Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: sVTbgUEFl4Qx8ZlIRpOMxzIKZvxMbWsCD7w/x+z+cTQ=
Subject key identifier: 9F:AB:DD:45:AC:BC:34:D5:16:0F:AB:AC:36:0C:3E:82:97:FA:06:81
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 01A06D5DEA30FDFBBE13FB8398F99966A45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 14AC
Signing time: Fri 04 Sep 2026 17:01:06 +0000
Manifest this update: Fri 04 Sep 2026 17:01:06 +0000
Manifest next update: Sat 05 Sep 2026 17:01:06 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: bXxUI9PFTd4ivYAKhvsEIxQvEZLjAn+XriAZCsqsG3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:ea:30:fd:fb:be:13:fb:83:98:f9:99:66:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Sep 4 17:01:06 2026 GMT
Not After : Sep 5 17:01:06 2026 GMT
Subject: CN=9fabdd45acbc34d5160fabac360c3e8297fa0681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:72:6b:f4:c6:b2:af:61:52:82:ff:7f:23:
03:45:dc:c0:78:e1:e9:1a:35:6c:41:06:78:b1:92:
46:c2:8e:13:c4:9b:13:52:20:11:e8:b2:22:e8:d5:
d4:70:a0:36:94:97:86:7a:57:70:68:1e:be:7c:05:
f1:ea:ef:b7:a0:0a:48:60:07:6e:9f:7a:7c:9e:3d:
01:fa:14:e4:4a:62:8f:70:df:50:e6:fc:6a:6b:ef:
26:0a:32:46:09:47:2c:9b:00:ce:dd:14:ed:49:da:
ee:74:fb:61:14:1b:c8:8c:dc:2f:ec:46:7b:fe:95:
83:f6:2b:c0:90:1f:06:b9:cd:cf:c6:75:df:91:90:
a8:6a:fd:15:f4:bd:f3:30:ad:33:ba:bd:51:b9:50:
bf:cb:d9:96:01:a6:e0:b2:dd:33:3c:03:82:6a:7b:
42:1b:a2:38:3c:44:68:0b:b7:88:3b:56:e2:b9:6d:
27:db:d8:97:8b:94:b6:f8:bb:98:80:32:7f:ad:1d:
9c:6e:bb:02:2c:2a:34:2c:99:f2:9c:38:1d:b9:92:
d9:e8:af:e5:49:3d:1d:26:9d:47:ba:58:1e:7e:47:
d5:9a:62:3b:83:9e:5d:77:db:f1:5c:d1:2e:53:d3:
e1:33:48:b5:64:62:6b:5e:87:4c:25:93:6d:66:f4:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:DD:45:AC:BC:34:D5:16:0F:AB:AC:36:0C:3E:82:97:FA:06:81
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:29:ab:53:db:98:0f:58:ca:9b:72:3e:b2:94:36:4d:ea:
2a:ed:35:b3:eb:3a:be:9b:6a:d7:2c:4f:99:75:5a:0d:d8:a2:
23:54:0f:08:62:ae:47:88:9f:0b:7c:b8:71:14:2d:87:d5:05:
7c:56:95:4b:c6:cb:a9:51:81:a6:cc:0b:1b:8f:0e:46:90:a5:
9b:3f:89:90:b9:1f:37:d4:21:bc:b8:1e:db:e6:ca:f1:f3:d4:
5c:af:f9:31:bd:fb:46:2a:6a:9c:31:da:ce:13:b0:84:5e:9d:
86:d8:51:aa:55:ed:97:a5:34:20:68:09:60:ca:4a:56:20:63:
0d:52:d9:b6:5e:f2:a1:a6:36:e9:82:e6:fc:95:0c:92:30:05:
b2:34:97:e0:b9:b5:b9:b9:e3:14:4e:2e:01:49:6c:0f:e8:b2:
5e:c2:21:ef:a7:75:97:8b:ce:d8:5e:12:cb:30:04:c0:fb:38:
9c:3b:91:fd:3f:4a:9e:92:2d:c0:11:8f:e2:db:94:8a:79:28:
98:c4:48:f7:35:8b:dc:d2:24:6e:a0:c2:f5:ae:23:29:4f:82:
2b:25:c1:2b:58:bc:b8:21:89:9d:92:ee:24:24:2a:c8:92:a8:
d4:2f:05:b5:8f:a9:d3:b8:a9:ff:96:03:79:74:ce:10:bc:72:
78:5c:28:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXeow/fu+E/uDmPmZZqRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjYwOTA0MTcwMTA2WhcNMjYwOTA1MTcwMTA2WjAzMTEwLwYDVQQD
Eyg5ZmFiZGQ0NWFjYmMzNGQ1MTYwZmFiYWMzNjBjM2U4Mjk3ZmEwNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJya/TGsq9hUoL/fyMDRdzAeOHp
GjVsQQZ4sZJGwo4TxJsTUiAR6LIi6NXUcKA2lJeGeldwaB6+fAXx6u+3oApIYAdu
n3p8nj0B+hTkSmKPcN9Q5vxqa+8mCjJGCUcsmwDO3RTtSdrudPthFBvIjNwv7EZ7
/pWD9ivAkB8Guc3PxnXfkZCoav0V9L3zMK0zur1RuVC/y9mWAabgst0zPAOCantC
G6I4PERoC7eIO1biuW0n29iXi5S2+LuYgDJ/rR2cbrsCLCo0LJnynDgduZLZ6K/l
ST0dJp1HulgefkfVmmI7g55dd9vxXNEuU9PhM0i1ZGJrXodMJZNtZvRAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+r3UWsvDTVFg+rrDYMPoKX+gaBMB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo8pq1Pb
mA9YyptyPrKUNk3qKu01s+s6vptq1yxPmXVaDdiiI1QPCGKuR4ifC3y4cRQth9UF
fFaVS8bLqVGBpswLG48ORpClmz+JkLkfN9QhvLge2+bK8fPUXK/5Mb37RipqnDHa
zhOwhF6dhthRqlXtl6U0IGgJYMpKViBjDVLZtl7yoaY26YLm/JUMkjAFsjSX4Lm1
ubnjFE4uAUlsD+iyXsIh76d1l4vO2F4SyzAEwPs4nDuR/T9KnpItwBGP4tuUinko
mMRI9zWL3NIkbqDC9a4jKU+CKyXBK1i8uCGJnZLuJCQqyJKo1C8FtY+p07ip/5YD
eXTOELxyeFwouA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:16 2026 by rpki-client