Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: sG4VNHcTt4U5oH6GBjNKyaAlsVec2vSI5yTGSnckpsk=
Subject key identifier: 89:D9:52:D9:C7:2C:5D:7B:9A:BE:FA:B8:AB:D5:9F:CD:08:F8:CD:55
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 01A13FDE2176189FE1D04055F60A32EC90AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 1519
Signing time: Thu 15 Oct 2026 14:01:24 +0000
Manifest this update: Thu 15 Oct 2026 14:01:24 +0000
Manifest next update: Fri 16 Oct 2026 14:01:24 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: EMHLn7eTUZrd+eHH4s9u4Z+mWyIRlJOxqi+M5JjIp74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:21:76:18:9f:e1:d0:40:55:f6:0a:32:ec:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Oct 15 14:01:24 2026 GMT
Not After : Oct 16 14:01:24 2026 GMT
Subject: CN=89d952d9c72c5d7b9abefab8abd59fcd08f8cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:04:c0:9f:57:db:ca:d7:e0:ec:70:3b:c1:
bd:4a:08:95:c9:d9:b7:a5:77:46:69:61:4a:71:2b:
89:60:76:67:59:27:a0:5a:b6:0c:29:c9:7d:9c:7c:
5e:aa:cc:98:6f:c5:68:08:0e:8c:21:b0:a5:25:e6:
d3:89:15:f9:2a:6d:99:04:34:3c:ab:96:d1:47:8d:
e4:6b:5c:b5:88:cd:c5:01:ef:0c:f6:ec:96:e7:57:
d6:84:00:bf:59:ce:0d:af:1d:77:f3:00:98:45:af:
77:55:59:6f:eb:4a:6b:85:c5:6f:8b:93:d4:5b:db:
47:f1:87:aa:27:8a:73:6b:6a:c3:61:c4:7b:9c:bb:
e2:6a:d4:6c:87:31:38:92:38:83:69:5a:fa:7e:54:
37:26:ad:a6:ef:bd:72:13:c1:79:35:41:73:6b:27:
26:ef:1b:7e:a2:33:aa:f9:87:0e:06:2f:16:86:95:
06:3b:ac:56:95:07:47:8d:70:60:bd:0a:13:2a:32:
1f:9e:7a:80:cc:88:19:f6:6c:5c:65:c0:1a:a9:ce:
c2:84:9a:eb:87:66:8d:17:7a:c0:47:8a:1b:39:64:
73:83:6d:3a:18:f3:c4:16:dd:db:4e:ca:54:da:b2:
3a:24:74:17:f3:93:91:11:07:ee:d0:21:44:88:5d:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:52:D9:C7:2C:5D:7B:9A:BE:FA:B8:AB:D5:9F:CD:08:F8:CD:55
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:63:6c:d5:3f:7d:58:11:09:14:b5:87:60:08:88:c0:09:
c7:b3:03:79:40:f1:ce:e8:4a:00:1d:02:ee:56:62:af:b1:94:
c5:8d:5d:4e:50:3c:31:26:5e:9a:c2:a8:9b:7c:1b:73:1e:04:
12:38:cf:57:3a:b9:25:ca:a1:79:cc:71:db:16:86:32:a0:83:
d0:52:23:3d:54:a7:f1:55:f4:8e:09:b6:79:5b:90:8a:fe:f2:
8d:9c:10:54:c9:63:f3:fe:2d:6a:00:69:13:ce:d4:8b:97:f0:
ce:30:c3:7c:06:1d:cd:70:20:9a:8c:e0:ff:17:69:f6:6f:8f:
fc:b1:2e:0b:77:fe:eb:96:49:1c:ff:6c:e7:ae:4d:54:78:27:
62:c2:6b:8a:94:82:07:77:6e:57:49:ef:35:bf:c4:4a:4c:05:
28:16:30:eb:b5:a8:1c:9c:87:4b:f8:f3:9f:2c:54:06:f3:50:
c7:f0:e6:fc:88:5b:93:d8:56:4f:dd:4c:bf:99:55:79:c4:18:
00:f5:e2:9e:b2:a8:74:33:1d:d5:90:72:10:f1:91:53:0f:7f:
8d:b7:d2:f5:8e:bd:27:95:0d:c8:08:d7:e2:0c:e4:8c:46:64:
b4:97:dc:b7:d7:e1:57:1f:8b:86:5a:95:91:a3:3d:23:d8:a0:
4b:0c:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:10:26 2026 by rpki-client