Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: +01ktVkrRBcs18Xo/CfoyXou5RF/+dFfWHH0HdOZC+M=
Subject key identifier: 2B:39:72:D4:A2:AE:1C:6C:82:3C:1A:DD:7A:6D:57:5E:69:46:EB:C1
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019D9AE35CB7B95A4C514007C03A64F0E5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0616
Signing time: Fri 17 Apr 2026 10:01:24 +0000
Manifest this update: Fri 17 Apr 2026 10:01:24 +0000
Manifest next update: Sat 18 Apr 2026 10:01:24 +0000
Files and hashes: 1: 2ZZv1bu-DuBhQPjig9kj-QVD9l8.roa (hash: qmccUpOGDFw4lhDyr1xdmfP+fhpyBahooky3nxxST/g=)
2: PJp6DbhLKKKJBHIjV1dFl7mxtw4.roa (hash: syNKE4d6EsnVmU6S6ul2WC5ym8D/rC72+oaHb43GzTA=)
3: TlDmi0e1eAsdto3C4dPiL5RgxqY.roa (hash: QO/kRV/Z4o90qmVF9RiXYslLQcAUoP9dJryKCwCd5v8=)
4: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: zmYvvrImsRfL7vWv5dJIxv0Ya4zlC1jeP6nULm5C19U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5c:b7:b9:5a:4c:51:40:07:c0:3a:64:f0:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Apr 17 10:01:24 2026 GMT
Not After : Apr 18 10:01:24 2026 GMT
Subject: CN=2b3972d4a2ae1c6c823c1add7a6d575e6946ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:69:4f:dc:01:81:73:aa:44:57:64:d0:bc:
a6:ce:66:6f:1d:ff:4a:7b:97:fb:b8:ce:eb:c3:c6:
2d:b9:80:12:15:53:df:7d:2c:f0:56:02:61:6f:92:
98:2b:fa:0f:ed:06:26:14:4a:9f:3c:97:60:c1:44:
2a:6b:3e:17:3a:d2:5f:b3:36:00:7f:65:c2:7e:a5:
44:c3:69:7c:c2:85:69:56:76:4c:7a:a8:39:d9:89:
c9:01:1e:7e:fc:2a:76:51:05:cb:2a:fb:d6:fb:36:
fd:ae:99:c2:53:99:e5:70:88:2a:2a:f0:4b:48:16:
47:c5:10:85:a7:a6:ca:bf:bf:0c:1c:ab:e3:7a:d4:
4c:0d:62:d4:82:8f:9b:5c:f2:00:d4:e9:df:c1:d0:
8e:be:c0:70:d1:30:11:88:61:2e:77:d3:e9:de:07:
42:a5:2e:de:ba:99:82:63:ab:cb:1e:94:9c:98:c4:
3a:38:33:d8:55:c6:36:b3:88:03:83:95:c4:1c:f2:
d2:33:66:f7:3c:59:70:34:6b:c6:bd:27:55:a4:09:
a3:0b:92:59:f2:92:8e:50:09:9f:2a:d7:ba:8b:73:
aa:e6:e9:7d:b7:d6:ea:86:29:db:f8:cc:ae:b1:9a:
ea:c2:37:be:95:ea:94:86:f1:b2:71:5d:32:f4:f2:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:72:D4:A2:AE:1C:6C:82:3C:1A:DD:7A:6D:57:5E:69:46:EB:C1
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:25:50:77:a7:92:fb:83:4c:a7:e9:4e:89:17:9b:60:c7:
c8:99:31:4a:17:35:01:16:01:5e:bd:06:f4:d4:96:95:a0:0c:
bc:11:5e:36:21:84:d8:d2:ad:1f:00:22:4d:d1:2c:c1:fa:cc:
ae:2d:a3:6f:73:ec:43:d1:8e:3b:84:51:20:32:77:4a:d8:7c:
43:8e:7b:be:1f:ce:b7:04:47:4b:2f:1c:28:23:9a:57:72:2c:
2c:41:63:bd:a8:fa:4b:37:9f:0f:f6:f7:69:fc:0b:f2:13:f1:
96:25:c6:27:97:a4:79:5e:cb:0c:93:1d:0b:91:78:b5:e1:fc:
95:c3:5f:12:9e:3e:af:de:84:46:85:83:30:a7:99:75:9d:58:
e4:93:1c:c9:9c:71:97:17:2e:30:73:f0:bf:51:7a:22:48:24:
5a:0c:5d:fa:0a:c3:69:50:94:30:4c:cf:91:04:70:a3:5a:7d:
71:68:72:02:3c:d1:33:1b:bb:41:de:af:3b:ae:6d:b3:e7:7e:
51:6d:01:83:75:ca:97:ed:e3:b5:4b:37:05:e9:f3:48:09:45:
40:4e:8a:6f:71:e7:e9:ba:7d:3d:ef:58:aa:6d:f8:6a:ca:84:
06:bd:bf:9e:a8:7c:bf:e7:1e:02:65:76:a0:60:65:68:d6:cb:
1e:54:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:53 2026 by rpki-client