Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: XZViDqQHcN9faQhWT3G6aa2RU8JYkbkfHRnK4qr2mRY=
Subject key identifier: 8F:3F:35:BA:76:22:FD:0F:68:3F:2B:60:33:93:D3:A1:33:F9:C9:AF
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01A0DB0476EF03615D5931CB7B90F370A205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 077A
Signing time: Sat 26 Sep 2026 00:01:37 +0000
Manifest this update: Sat 26 Sep 2026 00:01:37 +0000
Manifest next update: Sun 27 Sep 2026 00:01:37 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: B0y0eS3V2UoQq3lzFM5jIcSpvaBJM/00GKXCX+dtLwY=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:76:ef:03:61:5d:59:31:cb:7b:90:f3:70:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Sep 26 00:01:37 2026 GMT
Not After : Sep 27 00:01:37 2026 GMT
Subject: CN=8f3f35ba7622fd0f683f2b603393d3a133f9c9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:ea:42:f1:e0:58:e1:1a:a7:97:f7:13:50:
d1:5e:fc:9c:e6:18:a8:56:d5:4e:b7:c1:72:a8:a9:
a1:cd:35:46:6b:26:0f:e8:1e:11:34:17:42:27:06:
51:57:8f:65:dd:8b:1a:e2:7c:23:91:55:c6:a3:57:
60:0c:7b:32:f8:3c:9f:00:60:de:fc:a9:69:e6:05:
27:3e:f8:8a:d1:7f:56:72:ba:fa:df:4b:69:75:bf:
e8:28:02:05:3b:48:6a:42:a8:88:44:ff:3b:62:48:
05:4d:34:f6:3d:c1:e4:62:3a:fd:61:ee:15:f5:ff:
d7:58:81:38:f8:bb:83:47:ae:a0:cd:ff:0a:ea:b3:
74:cf:b2:3a:8c:90:0e:c5:c3:80:41:55:03:ca:0c:
a6:79:9c:fd:30:97:ed:17:d5:7f:43:43:ce:c8:78:
10:55:88:d2:ae:0c:94:11:4a:bb:d2:46:13:50:e3:
a9:b3:cd:8f:f3:f0:6c:ab:8e:82:ac:84:80:52:3c:
ab:ea:fa:e7:c6:24:92:c4:5b:5f:43:54:ab:6b:05:
7a:d0:59:da:20:cf:d5:1d:92:50:5c:7e:66:fd:15:
0d:3f:7a:f0:ae:34:28:29:6f:11:3e:4f:30:0f:40:
18:99:74:5c:b3:65:d0:3c:fd:59:2c:e1:0b:7d:82:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:35:BA:76:22:FD:0F:68:3F:2B:60:33:93:D3:A1:33:F9:C9:AF
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:67:18:a6:e4:2a:4e:d6:44:a6:fa:91:e0:62:2c:4a:e6:
24:c3:82:6c:57:72:70:7f:d6:d4:48:3b:db:e9:ab:7f:33:10:
1e:a3:c0:19:58:0c:6e:a8:a3:2e:c7:e1:c9:1c:0c:30:30:7c:
57:34:46:3d:e7:d0:ef:ae:4b:62:5f:ee:72:f1:f7:9c:ea:0f:
90:b9:8e:52:c3:28:95:55:c1:d6:ba:2d:73:7e:76:47:5f:09:
da:65:96:3e:18:20:83:ca:74:3f:70:0b:f7:ae:99:1a:54:90:
a0:ef:ba:6c:6d:28:13:c6:e8:1d:f1:3b:9e:7a:c9:30:0c:64:
7d:0e:8a:b5:31:f6:2f:a9:7c:0d:af:7d:50:56:80:bf:7b:58:
04:db:a6:c3:f8:a1:f9:95:7c:ff:32:59:25:ad:53:ee:16:56:
6d:7e:3e:4d:83:06:12:70:89:5c:fa:23:24:c2:68:d6:32:4a:
58:7b:fc:3c:29:f7:49:55:7b:a0:c4:e1:ae:18:fe:82:e7:fa:
9f:45:11:43:b7:72:10:af:3c:4d:05:b9:e2:5b:9f:55:90:98:
6c:e2:8d:63:86:14:21:75:63:03:fa:dc:cc:64:03:dc:bb:56:
0e:5f:c5:70:2e:b5:b4:dc:f5:30:40:d2:ec:e3:96:41:b9:a9:
ab:f8:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:02:21 2026 by rpki-client