Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: pV9UnHH1S3P7Txzb75RosK735DDAort5SI/aDcZULgE=
Subject key identifier: 44:4D:22:A2:35:FC:11:AA:02:81:7B:68:CD:EC:F5:88:35:DC:F8:25
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 01A112978B8F7E934817BF6F5F07707F711B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 1953
Signing time: Tue 06 Oct 2026 19:01:23 +0000
Manifest this update: Tue 06 Oct 2026 19:01:23 +0000
Manifest next update: Wed 07 Oct 2026 19:01:23 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: RiyVXfn2yYWoZS8LiXYkEmwhLPVe3CgwnrDgKNoTVKk=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:97:8b:8f:7e:93:48:17:bf:6f:5f:07:70:7f:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Oct 6 19:01:23 2026 GMT
Not After : Oct 7 19:01:23 2026 GMT
Subject: CN=444d22a235fc11aa02817b68cdecf58835dcf825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:54:01:26:9d:61:f4:2e:61:f4:6e:64:1f:
ac:ee:c8:e6:95:e1:80:97:26:7b:1d:6b:0e:f6:82:
dd:bc:69:f9:42:3e:13:83:df:4b:82:40:32:62:95:
51:f0:c7:bd:92:70:d9:c4:3c:d9:7a:f7:22:94:7e:
ec:86:bf:50:3c:bf:03:8c:a3:9f:17:42:cc:e1:48:
18:5f:03:43:ca:f5:2c:02:99:97:bc:f2:d6:30:0e:
55:1e:a7:a4:36:94:d8:46:43:5b:08:a5:d7:3d:a7:
64:66:9b:a0:2d:48:b0:86:c7:6e:a0:16:77:30:db:
4e:07:1e:9e:3e:76:ba:52:cc:82:c3:17:91:9f:fd:
97:26:e9:ca:c8:bb:52:30:ca:11:a9:fb:64:04:8b:
29:a6:a0:1c:cb:c7:41:e8:31:59:4e:59:52:32:59:
5b:dd:b2:67:3d:dd:97:2a:12:9a:ce:b5:7b:7f:0a:
42:4f:74:55:14:b7:33:e2:ff:ff:66:b2:d8:f6:51:
8d:ff:3a:8b:57:78:49:35:34:9e:81:09:df:7d:29:
ae:46:c8:55:28:d1:3e:6d:bf:6b:35:ed:fb:f6:ad:
63:ff:c3:bb:a9:04:1f:56:c7:07:b8:dd:bc:fe:cc:
65:fe:d5:97:d6:f1:43:01:bb:9c:8d:5a:17:c6:ff:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:22:A2:35:FC:11:AA:02:81:7B:68:CD:EC:F5:88:35:DC:F8:25
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:e4:98:8e:f7:bd:2f:f9:c0:42:cd:50:de:ab:83:22:4c:
75:29:c4:51:b0:78:f0:db:9a:a2:9c:89:56:00:b5:56:ca:7c:
c6:61:77:d3:95:81:0d:ae:04:7a:c4:f9:54:51:7d:c9:32:ee:
98:18:ae:4b:c5:37:6d:ee:4d:43:e1:8b:d9:b6:30:ae:6d:e8:
d1:b8:a9:21:cd:7c:50:ca:06:87:a9:ae:75:98:4b:d6:54:f2:
79:f1:31:07:d2:96:0e:51:fd:fa:ba:bd:6f:f2:6c:ba:ae:5e:
e6:62:b3:0b:40:05:ac:77:1b:cb:2d:80:56:e2:15:b9:fd:43:
00:0a:a8:7c:0a:d4:2b:f7:5d:cc:88:e3:eb:d9:da:1e:9f:36:
91:21:15:9b:e5:a3:79:5a:4e:98:47:6a:b4:9b:f9:25:15:b6:
a2:12:9a:04:23:56:c9:34:f6:b8:3a:e2:89:1e:66:a7:9f:58:
86:ef:bb:b2:0d:b3:16:cb:69:c9:6e:87:1d:ba:6f:31:30:d9:
7a:c7:02:e2:f9:8e:d2:8d:f3:1b:23:8c:80:c3:bf:f8:76:e5:
59:4c:ae:bb:47:41:0f:41:74:b3:e3:54:41:12:fa:c6:bb:2f:
7e:29:04:b3:40:55:41:b0:74:4e:22:87:2e:02:08:fc:ce:16:
38:2b:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:25:18 2026 by rpki-client