3A:3F:50:E6:4F:A6
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 01A0C33233D6CA9BBF4A12C7DE5A4077BF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 0436
Signing time: Mon 21 Sep 2026 09:00:42 +0000
Manifest this update: Mon 21 Sep 2026 09:00:42 +0000
Manifest next update: Tue 22 Sep 2026 09:00:42 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: I4jpGsmrwOPBTgwd0rwtCrKJG0dGiWqvtdWq7YG+7pA=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:33:d6:ca:9b:bf:4a:12:c7:de:5a:40:77:bf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Sep 21 09:00:42 2026 GMT
Not After : Sep 22 09:00:42 2026 GMT
Subject: CN=f74dd9b5fddd98bad23d48acd4d73a3f50e64fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:bf:28:e1:bf:00:b8:9b:f7:7c:7a:8e:40:
31:10:c9:68:e0:fe:46:25:21:88:65:b6:0e:d1:55:
e3:3f:85:7b:c7:b7:4e:ad:be:6d:ba:4a:0c:d3:f8:
04:4a:15:78:c4:82:ca:15:d0:41:a5:50:60:f6:23:
df:55:6b:3b:63:2c:63:9a:b7:19:fc:6b:b3:e3:77:
6f:d6:69:45:a5:78:8f:a3:a6:5c:c9:e6:f4:54:ce:
65:f6:b5:af:4d:e9:7d:07:16:2b:e0:e7:9b:dc:f1:
0b:d6:58:04:2d:8c:03:7e:a6:73:cc:34:ae:9a:c6:
c7:de:05:0d:78:54:cd:af:c3:0b:ba:3a:a0:7e:63:
7c:54:80:8c:b3:c9:20:8d:7d:45:80:22:d6:d8:a9:
32:61:e9:e4:da:db:41:e0:3a:25:00:0b:b4:45:bc:
57:cf:06:ea:49:82:49:db:d4:80:f1:2b:fe:6f:78:
ab:fe:2a:ce:0b:4a:9d:ad:94:11:ab:1c:4c:1a:44:
7b:97:7a:2a:92:df:76:83:f1:4b:c4:db:e9:6f:24:
39:79:72:67:0d:4c:d2:2f:e7:d9:20:1e:13:ad:0b:
41:82:78:9a:8e:a8:84:26:25:3e:c9:e1:cb:9a:fe:
c2:30:1d:25:92:16:e3:29:12:95:13:81:38:e0:c7:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4D:D9:B5:FD:DD:98:BA:D2:3D:48:AC:D4:D7:3A:3F:50:E6:4F:A6
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:11:ce:9a:cb:67:b3:b9:eb:bc:3e:15:1d:4d:00:87:58:47:
6e:0e:3e:4f:40:c0:8c:28:e2:08:45:99:bf:71:e8:46:99:4c:
97:e2:ec:25:66:2e:1b:77:4a:87:fe:b5:38:f1:4d:db:a0:90:
9d:d8:87:dd:b9:14:f1:30:37:26:6b:2a:25:5a:21:c2:86:54:
20:81:e3:f7:47:ca:e9:0e:09:f1:9b:60:23:59:09:f3:fd:86:
e4:2d:5a:44:1e:48:60:6b:3a:78:42:e2:1b:3e:4d:de:f7:17:
b9:3c:15:24:9c:34:0d:71:2d:6e:1a:cb:05:02:f8:81:c2:65:
d8:f8:51:7f:af:60:67:77:91:a9:89:ec:93:7c:b6:81:b8:ac:
78:fb:d2:90:b8:34:9e:a8:aa:99:8c:0a:85:c0:5b:67:98:12:
53:93:45:24:8c:b4:bb:bd:9e:3b:83:3a:2f:46:4d:30:dd:51:
e5:74:42:1b:d9:da:b2:fd:ca:47:1f:84:dc:77:3d:b2:4d:6d:
ca:91:3d:1e:46:2b:a6:8a:d1:0d:13:e1:af:00:53:6e:6d:ce:
c3:51:c1:80:d7:7e:63:fa:84:8e:33:1a:d0:4b:db:d7:ca:ea:
9a:66:98:06:ca:49:9d:17:1d:c3:3c:e5:df:11:21:f1:f5:74:
9a:48:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:45:19 2026 by rpki-client