Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: uDRd0M9SrAqaxSt6fi8AFHj9VFHps0KvFNp5ZVh7kk8=
Subject key identifier: 90:46:40:94:24:2E:69:60:84:60:E2:36:CE:79:40:61:34:E4:55:B0
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019D9A74FB166E06427B407CB18A165DF24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0AEF
Signing time: Fri 17 Apr 2026 08:00:50 +0000
Manifest this update: Fri 17 Apr 2026 08:00:50 +0000
Manifest next update: Sat 18 Apr 2026 08:00:50 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: GNNDkVvPmCjfSDBO98HMaeXu1KXaS2ocruwQvMqA3e8=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fb:16:6e:06:42:7b:40:7c:b1:8a:16:5d:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Apr 17 08:00:50 2026 GMT
Not After : Apr 18 08:00:50 2026 GMT
Subject: CN=90464094242e69608460e236ce79406134e455b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:cf:75:6a:23:9d:df:2a:a6:44:a9:ab:aa:
0b:c2:ba:73:e2:6c:fe:96:e1:d5:80:b9:bc:21:f0:
c6:0e:d3:18:e5:f0:6d:7d:49:f7:ff:d7:4f:d9:bb:
7d:d3:d9:15:ea:59:1e:1d:15:24:34:57:68:a8:12:
91:5f:15:1c:65:78:a0:d7:00:73:6f:de:46:b3:97:
2c:89:f7:7a:29:1c:76:8a:8d:f6:2a:61:29:2c:46:
72:44:e2:1a:7c:09:6b:bc:2f:52:08:2b:54:aa:da:
a7:91:89:33:3b:66:cf:4c:13:74:62:da:0a:5a:03:
9f:f1:a0:c7:d5:e6:78:3f:03:ec:9b:a1:8c:07:3c:
80:26:ca:2a:85:28:25:c6:ce:80:7b:2f:94:78:3c:
53:07:78:c7:97:63:92:f9:b1:8c:99:dc:05:a2:78:
f3:f8:0b:f4:4b:69:f9:63:48:57:bb:33:c1:96:4f:
04:19:fd:42:6c:bf:23:97:c8:c4:58:59:7e:b3:12:
5f:2a:3a:8f:fe:3a:f8:de:5e:3d:30:06:11:ba:08:
e3:cd:b0:01:a3:d6:1c:86:7d:db:19:47:a9:ec:12:
9a:c9:56:f5:36:60:0e:7d:50:32:1b:09:54:ee:d2:
a7:f3:06:35:53:10:0a:7d:b3:64:12:95:9a:62:ca:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:40:94:24:2E:69:60:84:60:E2:36:CE:79:40:61:34:E4:55:B0
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:76:71:27:52:bf:40:84:b9:7b:b0:13:de:4a:a3:73:36:
cc:69:4d:e3:e0:d1:2a:ba:0f:e4:b4:54:a5:23:65:67:17:5c:
cd:51:d5:20:5a:eb:60:a6:f0:10:3a:69:12:2d:62:52:3b:79:
82:df:7d:3a:d7:5e:2a:5c:98:df:52:fc:eb:67:a0:c2:da:35:
ee:8a:d4:44:28:1c:c2:38:59:c5:cd:0e:09:7b:77:80:4f:34:
0e:76:c8:5a:8f:e5:c9:7a:82:6e:d1:92:03:a8:d1:8e:1c:f6:
fe:12:bd:52:87:fb:1b:bb:fa:75:4f:24:ae:a3:4d:87:79:90:
6e:79:14:e0:31:c6:fe:a6:6f:e4:7c:68:6f:1f:79:fb:10:7a:
70:9a:9e:28:37:75:9e:66:8c:b7:06:6a:bc:ce:65:c8:9d:6c:
14:8a:39:98:a7:65:41:97:ac:d2:c1:d0:16:5d:fd:61:7d:69:
58:46:8d:35:2f:f5:75:7e:0f:ff:8a:8e:3d:d7:f9:82:f7:0e:
79:ec:16:d7:fa:50:a0:b9:e6:69:aa:c9:23:e4:de:96:34:78:
8c:a6:2c:e9:76:e8:ff:c6:04:ed:8e:e8:7d:e6:54:3f:ed:ac:
82:ef:0d:23:20:bd:ef:bb:a5:d8:2f:0d:fb:b8:ea:f5:b2:90:
8c:2b:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:31 2026 by rpki-client