Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
File: og1pGrGc3PKKmJbL9aegr0uWHpg.mft (raw, json)
Hash identifier: AAhKTm/aQ657Z+spfI4ZAoslcMu5esjUY7VMdPxHVWE=
Subject key identifier: E4:80:5E:9A:85:34:F6:AF:17:F8:3B:B4:8E:C8:3E:F4:D8:11:B5:94
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A0DBAA0BA3CBE0314FADFF29F874467B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 03:02:29 +0000
Manifest this update: Sat 26 Sep 2026 03:02:29 +0000
Manifest next update: Sun 27 Sep 2026 03:02:29 +0000
Files and hashes: 1: 6ooBKqODZG-Sfj_comNyd2sFbho.roa (hash: 5M67xR2rRGTfh2U+1vfNIVWM6nUiRi28sSM5j9PI9Ko=)
2: 7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa (hash: nAtI6W4M1c0vsQcQPICfweTzeaicv4tPcI6rzxIYt3U=)
3: Ht4gLytEcp_KuBqBAxhc4TGmrqY.roa (hash: Ku7KdI3THuaF+2J+NEcq3D/LPC2M+x1PZP/Vfd+uHGA=)
4: IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa (hash: OO25rjwfSavJiJbGapEYm9624aA5wv7SmTNCcKdZxlc=)
5: TT8-biGj6CFuxERFdHhLIBjNePs.roa (hash: FQ8jfBT4/96D/e5hkPSQmC2cdfeej56HOqwfNbEnQl8=)
6: jLICgzGjZbg6ih5YbC1LTWsuPhA.roa (hash: 0iWQKi/+XiZtP0YMahcmPIoWNvYsjSIN8AISUMTg1xo=)
7: lrxW-68xMEjuQOGQtmcz2oD98IQ.roa (hash: Aj4NQFWqkGRsVLSnM+GlHUa3QlgiT+8/Rte7ZwlNNS8=)
8: og1pGrGc3PKKmJbL9aegr0uWHpg.crl (hash: /B5gnM4u3Ijp/Fs28xpZhHAdeO09ILyx0ODPeBT55u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:0b:a3:cb:e0:31:4f:ad:ff:29:f8:74:46:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Sep 26 03:02:29 2026 GMT
Not After : Sep 27 03:02:29 2026 GMT
Subject: CN=e4805e9a8534f6af17f83bb48ec83ef4d811b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:bb:89:9b:06:a8:4c:4b:58:de:de:2d:48:
a1:0a:b3:e3:a8:00:13:c5:05:50:c2:ef:0c:92:77:
56:16:8e:bd:28:65:66:9e:b8:8e:7b:3e:0f:df:6a:
d8:73:86:3f:22:b7:e2:05:24:15:97:8b:00:e1:6b:
65:1e:2d:9a:89:f9:99:83:7a:3f:7d:9f:0e:94:61:
4a:6a:d3:ed:f1:7a:fd:b1:22:be:dc:b7:27:92:45:
23:4b:13:ae:ff:e0:f4:35:9c:34:21:a2:47:7e:b0:
42:56:94:41:72:b7:1e:13:b3:fb:ec:68:b1:fa:8f:
72:f2:d0:26:f9:8c:19:18:81:e6:12:a0:eb:e5:f6:
0f:ae:01:50:a7:91:24:f1:4a:d4:58:e6:3c:cd:55:
2b:49:f0:7f:75:2f:0c:91:c4:94:ed:29:dd:4f:2c:
60:1b:58:55:00:86:fe:a6:13:61:56:55:77:20:d8:
b9:b5:02:86:30:59:ca:0f:7e:15:b0:4f:a4:cb:33:
c9:c2:3a:cb:95:c6:81:96:a3:fc:cc:ba:ed:5c:30:
80:ca:52:a6:d6:2c:b5:35:13:20:fc:70:18:1d:15:
39:1c:d9:4d:41:3d:65:6c:fb:95:82:f1:f5:59:82:
47:52:9e:9c:a8:6c:2d:17:a0:51:3d:f3:02:0b:f3:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:5E:9A:85:34:F6:AF:17:F8:3B:B4:8E:C8:3E:F4:D8:11:B5:94
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:85:aa:64:b6:c5:15:26:da:07:3a:74:9b:d3:e7:15:90:
b2:aa:32:94:59:4d:a3:c5:ff:3a:24:44:7e:48:50:a4:a0:ad:
37:c9:37:c4:03:0f:36:af:ac:62:a5:21:80:68:06:ce:9b:fe:
5a:04:7b:b1:6e:b4:5b:bb:d8:74:e5:7f:6f:28:c6:80:09:c3:
e6:f6:31:fc:04:f1:d4:5a:40:e5:bc:80:c2:23:ba:23:58:95:
1b:78:33:72:51:86:bc:9b:c9:11:1f:08:e8:b0:76:8f:22:5c:
93:02:59:c7:9f:27:b4:dc:52:6b:d8:f3:90:d3:6e:79:56:1e:
94:23:9e:e1:fe:6c:ba:94:1d:c7:4c:35:fe:6f:0b:57:c4:8d:
e2:85:a0:96:fb:8b:1b:1d:29:83:4e:70:61:a7:6e:a8:d9:5f:
b9:cf:93:98:49:55:47:57:17:80:8c:d2:ff:a1:98:c8:39:be:
e9:2e:bc:0b:7c:f4:88:e0:e2:d5:cb:fe:ee:2a:8d:2f:19:9d:
dd:15:84:53:18:f9:22:ab:2f:d3:06:05:2b:26:f9:16:1e:51:
1c:3c:f8:80:69:03:ad:c4:c1:33:f0:b9:e8:6c:a7:a4:60:9b:
91:24:04:cb:46:1e:83:03:ed:cf:11:83:61:19:a7:1b:87:fc:
86:02:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:40:48 2026 by rpki-client