Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: YAp7Z81mEmH70B4Mew9bUQmn/1c4RRm6vGkGiyOD0KM=
Subject key identifier: C1:4E:8B:4A:24:87:EA:1F:13:62:14:46:0B:63:D9:FB:8D:A3:64:32
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019D9E1B9DFE3A2CE44F82D5DDBDE55582F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 02DB
Signing time: Sat 18 Apr 2026 01:01:43 +0000
Manifest this update: Sat 18 Apr 2026 01:01:43 +0000
Manifest next update: Sun 19 Apr 2026 01:01:43 +0000
Files and hashes: 1: UR53OvR6lP83MQVG_HiJaUyZZxg.roa (hash: uKHy1N03Km5obJme4UmR6kFR7628v113ae1J13gFuGM=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: DPB1e5OtC7AtKnEB3ctJz07ztrK9hDz5gquf0IK9lBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:9d:fe:3a:2c:e4:4f:82:d5:dd:bd:e5:55:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Apr 18 01:01:43 2026 GMT
Not After : Apr 19 01:01:43 2026 GMT
Subject: CN=c14e8b4a2487ea1f136214460b63d9fb8da36432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3f:8f:1a:9c:17:32:a8:d8:11:08:aa:e3:32:
6a:fc:38:a2:db:d5:34:0a:d6:cc:a6:28:81:96:75:
1c:81:a7:b1:2d:fc:30:b3:e5:9a:06:b7:da:0b:f8:
64:6d:75:b6:0f:ea:90:5e:eb:26:ae:47:76:36:3e:
7c:7b:ae:d9:3e:c6:c3:42:fc:3f:10:20:65:dd:66:
66:bb:ed:e1:58:89:f9:e1:ec:94:18:c7:29:e9:3c:
83:2f:03:73:ec:17:db:99:19:78:22:a9:42:ab:1f:
1d:55:01:c0:59:e4:eb:6c:11:89:19:fc:32:c9:b2:
3d:a4:12:03:a9:1c:94:42:65:e2:c1:6b:fb:9c:94:
39:1d:b8:b8:28:44:51:77:4a:96:39:78:54:4c:dc:
61:79:18:3c:34:a3:75:f3:1c:0f:c9:7f:70:dc:49:
9a:8d:5b:44:56:b8:36:cf:7b:98:6b:60:45:09:19:
52:b8:ea:70:02:f5:19:39:35:f7:9b:e2:80:58:af:
d7:3e:71:bb:33:9e:43:c0:58:9b:1d:3e:ac:fa:51:
89:bd:3f:4d:e7:c6:27:c6:1e:8d:30:09:90:83:35:
b8:13:e0:f0:b1:2c:54:7d:73:ef:8b:53:f8:78:ea:
5c:b3:d0:52:d4:c2:b2:d0:70:f8:cd:36:ff:75:1b:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:8B:4A:24:87:EA:1F:13:62:14:46:0B:63:D9:FB:8D:A3:64:32
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:27:0e:85:aa:f9:fe:ed:7b:56:e5:b8:64:3f:0e:4f:e0:
36:d6:38:20:3a:bf:3b:ba:c5:16:89:44:77:38:90:f0:aa:cc:
0f:36:7d:af:54:28:4f:0e:2d:38:b7:b7:c2:c0:f6:10:d8:d9:
ba:44:a7:11:98:26:f0:ae:1f:93:2a:e2:04:a8:e9:68:29:0f:
4d:57:73:d3:31:6e:1b:30:c7:bf:64:c6:94:f1:2a:be:5b:e4:
43:02:b3:a3:8a:5f:14:43:c3:60:cd:40:1d:1b:b9:b3:e2:f8:
07:27:5d:a8:55:de:97:f0:e0:d5:b1:e2:8b:b2:38:35:dd:d6:
c3:8b:f3:50:46:7f:51:d0:57:e6:be:f3:95:2e:39:9c:e9:fe:
84:8f:1b:63:4c:0d:59:ed:7b:b3:a0:fe:71:3a:c0:ca:64:18:
07:ca:7c:67:50:84:62:df:78:f0:84:16:00:09:62:37:12:47:
9e:01:fc:02:e4:7f:99:1b:4c:7f:e8:b0:ac:e0:07:77:b9:19:
0d:b7:cd:e1:41:93:82:83:ef:cf:7a:29:f6:be:82:3b:77:0d:
44:23:48:ad:09:d9:07:01:e1:99:94:3e:9f:d6:d4:77:c9:77:
fd:45:40:9f:f6:a9:64:c9:c6:23:6f:75:a0:e1:4e:50:9b:bd:
45:35:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:06 2026 by rpki-client