Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: nDWxmyQ0JNdvINKU82pdX+tnb0Uu4ROhi6W6oYEaVfI=
Subject key identifier: D1:BD:DF:08:05:99:B7:63:0E:AA:B2:79:50:67:78:CF:46:6C:D2:6F
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01A155C14C543743D0CE2D00D691F6BEEE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 1AB6
Signing time: Mon 19 Oct 2026 20:01:33 +0000
Manifest this update: Mon 19 Oct 2026 20:01:33 +0000
Manifest next update: Tue 20 Oct 2026 20:01:33 +0000
Files and hashes: 1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: s47tRwnBztT6AR6p/JvluGTSxtkDeDT3cUuZjJCj0hw=)
4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:4c:54:37:43:d0:ce:2d:00:d6:91:f6:be:ee:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Oct 19 20:01:33 2026 GMT
Not After : Oct 20 20:01:33 2026 GMT
Subject: CN=d1bddf080599b7630eaab279506778cf466cd26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:49:57:f9:4f:87:09:fb:fc:5e:05:45:bd:
76:ad:8f:e0:8e:0e:e4:28:97:8b:c5:e3:30:5b:74:
68:38:37:54:d4:a9:66:78:50:3f:7c:0d:0b:cf:eb:
87:62:c1:78:37:d1:0e:b1:64:8f:c8:ba:a2:18:17:
8a:ee:73:0c:44:59:74:2c:97:dc:4a:0c:91:89:a2:
c9:e9:8d:ff:d7:a5:f0:25:50:a8:b2:b2:b5:f1:1f:
3b:bb:7e:2f:76:64:e0:ae:d3:3e:c7:87:09:07:46:
8e:c0:2c:f9:33:9e:5b:f7:eb:eb:00:37:3d:98:8a:
5c:41:10:e5:82:51:57:4f:13:2b:37:89:01:76:10:
da:8f:0f:1f:b0:d5:11:0c:37:da:be:cb:1d:cd:8b:
4e:32:58:af:34:dd:51:7b:0e:38:49:85:51:6f:d5:
64:0c:3f:4b:41:c6:7d:40:61:75:22:a1:2c:75:0e:
29:fb:89:7e:9e:28:27:8d:88:22:67:b7:04:9e:a0:
0e:02:e8:b4:58:96:75:e6:b9:40:38:42:46:2a:37:
97:04:a5:1c:e5:5d:a3:d8:8b:4c:6c:19:c8:75:3d:
31:42:19:d5:5a:67:cc:43:e4:73:ce:32:c5:57:5b:
99:bf:0b:17:67:55:55:f9:79:66:2e:a7:4f:ca:a6:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:DF:08:05:99:B7:63:0E:AA:B2:79:50:67:78:CF:46:6C:D2:6F
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7b:0d:76:ff:62:2c:1f:6f:cb:3a:3c:35:5a:16:86:6f:28:
08:be:3a:b9:9f:2b:50:25:dd:e6:a2:f2:04:ed:3e:89:f0:ed:
b2:1e:fe:1f:1e:14:06:ec:ee:c8:95:60:e6:10:0a:2b:aa:04:
54:7c:b8:9c:03:4a:22:03:23:c9:77:20:35:74:2b:9d:25:03:
9d:d6:6d:ad:f4:44:7d:a0:0d:77:26:f2:1f:67:52:ba:4d:f3:
39:43:c1:99:05:47:ed:f5:92:4d:94:6d:9d:52:55:b9:6b:f7:
8b:84:6e:18:e6:10:b7:71:da:0f:12:b8:82:ff:94:62:41:00:
00:1e:e5:f3:ff:fe:3b:80:a4:5a:58:c5:41:aa:5f:66:42:11:
c8:ff:8e:bd:0d:20:2e:23:dd:98:bc:05:9b:eb:18:0a:bd:27:
65:66:87:02:5f:fb:98:c3:39:56:40:80:1e:5a:01:d0:1c:9b:
e3:66:a4:01:24:76:0f:1c:5d:f2:c4:68:2f:f8:6e:43:e4:cf:
a8:11:f9:b0:16:26:a6:ae:a1:8d:46:42:e8:66:9f:12:cc:3b:
ad:d7:7d:53:f9:8e:a6:c2:34:f3:e0:06:0c:d2:7f:0d:f9:29:
24:cf:3b:b8:2e:3f:d2:72:e9:4a:f0:a6:3e:3a:48:d1:2d:fb:
3c:65:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:01:36 2026 by rpki-client