Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: d1E+BBy5mwElstH5ZMoT646MPcOWcU21a9fA4UR+Ikw=
Subject key identifier: AB:2D:8E:9F:43:77:58:77:A1:77:D5:9E:25:E7:70:0F:10:A8:ED:57
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 019D37C0EE0DDB48576D8488CEEF7F5EA8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: mk9FoHtrLbDMqhyHTcDKHNuv37k.roa (hash: +ODYm11fXrZNctf9Tic/a7meV/r5t53Msv62thVJdV4=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: OX5nA+xhPLiRIaVQHlx7/g5/pZKuwnoD+imOpzM0EOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ee:0d:db:48:57:6d:84:88:ce:ef:7f:5e:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=ab2d8e9f43775877a177d59e25e7700f10a8ed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:98:96:ab:2f:48:00:f6:16:52:d0:63:19:
45:89:6a:3e:66:70:fb:b5:4f:a8:78:cf:0e:48:3c:
6b:db:d8:8d:35:c5:91:1c:14:95:82:d8:8f:52:fe:
13:81:29:3a:20:45:9c:5b:06:3d:de:18:12:06:aa:
c7:0f:f5:ff:89:c7:55:56:cd:11:38:30:92:a3:92:
d0:7d:38:09:a6:b6:de:1c:80:2b:cb:82:b4:e9:f7:
51:d6:e4:72:90:03:91:b7:5f:98:02:38:7b:aa:58:
6c:43:85:2b:f4:4a:49:34:09:14:92:93:5b:5f:46:
8c:17:8c:21:39:a5:51:43:11:99:9d:c3:84:1d:e0:
d8:c0:02:4a:34:c2:8f:f4:1c:7b:8c:84:39:fa:31:
04:13:78:12:fe:b4:03:c4:79:0d:ff:c3:2e:a9:94:
98:d4:3b:a4:fd:50:25:89:dd:69:c6:9a:3b:35:66:
da:d0:85:ad:69:09:d7:03:e7:40:9b:01:df:49:23:
d2:69:df:4f:db:a9:8e:cb:8f:d1:9f:2a:e7:a8:f0:
73:97:f5:e6:6e:8d:1b:72:cb:2e:49:a3:6b:48:56:
83:0e:3d:b7:e7:b0:72:bf:8e:d2:12:57:1f:c4:18:
94:aa:5b:36:c4:c9:ab:6a:86:d6:3c:a9:ec:0b:bf:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:8E:9F:43:77:58:77:A1:77:D5:9E:25:E7:70:0F:10:A8:ED:57
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:d5:36:dc:61:e3:44:60:a1:a9:24:be:f4:0b:57:ce:da:
31:8c:86:3f:78:b4:12:ad:41:46:39:4e:da:ad:c5:88:4f:1d:
05:08:a8:ab:87:40:b2:27:50:7e:01:f4:f4:27:70:db:c0:1b:
fd:15:91:34:e1:45:8d:3a:ea:82:ca:bd:7a:35:bf:e2:eb:fd:
f6:b4:2c:ec:08:41:24:0a:13:b7:0b:54:ab:3d:98:ac:0a:27:
28:75:53:48:2b:aa:d0:88:a7:ef:d4:12:ed:ef:0d:4a:39:de:
8c:2d:23:73:50:39:38:b5:db:7d:a8:1a:42:41:72:01:3c:e4:
0b:e1:03:7e:72:82:e3:3b:17:84:cb:26:a5:e5:1f:c3:e1:64:
20:bc:00:41:aa:5f:33:9a:ee:5b:4c:9f:cb:b7:cc:4e:00:12:
61:bd:e5:06:f3:fb:af:87:c8:d4:97:74:17:53:89:b0:45:ae:
6c:f3:4c:44:2e:8a:45:0f:fa:cf:8f:b7:be:a9:58:fe:3c:0e:
3f:50:bd:3a:aa:ba:20:90:c8:dd:8d:17:7f:a2:00:22:e9:3f:
aa:6f:eb:9d:57:2b:07:c8:58:5c:ab:f6:62:b7:a6:a5:4f:c6:
f9:48:0c:64:a7:e7:33:9a:01:94:62:fc:d7:9e:b1:77:75:fd:
a2:47:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:51 2026 by rpki-client