Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: cmtkGpZzqkarGQ4Tz+7oZRYxLpYX5H1Cmw77uVxlOY4=
Subject key identifier: 20:76:8C:28:B5:35:A6:64:96:8B:66:C3:80:34:82:40:3F:FD:8E:EA
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 01A0E39924E2A87A4EAB92D02D127DFC456B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 057B
Signing time: Sun 27 Sep 2026 16:00:59 +0000
Manifest this update: Sun 27 Sep 2026 16:00:59 +0000
Manifest next update: Mon 28 Sep 2026 16:00:59 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: HJgs4Yc7wr00TsO3TSfOU1wIt/v/fH6k2F8qMHej2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:24:e2:a8:7a:4e:ab:92:d0:2d:12:7d:fc:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Sep 27 16:00:59 2026 GMT
Not After : Sep 28 16:00:59 2026 GMT
Subject: CN=20768c28b535a664968b66c3803482403ffd8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:a3:c1:10:44:45:64:79:b6:4f:b1:ae:29:
05:ce:2a:eb:ee:0e:07:76:8d:30:31:0f:2a:8f:b5:
94:f8:94:6f:b2:b8:88:bb:2c:2d:98:c4:53:9e:08:
52:66:d4:87:92:cd:bf:72:6c:f7:c9:9a:fb:66:4c:
b2:0c:ba:02:c5:90:56:71:3d:84:47:ac:c8:48:d2:
01:cd:c3:81:d4:93:cd:58:d9:29:58:d9:ef:d2:98:
a6:76:aa:d0:3b:b3:2a:3c:cd:6a:f9:69:69:2b:53:
01:27:85:de:98:f1:fa:a9:18:4a:c6:27:aa:5f:87:
36:c0:ab:80:e9:8e:a6:30:ad:cd:25:7f:15:4f:d5:
66:be:d3:2e:26:a2:ed:44:29:9a:d0:4d:b2:b5:f8:
6f:6f:8b:d8:fd:e7:66:c6:1d:a3:a3:e6:12:a6:d9:
52:24:ef:08:cd:43:93:e9:61:f7:f5:38:d4:c2:f2:
5a:e6:79:83:6d:4d:d4:ec:b8:9e:d7:3e:b1:9c:8e:
bc:eb:b9:29:64:cf:25:12:f3:58:43:36:3a:3d:17:
c4:ef:ba:94:0d:a5:41:b0:1a:64:f4:01:f5:11:ac:
d5:e6:6f:2e:fd:3e:1f:03:64:b3:f9:52:66:90:a5:
b0:06:d0:89:64:2f:b8:f6:dd:95:66:4a:36:f3:39:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:8C:28:B5:35:A6:64:96:8B:66:C3:80:34:82:40:3F:FD:8E:EA
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:2e:09:09:07:a1:6c:2a:f8:92:a6:0a:d0:d2:fc:c1:89:
f0:18:92:4d:30:b1:32:fe:9a:be:f3:9c:88:67:35:51:14:69:
3f:49:47:3a:8e:3f:14:e1:2e:87:a7:1b:41:17:d7:c8:fd:ec:
72:7b:8a:d4:c3:e1:43:84:24:eb:40:5a:55:35:ea:f8:b3:c3:
56:d0:6b:57:e1:41:e3:4d:c2:09:c6:98:ab:bb:22:b7:73:cd:
95:a2:9f:7c:99:2f:84:76:ef:5f:ed:82:df:06:69:58:77:32:
55:11:69:8c:0f:76:2d:a9:8b:05:88:b1:ac:47:4a:11:8f:46:
2b:ca:4d:85:c2:67:7a:32:f6:d7:c6:6c:2d:07:70:96:53:32:
2f:c7:c5:89:72:da:74:38:fd:4f:10:4e:14:1c:ae:63:e6:6c:
c2:6f:0b:8b:4e:97:bb:c1:2f:23:86:34:67:f5:a0:9a:db:dc:
ba:eb:58:96:a3:30:b2:65:5c:5f:c8:65:e5:2b:c9:aa:03:e1:
92:a6:e9:2a:27:b6:5e:f5:57:1d:7a:b8:df:2d:bb:3f:89:bc:
a3:51:69:b5:e9:20:42:80:42:e2:b7:f2:73:6e:7a:b4:76:88:
31:dc:74:49:50:e8:da:3d:33:dc:8f:de:60:a7:98:26:30:b0:
ec:32:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:51:27 2026 by rpki-client