Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: ExdoQz9+4awm5cy6xGKoWQLRWz+HuusSvr6Y1VL/pzY=
Subject key identifier: 17:CE:4C:67:2F:85:02:83:5F:F8:6C:AA:C4:A6:DA:06:A6:B8:E8:FD
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019CAB343FD7B665759D1F1030B88B580533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 054F
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: WchdJxrmp9ty8ms313FuvPhX0K4VBxWJ/B9qNm4yNO0=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3f:d7:b6:65:75:9d:1f:10:30:b8:8b:58:05:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=17ce4c672f8502835ff86caac4a6da06a6b8e8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:f6:62:82:57:c9:fe:53:5b:0e:b4:2d:7c:
7b:d3:6d:f6:de:5d:3e:70:3e:02:30:87:7b:3d:4c:
29:77:fc:a0:f4:dc:db:97:e8:3c:ae:0f:ed:33:e3:
a6:5b:b3:f2:bf:21:93:a7:37:23:b6:64:83:eb:09:
ea:97:31:3c:e7:a8:32:95:b0:d9:43:d4:a0:c0:45:
f5:51:0c:9f:67:a7:4d:ee:8c:02:85:89:de:ef:bd:
51:46:b9:30:cc:23:6a:32:92:db:80:c3:e7:8d:7c:
8e:e2:9d:62:0d:3e:75:09:cf:67:5e:49:6a:c1:23:
7d:b4:ce:d3:89:70:59:26:07:21:b2:96:1c:b1:16:
9e:f0:fb:ec:bc:18:4f:c7:05:d5:b8:85:e3:3d:8f:
e1:d9:65:73:a9:a8:3c:66:5f:c0:fd:fc:34:19:57:
2a:21:fc:a5:06:57:9b:8b:4a:2d:d8:ac:9a:68:9c:
72:68:c5:0b:3d:03:d0:b0:df:98:3f:87:47:0b:87:
ce:72:e9:15:9f:c7:ab:9c:27:e1:11:49:53:58:73:
8d:9a:b9:4b:95:de:95:eb:5d:bd:61:cf:d8:4c:e0:
f8:c2:26:f5:fb:f9:ae:19:b8:95:35:29:4c:17:a7:
0a:84:7f:d8:b2:f5:b1:2e:05:62:2d:d8:10:b4:47:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:4C:67:2F:85:02:83:5F:F8:6C:AA:C4:A6:DA:06:A6:B8:E8:FD
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:36:21:ac:63:86:46:2e:59:dd:aa:63:0c:f2:cc:fe:87:
20:8a:1e:9d:67:f0:3d:1d:29:e0:00:a6:65:8a:82:66:2d:d8:
04:88:a4:f7:db:27:47:ab:7d:6a:7a:93:50:67:f0:0d:c0:31:
d4:87:92:f0:8d:4c:ec:11:58:ba:7c:83:65:08:62:1a:a7:54:
4f:21:58:51:f9:f6:25:03:52:5e:a4:29:da:e3:de:2a:6e:ef:
d2:6a:b5:87:0e:35:22:78:65:83:3f:5f:ea:a3:91:80:85:a7:
54:0c:30:8f:36:6b:a5:14:9e:cd:3c:a0:21:ae:c4:3b:2b:ed:
31:78:6a:6e:e1:eb:f7:c5:b6:70:97:81:4c:ed:d1:35:2c:bd:
e1:3a:a0:11:e8:9c:5d:16:1b:1b:82:1a:4c:f8:f0:74:08:7e:
21:29:04:72:85:2f:be:9b:52:6d:5e:69:25:82:36:18:70:35:
60:f8:e3:c5:97:ae:ae:3c:6b:28:29:d5:b3:fc:76:29:7d:8e:
9d:cd:da:6b:5f:b7:00:86:a4:40:a4:c9:4d:de:85:56:c8:ec:
a5:e9:b6:a1:21:c3:8c:48:87:b2:c7:d4:f3:27:83:e3:ae:54:
80:21:19:36:1d:0a:a5:e0:0c:ff:ac:63:b0:06:24:52:a2:91:
9a:45:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:46 2026 by rpki-client