Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: FfkUTpTNhY0KKh/rP+z776s7allBNF33XS7+WPttCb8=
Subject key identifier: B7:31:6B:73:97:2A:A7:D6:E4:8B:64:6C:D0:F4:10:8B:78:C5:35:6F
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 019FAABE64EB3ED38BB87FC0091770E64D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 04D9
Signing time: Tue 28 Jul 2026 22:00:32 +0000
Manifest this update: Tue 28 Jul 2026 22:00:32 +0000
Manifest next update: Wed 29 Jul 2026 22:00:32 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: kzYonoqWOuf6CxBsPPMH5gEEqF7GPIuPrFa4YVoPGlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:64:eb:3e:d3:8b:b8:7f:c0:09:17:70:e6:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Jul 28 22:00:32 2026 GMT
Not After : Jul 29 22:00:32 2026 GMT
Subject: CN=b7316b73972aa7d6e48b646cd0f4108b78c5356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:fd:70:f5:b0:d8:90:60:8c:4a:e9:24:98:
33:73:5a:cd:25:4c:b2:06:d5:5e:ac:1c:f0:61:5b:
7d:fc:de:00:f8:0e:94:2e:52:3c:cc:61:17:8a:e6:
2b:8e:0b:1e:30:f0:a2:8a:41:d4:b8:69:67:b0:8b:
aa:7c:1f:c5:b0:23:b0:a6:04:25:aa:15:18:99:bf:
80:f2:c5:45:40:91:17:e7:92:fd:5e:46:69:da:5d:
9b:87:c1:ed:13:09:73:37:4d:62:19:f1:15:dc:fc:
88:86:a1:fb:dd:ce:e0:fc:35:8a:d9:a2:a2:77:e7:
f2:92:26:c5:0c:b3:79:97:f7:2a:5c:b1:f1:e3:ad:
5a:08:71:15:1d:17:d1:3c:de:c2:50:4f:33:e9:4f:
de:ad:3f:4c:db:b5:60:87:35:88:d4:9a:ff:86:f6:
85:24:69:99:0f:0b:bb:4d:72:c4:fa:f4:4f:9d:c8:
40:f5:a7:1f:90:06:76:d1:65:1a:2f:9c:bc:9f:cb:
10:cb:48:c9:e8:49:2a:dd:85:c8:f2:56:20:6f:d5:
58:4d:9f:bf:42:fc:86:76:a2:82:f2:f6:fd:14:51:
45:63:16:eb:b2:c8:9e:00:87:b0:10:68:5a:22:05:
fe:fe:34:1b:d5:7e:3a:83:f2:95:6c:c1:f9:8c:39:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:6B:73:97:2A:A7:D6:E4:8B:64:6C:D0:F4:10:8B:78:C5:35:6F
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0a:43:b5:3d:5d:d0:78:cd:65:df:cd:6b:9e:5d:bf:d6:cb:
95:84:a8:18:d9:24:b6:eb:a8:02:78:84:31:5d:95:48:d3:71:
d6:19:ce:15:c8:a2:96:7d:68:8f:21:a9:66:9f:22:5a:16:da:
d6:0c:0b:ae:89:6a:71:f3:36:30:64:ee:d6:1b:5d:75:c5:df:
07:db:c2:2e:27:0d:dc:4d:d5:44:34:9e:b3:47:11:cf:9f:b8:
e7:78:f3:01:47:5f:86:d0:9c:fb:01:a0:61:d5:2f:c8:f7:51:
b1:92:b7:5a:68:65:d4:ef:07:35:6e:02:23:19:1e:29:91:45:
dd:f0:3a:67:41:0d:f3:71:26:4a:03:6c:7c:3a:42:74:f4:a7:
e4:96:19:4f:fd:d4:46:9d:72:3f:0a:a2:08:4f:38:e3:29:2e:
ec:ec:2c:8d:e2:0a:fe:dd:e7:20:91:7a:7d:48:d9:99:be:df:
7d:ba:a4:fc:9d:8f:e6:c9:d3:ff:3d:dd:95:26:63:f6:54:9f:
a7:ce:58:bd:9b:02:c5:49:f5:d4:23:40:af:58:26:d1:f3:72:
a8:57:b2:e0:78:d2:e0:3d:80:6d:bb:5f:7a:8e:3e:b0:0a:62:
01:37:02:06:21:56:f5:e6:9a:7a:07:4a:3c:6d:1a:4c:ea:0b:
64:93:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:48:21 2026 by rpki-client