Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: f/zH9FI27LoBpbwaxiaIk9vGgWq/oSueKFkKCL3yCuo=
Subject key identifier: 7E:95:EE:61:95:39:5D:F5:A4:10:A5:D1:F9:B9:B1:E6:50:FD:3E:44
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019FAD1AD73C92383C6F8682AA883F7124B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 028B
Signing time: Wed 29 Jul 2026 09:00:44 +0000
Manifest this update: Wed 29 Jul 2026 09:00:44 +0000
Manifest next update: Thu 30 Jul 2026 09:00:44 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: kiMmsx7IYndPf7wleai5/w8JOysDikk6luO6i0jy1So=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:d7:3c:92:38:3c:6f:86:82:aa:88:3f:71:24:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Jul 29 09:00:44 2026 GMT
Not After : Jul 30 09:00:44 2026 GMT
Subject: CN=7e95ee6195395df5a410a5d1f9b9b1e650fd3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:e6:30:91:52:41:bf:13:0c:1d:62:76:5e:
9c:c6:6e:9e:87:27:89:75:c2:e9:e6:f9:20:83:23:
b1:35:79:77:0c:4d:94:5d:3a:c9:4a:bf:60:6a:9e:
2d:a2:78:2f:d3:a9:65:91:e2:b2:6e:71:91:7e:de:
61:ab:ef:e8:e4:34:94:dc:68:3f:2c:fb:17:9b:53:
e6:45:4a:88:18:4c:82:1d:26:86:22:e7:ba:67:9a:
77:3f:d0:22:53:59:5e:10:56:f6:27:73:9e:0f:05:
01:ad:f0:63:65:ac:ad:64:08:48:47:90:4e:cf:9e:
b7:0e:8f:bf:8c:b1:a6:93:34:70:7b:84:3f:7c:99:
6b:c7:f5:27:3d:b5:89:15:b5:ca:3a:ef:03:ad:69:
9b:e5:5a:8f:92:c3:d5:20:98:95:88:a9:87:41:8a:
47:9e:7e:66:9c:81:57:bc:4f:c1:5c:b0:ec:8d:1f:
26:0d:7b:99:97:ed:e3:e0:e6:6f:61:0f:05:cd:65:
43:cf:2f:3f:a6:60:d8:b5:02:b0:85:f8:44:5b:67:
be:ce:04:a6:b6:89:97:b8:48:dd:42:11:38:44:ff:
87:4e:44:ba:8c:e1:81:c8:a6:b4:12:82:33:27:03:
a0:5b:bc:8b:27:14:84:5e:55:da:d3:53:18:e3:80:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:EE:61:95:39:5D:F5:A4:10:A5:D1:F9:B9:B1:E6:50:FD:3E:44
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:86:e6:ec:8e:09:32:04:fa:f6:19:76:04:da:9a:64:44:
15:0b:22:c1:9b:df:cb:f1:d8:cb:69:74:20:03:ef:5e:63:e2:
f1:d9:b6:44:19:ae:12:b7:05:a5:a5:d8:6a:3f:8d:ad:a8:a9:
b8:72:91:6f:88:ea:3b:21:10:e1:21:64:95:14:1c:8d:93:19:
f8:f0:2f:30:d1:9b:60:04:28:3d:09:3c:10:9e:55:cc:8d:fa:
c8:37:44:79:a7:ca:e1:90:08:98:c0:6a:93:7a:b8:ec:07:ba:
77:bc:75:d8:9e:45:79:b7:5c:ad:be:36:5c:13:9b:0b:fd:fe:
fa:3b:47:d9:2f:9e:03:e1:1c:4b:88:56:b2:93:d4:41:00:60:
ba:82:ee:89:48:f5:ef:df:09:ce:8e:1d:4a:dc:79:e0:44:39:
da:83:ce:e9:5a:c5:a4:dd:69:07:29:1e:f3:2b:b4:e1:2f:c9:
11:2f:6c:1c:f1:18:ce:63:6b:fe:74:ca:cb:67:ed:31:22:9b:
5e:db:f8:86:b1:a9:2e:3a:c1:0a:26:2f:09:89:0d:42:1b:84:
f7:1a:19:82:15:58:30:42:2e:63:69:24:e6:66:e7:d1:b7:04:
df:2a:49:d2:53:4a:ad:cd:43:36:fc:be:29:4d:40:62:72:4d:
ed:6c:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:44 2026 by rpki-client