Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: cpzB9tPIrHDi2a4vSQ1quLzRMbW75jCqPwJ4fPGe2hc=
Subject key identifier: 4B:B3:EF:EC:AA:BD:89:80:42:EB:5A:87:BA:81:93:56:7A:94:4E:F3
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019D9AAB958BCA083BE7E724FA207950CFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 05CB
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: LBrnZKCEncIWTONtXiHnRRAc9FaORhaR2w1wc13BmA0=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:95:8b:ca:08:3b:e7:e7:24:fa:20:79:50:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=4bb3efecaabd898042eb5a87ba8193567a944ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:9c:b0:a1:9b:34:8f:a1:7e:50:12:b1:a0:
17:af:cd:a5:95:18:a1:7e:c6:67:4a:69:cf:5e:8f:
f8:ed:a5:9c:10:d8:fe:1d:40:50:e0:45:eb:5c:ac:
2c:6d:72:a1:24:15:e7:23:d2:b2:87:8b:cc:20:fd:
68:d8:bb:d2:be:cd:32:3d:19:7c:bf:71:da:5b:9c:
a3:92:12:88:47:c6:c7:a7:9d:87:4d:88:d6:2c:5d:
2c:b2:36:6c:37:c4:bd:14:b0:52:ce:a5:5c:c2:bd:
df:ce:c1:d0:55:5c:2d:a1:3b:a4:66:dd:1f:13:7e:
5e:24:3e:7e:a4:1f:3d:c5:33:0e:23:7e:8b:f0:f3:
d4:79:ef:ed:f7:fa:6d:a1:2a:8c:93:23:0f:93:67:
3d:d3:fe:42:f2:b6:b3:32:b7:5f:fe:9c:a4:b6:3a:
85:00:d1:07:44:aa:59:c1:35:ef:5f:e1:77:4b:ad:
ea:94:fd:6e:78:cd:b5:47:70:fb:01:a8:ef:3c:81:
6d:0b:2a:5f:03:1c:b3:ae:1a:2c:58:c6:88:2e:61:
b4:51:92:0b:3f:50:57:0c:47:2b:eb:68:fa:94:08:
cc:31:38:f6:cc:1d:11:fb:65:10:a8:cc:43:fe:4e:
59:17:2b:09:ca:9f:df:1b:0c:66:a2:be:ac:ab:a3:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B3:EF:EC:AA:BD:89:80:42:EB:5A:87:BA:81:93:56:7A:94:4E:F3
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:63:69:10:80:b8:81:ff:de:da:45:67:64:63:3b:97:ee:
7c:21:d7:81:47:72:15:85:85:5d:f8:31:df:a0:7a:b0:24:9d:
65:a1:6a:77:db:1c:1d:31:b9:b8:7b:f1:93:ce:2b:71:c9:a8:
6f:5d:3b:bb:6d:9d:45:4f:40:dc:67:d2:73:d0:02:9c:c8:45:
cd:1e:20:e4:0a:80:c6:bf:33:70:8a:f1:90:72:9e:4c:0d:a8:
f2:41:b8:51:7a:4a:36:77:d0:1f:ac:c2:5f:84:05:fd:50:82:
d4:f4:10:98:73:25:7b:98:49:ea:98:a8:08:14:cb:9f:72:86:
dd:71:b4:6e:80:93:31:a7:11:0d:d0:e0:2d:32:8d:99:39:36:
35:0b:89:24:7f:ad:bd:93:2b:06:bd:6a:44:32:31:d9:a9:d6:
56:19:9b:bd:8a:f5:a0:7f:05:f7:23:15:89:21:b5:62:92:45:
85:d5:8d:f3:4b:df:dc:94:3b:93:b8:87:bd:0e:f2:6c:e0:52:
1c:d4:69:e0:76:da:50:cd:8d:31:0a:8a:3f:82:cb:48:50:6b:
ab:ad:3f:cc:a3:39:6d:be:f2:7b:c0:2a:46:f9:3b:a7:73:00:
bf:1f:13:16:2f:09:0f:4c:12:ec:0c:1d:b1:3c:e7:2e:57:70:
61:31:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:23 2026 by rpki-client