Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: EbSAHImgW+mtEzDguSwN+U97VYjxHw7rjBnHRRObeTE=
Subject key identifier: 89:64:57:0A:88:98:99:F6:F1:74:D0:4C:11:41:7E:0C:1D:FE:4F:17
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019FA9ABBB02AC3F0AD6E3832AA27B8A84C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0C00
Signing time: Tue 28 Jul 2026 17:00:31 +0000
Manifest this update: Tue 28 Jul 2026 17:00:31 +0000
Manifest next update: Wed 29 Jul 2026 17:00:31 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: R/jeg3C7PEyOt69dLk+CZlfZtL1tH9NxbsFQz/+Obp0=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:bb:02:ac:3f:0a:d6:e3:83:2a:a2:7b:8a:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jul 28 17:00:31 2026 GMT
Not After : Jul 29 17:00:31 2026 GMT
Subject: CN=8964570a889899f6f174d04c11417e0c1dfe4f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:44:9f:2b:0e:9d:13:ef:07:c6:9a:46:89:
ac:b5:71:60:f5:60:a5:2c:c4:3c:14:97:97:c5:90:
04:e1:d8:a4:7b:d2:3d:bd:66:b1:1d:59:ec:14:11:
41:6e:e1:54:89:a1:89:83:9a:12:99:da:18:ea:ef:
fc:5c:5b:35:17:44:33:b9:4c:69:f6:e7:a6:f3:17:
d9:b8:50:36:1b:5d:df:5d:0a:58:d2:47:0f:05:5f:
33:57:1e:5f:96:f5:1c:f9:cc:83:4b:d9:51:78:97:
73:26:9e:54:0b:7d:51:f4:16:51:1f:c4:c0:e0:03:
58:1f:d1:1e:0f:49:5a:2e:b8:52:ee:62:56:1f:31:
61:40:73:cb:0f:49:5a:8c:31:91:61:ac:15:a1:6a:
2b:7d:93:78:0f:22:36:42:69:9e:23:17:5e:92:d1:
70:e8:75:c4:52:5c:8a:a9:79:34:31:4c:d4:7e:5e:
2f:9d:99:1e:ee:3b:7b:07:91:dc:63:3a:60:ff:bc:
bd:2e:fd:a1:17:f8:11:b2:50:e8:d3:c3:01:c6:2d:
80:ef:9a:a9:e0:fb:69:2d:88:45:9b:05:3a:f8:95:
7c:e5:ca:46:55:87:f8:f5:ac:34:3e:1b:04:c4:d7:
38:de:c9:38:14:92:18:77:a8:9b:6a:bf:bd:53:61:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:64:57:0A:88:98:99:F6:F1:74:D0:4C:11:41:7E:0C:1D:FE:4F:17
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:a9:bc:a1:dc:04:76:1e:2b:41:2d:3b:5e:75:ff:82:8e:
4f:53:b6:06:ba:19:a3:3b:f6:7a:8d:e9:09:e5:4e:1a:f6:fa:
58:15:75:c2:a2:ed:b2:3c:4f:fc:1d:54:63:54:36:6f:a8:c7:
61:09:d7:f8:14:5d:d9:af:8d:47:05:a7:55:5d:ac:5b:50:6d:
e3:b2:49:f4:1c:e7:8e:98:2f:b6:5e:02:c6:29:48:d9:3d:79:
0e:c3:95:61:c4:5d:58:ec:55:0a:e4:79:90:df:c7:2e:f9:0e:
61:71:39:0a:ee:3f:91:cb:c3:04:3c:68:cf:1d:77:d2:3d:f5:
72:72:bd:3e:e3:be:78:67:51:a2:18:6a:4d:cc:9f:ae:47:a0:
d9:d8:21:07:12:72:81:42:fd:fc:4c:f3:ae:a2:65:c2:0a:ed:
66:6c:4d:09:88:60:82:c4:08:7d:1d:f6:32:e9:74:12:75:4e:
f3:02:25:78:70:15:fe:86:86:b4:fb:e6:cf:e7:40:af:01:ce:
ac:54:d2:c2:d3:e2:92:c1:2c:76:da:56:34:d8:f5:05:7b:4f:
4f:2c:64:97:1d:d9:22:98:c8:0f:38:d0:ae:6c:aa:ac:e6:f2:
6b:e3:00:8c:80:75:55:dd:da:b9:fd:ad:fc:75:06:d9:c5:64:
05:58:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:36 2026 by rpki-client