Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: b9NiSFV8KRK7YnIvElLlLj7txhIRbTi9p8NIv7kZ4tA=
Subject key identifier: 57:39:2F:B1:92:4C:8C:94:39:05:B1:2E:9C:90:0E:7B:17:D7:AA:2C
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019CAE6C01DC84B15DA64B72CD72C3AF6C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: FE
Signing time: Mon 02 Mar 2026 12:00:39 +0000
Manifest this update: Mon 02 Mar 2026 12:00:39 +0000
Manifest next update: Tue 03 Mar 2026 12:00:39 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: dj4FmI4OIkqW9jPt4JMrWSrUqpvgnDx+X5KpBAK1Djw=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:01:dc:84:b1:5d:a6:4b:72:cd:72:c3:af:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Mar 2 12:00:39 2026 GMT
Not After : Mar 3 12:00:39 2026 GMT
Subject: CN=57392fb1924c8c943905b12e9c900e7b17d7aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:cc:7d:a7:7b:9f:00:90:92:5c:5a:dc:89:
e9:74:ed:0f:12:37:cf:ff:1b:13:01:0c:7a:03:9e:
3b:9d:c6:5d:17:54:e5:b7:80:b4:6c:56:c7:1d:16:
58:3c:d1:20:bc:ea:b8:52:05:22:40:9a:8f:e1:2e:
77:70:c4:54:ec:4f:d3:2b:08:26:c3:b5:9b:6d:52:
a1:bf:b2:4b:59:11:74:0f:44:39:dc:60:d3:27:49:
83:5e:24:97:20:5f:eb:44:39:39:95:33:fa:a8:d9:
37:66:85:9c:07:ca:d1:15:53:22:80:9c:5a:c2:fe:
af:42:2e:b2:b5:42:1b:13:c3:10:88:b8:d9:41:95:
41:e3:8c:82:fb:7f:4c:65:f2:ae:fa:c9:c3:1c:65:
47:a3:7b:2a:9a:dd:c4:35:73:e8:d2:a4:1b:2b:bf:
3b:3a:b2:79:95:98:87:4b:e4:e9:ce:89:2a:f8:37:
ad:96:f5:90:a7:1b:cb:bc:d2:bb:47:f3:e2:25:f2:
7d:f4:18:ea:1d:cd:4a:fc:b2:d5:02:c1:7f:1d:67:
f7:4a:fd:0a:4c:20:41:1d:f1:3a:f1:d9:41:74:14:
aa:1c:15:e3:69:11:71:1a:0b:e5:57:b0:79:3a:b3:
e7:3f:ef:43:54:c1:d9:68:67:92:e4:ad:fe:fc:13:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:2F:B1:92:4C:8C:94:39:05:B1:2E:9C:90:0E:7B:17:D7:AA:2C
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4c:cb:ce:17:f7:1d:91:57:60:8c:7a:ed:2f:7a:af:34:85:
1e:4e:b5:3a:5f:0c:d3:c2:e5:b1:8d:6b:64:e1:b9:92:1d:22:
28:79:08:98:be:77:74:6b:58:c0:24:42:67:6a:5a:c3:c5:07:
bf:ce:cb:12:02:75:dc:ef:cd:6b:1a:4a:54:4f:4a:47:67:18:
c3:1a:83:5d:e0:5b:16:67:d7:c5:41:37:03:21:0e:85:31:07:
19:ef:64:1d:00:db:4d:b4:cd:d5:56:f6:8e:25:7b:ec:c5:9a:
c5:d3:a2:75:32:a3:78:63:d9:a8:33:b3:c5:4f:74:ac:d9:ad:
c4:a7:23:d1:11:8b:09:82:72:a3:07:e4:7e:5b:d2:ca:be:48:
28:ac:71:58:55:1f:00:31:9a:26:bd:d1:ea:8e:df:68:66:01:
59:90:82:68:98:23:b3:5c:a7:3b:d6:62:d4:7e:d8:68:ee:96:
64:fa:32:5b:05:41:9c:d4:15:b8:b1:c2:1e:81:44:97:a7:4e:
41:89:48:b1:99:c5:63:63:7b:94:69:f8:fc:50:7d:0b:68:59:
da:16:17:d2:19:a2:d9:2b:5f:c8:32:9b:98:bf:da:a4:6c:32:
35:f7:c1:96:8a:27:b3:fc:18:52:93:20:fa:cd:dc:d1:d9:c8:
f1:2e:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:42 2026 by rpki-client