Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: P7kkxcxg+VvkFng28XkimPZSn6s/gTRW0JhLUc4Edos=
Subject key identifier: E7:5B:10:90:09:20:7B:70:44:F2:4A:5B:A4:8D:62:5C:A3:8C:2D:1A
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 01A0EBC09FE2941544FE88675E5354CE95F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 0330
Signing time: Tue 29 Sep 2026 06:01:04 +0000
Manifest this update: Tue 29 Sep 2026 06:01:04 +0000
Manifest next update: Wed 30 Sep 2026 06:01:04 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: 5kTfzwjzgoUvhxsREa6wJKvXXOWuuhkHRRXzBMeAc64=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:9f:e2:94:15:44:fe:88:67:5e:53:54:ce:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Sep 29 06:01:04 2026 GMT
Not After : Sep 30 06:01:04 2026 GMT
Subject: CN=e75b109009207b7044f24a5ba48d625ca38c2d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:e7:be:8f:c4:bb:a0:17:bc:e9:b0:e5:88:
6c:32:18:b5:9c:01:97:47:7d:41:9f:dc:9f:01:68:
1f:c3:d8:97:f0:83:2a:79:d3:b0:f8:43:b6:1e:f9:
e4:62:1a:aa:d2:0c:cc:45:13:fb:da:9c:2b:41:9e:
36:52:15:ff:28:78:bc:f8:de:dd:7b:ad:56:f3:64:
3b:75:34:7a:05:a0:da:c6:4a:40:2c:2c:12:f7:6d:
32:df:4c:3d:13:ec:d2:08:78:a0:17:ee:cc:fd:f4:
5f:18:88:cf:1b:20:e9:30:fb:18:ff:74:a6:ee:e3:
aa:e1:8b:a8:24:33:14:64:ce:c3:5b:fd:bb:cf:a9:
9b:e1:81:4b:16:4f:44:ed:1e:e8:ca:36:f2:9a:9e:
ca:c5:ba:86:90:02:7a:98:c5:9c:f7:19:7f:6e:92:
ab:7f:2a:cd:10:54:16:7a:9b:67:ae:76:dd:f8:8d:
96:22:6f:af:23:29:94:54:22:ae:e5:52:f3:a5:06:
0d:5e:42:cd:41:57:c4:f1:31:10:67:72:07:3b:c7:
0b:e2:f5:be:d3:0b:04:bf:ae:56:01:e4:d5:8a:0f:
54:82:af:a8:e1:87:37:6b:ed:91:f3:d0:69:c3:dd:
17:66:c8:03:69:97:74:0c:22:66:84:53:79:3b:c9:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:10:90:09:20:7B:70:44:F2:4A:5B:A4:8D:62:5C:A3:8C:2D:1A
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:a0:21:4c:d4:5f:b2:12:50:e2:d6:5a:ff:06:8e:04:2f:
5a:d0:7a:e1:8f:9f:f3:02:ac:0a:3f:00:48:54:e2:09:65:34:
4a:e5:e5:ac:53:bd:c6:ea:eb:a6:b0:af:0d:37:22:00:5d:5b:
97:f8:59:a0:0c:91:2a:82:b9:30:e6:95:7e:9e:0c:fc:4b:e2:
83:cc:6b:e0:6b:ae:fb:00:e5:38:51:8f:e8:a6:7a:fa:e5:b7:
ba:02:fb:9f:9a:8e:dd:10:fe:f1:7f:20:97:71:5b:a8:f3:57:
51:51:4f:23:28:58:4f:f6:1e:80:00:0b:df:1b:93:68:a9:fc:
a4:51:a8:ec:34:2a:14:be:e4:28:24:5c:ff:25:d2:6f:bb:42:
4c:aa:5f:c0:7d:b2:c5:ac:31:7b:29:a6:bc:ef:be:b3:4b:67:
0d:d1:c0:f1:e7:d6:d6:cb:e7:4b:64:ff:45:e0:6d:a2:5f:4f:
59:e5:ab:7e:bf:81:2a:a4:7c:d8:57:a1:28:5d:cd:cb:16:ab:
8c:48:36:37:ba:22:8b:45:a2:d8:1c:8e:27:cd:79:55:32:d4:
c9:ae:c4:e7:a6:0b:2a:76:2d:b8:3f:9b:be:92:6c:8d:31:72:
2a:36:8b:66:84:cf:c3:45:26:39:fe:c6:33:be:56:bd:2d:ce:
23:11:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:25:00 2026 by rpki-client