Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: rXC+mk8fBOXsJb6k3a4g7pbNWz2U3Kl84DDzGuJNwqY=
Subject key identifier: 18:03:87:32:42:E0:04:28:DF:DB:EB:50:09:47:92:FB:30:78:8A:AC
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019ED507BF74CFC047E47E7C551F7127422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 037C
Signing time: Wed 17 Jun 2026 10:01:54 +0000
Manifest this update: Wed 17 Jun 2026 10:01:54 +0000
Manifest next update: Thu 18 Jun 2026 10:01:54 +0000
Files and hashes: 1: UR53OvR6lP83MQVG_HiJaUyZZxg.roa (hash: uKHy1N03Km5obJme4UmR6kFR7628v113ae1J13gFuGM=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: KmrV+EKj4ryM0FVi8TbgoecXjBE3mf72Y/e4aiKgZDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:bf:74:cf:c0:47:e4:7e:7c:55:1f:71:27:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Jun 17 10:01:54 2026 GMT
Not After : Jun 18 10:01:54 2026 GMT
Subject: CN=1803873242e00428dfdbeb50094792fb30788aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:f6:6a:4f:d1:4a:b6:8e:0a:24:a3:e9:74:
93:2a:08:aa:79:05:df:ad:77:96:fc:b5:eb:10:1d:
5a:94:08:a5:54:2f:be:57:dd:d6:c7:ad:e2:6f:f3:
20:16:4f:a2:4f:77:81:96:47:e3:c6:ad:12:71:23:
4f:3c:65:47:3f:8f:41:f6:a2:0c:8d:f5:fe:b3:7a:
55:f1:e3:8e:d0:cb:34:15:9e:2c:83:99:f5:61:80:
a0:08:af:48:e8:03:5f:6b:f8:1c:ce:44:52:76:ab:
0b:97:c0:47:2b:3a:9c:0c:d2:7f:aa:aa:9d:19:e7:
77:d9:8d:e1:6a:4c:3b:7f:cb:33:35:c4:3a:2f:43:
31:fa:87:4e:8b:f4:1f:09:b6:da:39:a5:44:aa:33:
77:5d:e1:03:15:18:bd:a8:78:99:0f:97:9b:c7:8f:
87:89:3e:5a:20:c3:e2:89:7e:b8:ec:af:e6:f8:30:
49:17:37:87:6f:8b:82:3f:05:23:37:d3:e8:1a:96:
27:0f:68:be:77:f0:d8:af:0b:16:3e:51:66:25:77:
3c:26:29:b3:35:33:e9:94:b5:a1:7e:4c:41:24:82:
45:4d:85:fc:b5:97:7d:84:5b:7e:12:4e:b8:0f:17:
9d:af:80:20:82:9d:c1:22:2e:30:af:64:27:0b:64:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:87:32:42:E0:04:28:DF:DB:EB:50:09:47:92:FB:30:78:8A:AC
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:e4:51:22:0d:7e:d2:4f:2d:5e:c5:56:4b:39:8d:22:3b:
75:c3:6f:a6:75:b7:06:82:aa:8b:0d:8c:55:0a:4c:6c:71:c6:
3d:6d:6c:ef:0d:81:09:7a:01:93:4a:ae:91:d7:3b:a3:47:47:
0d:36:98:5d:15:ce:30:00:7a:c3:83:2c:5c:41:02:d4:67:95:
54:b4:25:c9:13:95:68:17:6a:90:a5:9a:4f:b0:c3:d2:46:1b:
9f:71:e2:73:62:12:cc:8a:f9:39:77:de:c1:5e:9c:1f:71:ce:
98:19:f8:0f:00:6f:e4:b1:eb:89:f3:7b:be:f3:ba:85:02:b3:
0b:07:d8:94:29:53:f4:56:15:93:9b:7d:4f:d6:67:60:5f:78:
c7:ec:b1:1b:67:7d:bf:af:69:85:29:50:07:84:70:04:a1:e3:
01:ec:44:b1:ed:c6:ab:cc:04:7a:fc:6a:6c:e3:4f:58:e9:25:
90:7e:46:ac:1a:4b:16:f8:27:f7:12:56:81:6b:74:eb:27:88:
7c:78:02:7a:3c:e3:7e:a7:38:fc:14:cd:16:a2:07:d6:63:74:
24:8c:ab:3f:02:70:4c:0b:e3:e8:51:4a:c8:17:96:5a:90:99:
da:26:03:9c:30:2f:9a:b1:10:0d:61:56:e1:81:00:f5:42:02:
c7:80:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:48:39 2026 by rpki-client