Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: IYKNZv4KPm2yp4+WxYfgNoNEhMKQxIup92DXyGn8YNQ=
Subject key identifier: C7:A6:35:13:1A:92:C8:3D:EA:07:80:C6:14:AA:B8:08:5C:06:BB:90
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01A0CF368622A420C3A9CA6488D0510D84B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0C98
Signing time: Wed 23 Sep 2026 17:00:52 +0000
Manifest this update: Wed 23 Sep 2026 17:00:52 +0000
Manifest next update: Thu 24 Sep 2026 17:00:52 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: tXekmSZ34snfCpTJ/ti+ybyMWNN1ywJzLJDDPYkuKzo=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:86:22:a4:20:c3:a9:ca:64:88:d0:51:0d:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Sep 23 17:00:52 2026 GMT
Not After : Sep 24 17:00:52 2026 GMT
Subject: CN=c7a635131a92c83dea0780c614aab8085c06bb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:23:66:83:26:72:58:24:cf:f4:57:9e:28:
60:23:2e:5f:a0:14:f5:ac:ac:9a:3c:4b:b1:c8:2d:
14:02:72:e5:01:7a:6d:8c:2a:c2:4e:63:db:9b:4a:
fd:63:83:07:4d:1d:7e:07:ae:e3:15:83:c4:c4:5f:
dc:da:64:43:ef:21:7c:ba:5e:f0:22:c8:89:1a:c0:
03:6f:5c:2e:69:f4:92:4a:ac:f7:16:3b:bb:b5:bd:
8f:f7:44:f7:f5:55:7a:71:0d:8f:d9:c2:98:51:4f:
b3:bc:df:d8:bc:dd:45:dc:c0:2d:86:7e:17:a5:36:
67:06:92:a0:a4:fc:a1:b4:cf:ea:80:a0:92:59:9b:
c9:06:82:43:99:bd:17:72:b2:f5:7d:fb:72:fb:18:
ed:75:75:ab:c7:0d:e9:51:00:b5:10:e6:39:2e:ec:
8e:db:a3:40:4c:cf:bf:a8:e0:f5:fc:20:90:a1:83:
73:06:79:f5:5c:ac:57:00:10:a6:93:a2:b8:da:e9:
23:b9:ae:a5:e8:64:c8:c3:33:66:32:f9:f6:09:6c:
a4:f0:e1:90:dc:02:1c:1e:49:49:e4:e3:be:71:3f:
2d:f9:00:e7:fa:c4:bb:8e:1e:09:17:e1:6d:c9:87:
26:44:78:10:de:c6:de:14:96:f9:93:b4:51:4d:fc:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:35:13:1A:92:C8:3D:EA:07:80:C6:14:AA:B8:08:5C:06:BB:90
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e3:0b:3b:07:45:24:3e:a5:2b:95:92:c7:a2:16:58:5b:29:
9d:f8:51:a6:06:23:4d:be:35:73:b7:35:76:2f:9b:36:5c:cb:
d1:26:6d:40:ce:5f:4f:b1:20:14:d5:78:ec:07:cd:02:db:b1:
5a:57:94:09:c6:b1:33:92:67:a7:e0:3c:46:2f:8d:ba:ac:25:
58:8e:38:f9:a6:0e:59:65:61:81:2d:78:25:cd:2a:27:2e:64:
ab:eb:6a:83:6f:22:b1:5c:88:9a:b0:3a:49:88:73:cd:38:ad:
93:4a:4a:4d:f1:0b:d2:5d:6c:ef:14:45:f7:1e:3c:8e:18:f9:
66:ee:ba:74:4e:13:1d:d8:7e:40:02:6c:2e:be:2b:8a:83:8c:
ee:ad:b5:30:58:dd:97:d5:24:0b:8b:c0:4c:c1:66:1c:3f:1a:
f6:9b:07:e1:e2:f9:ba:1e:77:1e:19:ae:a7:37:93:7b:b7:7e:
47:25:48:a5:43:d5:9d:dd:36:c0:0a:a1:55:5c:81:35:2d:9f:
04:2d:bb:73:be:6a:d5:5e:e2:59:d6:b0:d6:65:1a:32:03:72:
c5:cf:e5:f4:28:d9:97:ad:7f:38:9a:7b:3f:e6:74:31:0b:24:
67:6b:0a:95:25:ea:79:0d:dd:0d:fa:34:75:84:6b:00:0a:07:
b6:8e:b7:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNoYipCDDqcpkiNBRDYSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjYwOTIzMTcwMDUyWhcNMjYwOTI0MTcwMDUyWjAzMTEwLwYDVQQD
EyhjN2E2MzUxMzFhOTJjODNkZWEwNzgwYzYxNGFhYjgwODVjMDZiYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMjZoMmclgkz/RXnihgIy5foBT1
rKyaPEuxyC0UAnLlAXptjCrCTmPbm0r9Y4MHTR1+B67jFYPExF/c2mRD7yF8ul7w
IsiJGsADb1wuafSSSqz3Fju7tb2P90T39VV6cQ2P2cKYUU+zvN/YvN1F3MAthn4X
pTZnBpKgpPyhtM/qgKCSWZvJBoJDmb0XcrL1ffty+xjtdXWrxw3pUQC1EOY5LuyO
26NATM+/qOD1/CCQoYNzBnn1XKxXABCmk6K42ukjua6l6GTIwzNmMvn2CWyk8OGQ
3AIcHklJ5OO+cT8t+QDn+sS7jh4JF+FtyYcmRHgQ3sbeFJb5k7RRTfwAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMemNRMaksg96geAxhSquAhcBruQMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOMLOwdF
JD6lK5WSx6IWWFspnfhRpgYjTb41c7c1di+bNlzL0SZtQM5fT7EgFNV47AfNAtux
WleUCcaxM5Jnp+A8Ri+NuqwlWI44+aYOWWVhgS14Jc0qJy5kq+tqg28isVyImrA6
SYhzzTitk0pKTfEL0l1s7xRF9x48jhj5Zu66dE4THdh+QAJsLr4rioOM7q21MFjd
l9UkC4vATMFmHD8a9psH4eL5uh53HhmupzeTe7d+RyVIpUPVnd02wAqhVVyBNS2f
BC27c75q1V7iWdaw1mUaMgNyxc/l9CjZl61/OJp7P+Z0MQskZ2sKlSXqeQ3dDfo0
dYRrAAoHto63FQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:18 2026 by rpki-client