Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: IGSH9hIpVMS9gCRwVBRfYbf/R+a6ozdclmM0TCyLsHw=
Subject key identifier: 29:87:C6:7F:50:3E:32:09:EC:80:18:A7:32:41:8B:D3:87:86:05:E9
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019EC03616F6204CC1DC1C8D8E5F15B52505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0663
Signing time: Sat 13 Jun 2026 09:00:30 +0000
Manifest this update: Sat 13 Jun 2026 09:00:30 +0000
Manifest next update: Sun 14 Jun 2026 09:00:30 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: vhROI2IhmjDV2m3EnNt0cQEUUDfNl7tu3M6sskfrV2E=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:16:f6:20:4c:c1:dc:1c:8d:8e:5f:15:b5:25:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jun 13 09:00:30 2026 GMT
Not After : Jun 14 09:00:30 2026 GMT
Subject: CN=2987c67f503e3209ec8018a732418bd3878605e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:52:26:20:a1:94:ab:85:a2:f5:bb:95:04:
bb:01:b9:48:ff:02:4e:f5:f9:e2:dd:54:17:12:d8:
14:61:b6:28:da:06:a8:99:63:d1:79:4b:f2:b3:40:
8c:68:6d:eb:21:7a:14:e6:72:98:2f:ac:f1:d0:0b:
66:50:d8:61:7b:34:21:58:cb:af:18:05:3f:db:12:
45:a1:d5:83:60:6f:fe:38:35:8c:f5:ca:45:9f:bb:
fd:a8:9d:db:ab:f6:9e:e2:15:6f:ca:e2:57:30:ef:
e2:41:67:dc:f9:09:c6:3e:b5:1a:cf:29:a7:08:2a:
30:05:1c:6f:8b:cf:35:ab:a9:13:38:0a:1d:f2:8e:
62:e2:63:3a:34:5e:ef:6d:cd:d4:d3:e8:a4:34:a5:
e3:02:7e:cd:95:76:3b:2b:ea:7f:e9:7f:9e:e9:c4:
ba:90:e1:8b:1e:b7:a1:dc:6c:fd:3c:0e:c4:e4:eb:
d8:08:95:54:27:e2:e3:f3:cb:19:57:f4:bb:a7:af:
7a:a2:7f:30:6e:cd:2c:14:fc:8d:a8:47:b6:60:ba:
2b:e3:0f:3e:ef:95:96:ce:5a:8f:ff:9b:17:51:c1:
36:a2:07:c3:6d:3d:ae:70:53:84:ad:54:1c:af:a8:
c9:6d:d5:02:e0:48:7b:ad:f4:2f:fd:29:e5:62:f6:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:C6:7F:50:3E:32:09:EC:80:18:A7:32:41:8B:D3:87:86:05:E9
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e5:e6:de:5b:45:d3:dd:aa:13:c0:e6:81:ef:7b:47:fd:4e:
2f:8d:30:aa:67:26:c8:19:05:25:2d:44:b1:23:9f:ac:56:a8:
e7:6f:3b:c0:e8:c4:66:5c:38:1c:f9:0a:8e:96:24:d0:6b:18:
a1:f6:bc:1c:12:c2:1f:e9:bc:4c:2b:ea:e1:e8:5b:4c:76:2c:
80:18:b6:17:62:11:94:68:b4:ee:84:c6:c0:09:97:15:18:5e:
d3:e8:79:78:1e:69:c2:fe:e2:26:6b:8d:9d:5d:53:25:f8:5a:
68:c3:ae:fe:e0:a8:13:7d:00:34:29:ae:6d:60:1e:62:4d:86:
45:d2:e9:c9:f2:1c:1b:6e:56:5b:c1:10:b9:ce:67:5f:88:3a:
66:42:2b:4a:77:19:4b:38:7d:6b:0b:02:55:21:98:af:ec:9d:
c6:55:fc:97:f9:22:d4:42:c0:e6:17:64:ec:f7:62:0c:58:04:
d4:3e:6e:13:10:12:a0:10:c6:cd:9c:0f:10:b5:79:9a:87:1a:
20:06:ab:42:cf:89:8a:43:5c:cb:2d:a5:56:42:c4:7d:d0:ff:
e7:32:8c:a7:d0:92:7e:26:b2:4e:f6:ee:a9:f3:b6:0f:1b:06:
b7:8d:d5:cb:62:89:59:f0:75:09:f3:9e:ed:55:7d:2f:bd:f5:
17:f4:cd:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANhb2IEzB3ByNjl8VtSUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4
NmViYjEwHhcNMjYwNjEzMDkwMDMwWhcNMjYwNjE0MDkwMDMwWjAzMTEwLwYDVQQD
EygyOTg3YzY3ZjUwM2UzMjA5ZWM4MDE4YTczMjQxOGJkMzg3ODYwNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz75SJiChlKuFovW7lQS7AblI/wJO
9fni3VQXEtgUYbYo2gaomWPReUvys0CMaG3rIXoU5nKYL6zx0AtmUNhhezQhWMuv
GAU/2xJFodWDYG/+ODWM9cpFn7v9qJ3bq/ae4hVvyuJXMO/iQWfc+QnGPrUazymn
CCowBRxvi881q6kTOAod8o5i4mM6NF7vbc3U0+ikNKXjAn7NlXY7K+p/6X+e6cS6
kOGLHreh3Gz9PA7E5OvYCJVUJ+Lj88sZV/S7p696on8wbs0sFPyNqEe2YLor4w8+
75WWzlqP/5sXUcE2ogfDbT2ucFOErVQcr6jJbdUC4Eh7rfQv/SnlYvaglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmHxn9QPjIJ7IAYpzJBi9OHhgXpMB8GA1UdIwQY
MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt
YzRkNDJiN2Y2MjcwLzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw
LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+Xm3ltF
092qE8Dmge97R/1OL40wqmcmyBkFJS1EsSOfrFao5287wOjEZlw4HPkKjpYk0GsY
ofa8HBLCH+m8TCvq4ehbTHYsgBi2F2IRlGi07oTGwAmXFRhe0+h5eB5pwv7iJmuN
nV1TJfhaaMOu/uCoE30ANCmubWAeYk2GRdLpyfIcG25WW8EQuc5nX4g6ZkIrSncZ
Szh9awsCVSGYr+ydxlX8l/ki1ELA5hdk7PdiDFgE1D5uExASoBDGzZwPELV5moca
IAarQs+JikNcyy2lVkLEfdD/5zKMp9CSfiayTvbuqfO2DxsGt43Vy2KJWfB1CfOe
7VV9L731F/TNVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:06 2026 by rpki-client