Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: HxzoR7c8/AiBEfocKsfx9O9n3CEpUGw2h57x7QrygQM=
Subject key identifier: 21:56:8A:10:79:57:67:2C:34:A6:EF:A7:10:BE:F3:7A:65:0D:52:BE
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01A157AFB38B972F5B2397EBBC7B91CF32EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 1AB7
Signing time: Tue 20 Oct 2026 05:01:34 +0000
Manifest this update: Tue 20 Oct 2026 05:01:34 +0000
Manifest next update: Wed 21 Oct 2026 05:01:34 +0000
Files and hashes: 1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: vAaLYdl8lIvhwB42xD9aULGDm46HcLyHFnfeHiDNpi0=)
4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:b3:8b:97:2f:5b:23:97:eb:bc:7b:91:cf:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Oct 20 05:01:34 2026 GMT
Not After : Oct 21 05:01:34 2026 GMT
Subject: CN=21568a107957672c34a6efa710bef37a650d52be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:63:39:ab:c7:e9:e4:02:79:a5:e0:86:f6:
7b:b7:28:1e:df:d0:aa:45:d5:2d:b9:cc:65:8f:e5:
93:2d:22:59:a9:86:a9:0c:97:02:fc:7f:f2:66:3b:
22:1b:32:1a:40:ab:2b:1b:df:75:c5:d1:a1:da:d3:
37:c3:1e:6b:06:02:11:c9:f5:e8:7f:6d:5c:1f:f4:
29:a3:00:72:e4:64:e5:11:1b:28:fe:d8:5a:66:64:
f7:0f:34:59:94:14:13:a4:92:cf:80:96:29:87:6e:
19:42:14:93:1b:fa:be:a0:f9:92:55:73:d7:e9:51:
17:13:e7:37:2f:5a:5e:60:11:55:35:99:96:bc:93:
64:e6:7a:08:00:0c:af:56:c6:e5:1e:14:d2:5a:46:
1d:10:de:18:10:cd:0a:72:bb:7e:cd:8a:7a:18:95:
b5:26:b3:c4:70:7b:d3:f6:07:a2:a9:09:26:b0:ff:
a5:ab:d4:53:5a:ed:6f:1e:59:89:a2:d2:55:db:7d:
4c:c8:4b:bd:1a:23:0a:04:81:76:40:f9:51:dd:ca:
49:29:ec:28:ba:02:e0:38:97:80:0b:bf:53:d6:9d:
cd:9f:dd:e4:81:86:a6:0a:bf:6d:03:d0:18:c7:bb:
61:26:39:37:fa:42:05:6f:1f:9e:65:3b:1a:6f:96:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:56:8A:10:79:57:67:2C:34:A6:EF:A7:10:BE:F3:7A:65:0D:52:BE
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:16:04:90:a2:b4:f3:30:6e:d4:1e:d0:2a:34:d4:c4:cc:3b:
8f:4b:50:d3:85:e9:e1:38:ce:0c:c3:39:4d:a1:36:6f:92:9a:
db:b6:3a:d0:a8:94:c9:6f:2c:69:3e:9a:1d:55:1d:29:9f:74:
33:02:80:8b:71:19:38:c6:83:a7:36:3b:26:67:a6:25:05:59:
59:56:a1:16:ea:bd:fe:67:5e:6e:e2:2c:47:ef:8f:38:57:d4:
9f:7c:c4:81:bc:5c:d2:08:a3:7c:b8:1e:3f:fe:c4:35:17:62:
d2:cd:a2:69:d7:f5:3a:ec:b6:46:94:0c:d1:7e:5e:5b:06:fd:
61:fa:24:84:7e:0b:3e:f7:37:3a:83:e5:03:c9:80:2f:21:a1:
81:bf:d0:fd:89:f5:3d:b4:5d:6b:1a:f4:68:04:81:aa:6a:35:
18:03:3a:96:54:36:97:10:e8:e3:0e:2a:75:30:2e:b5:ca:e7:
30:ff:c5:c1:24:4c:e3:c0:74:30:2c:29:ea:16:0d:c5:35:1a:
bf:4d:a1:58:fd:7a:00:69:8c:94:98:2f:a3:61:be:5c:ff:81:
c0:a6:00:2a:86:14:dd:bd:6e:64:7c:d6:68:57:83:fa:3e:ca:
c5:c7:b5:e0:f0:30:5e:52:0b:9f:96:50:7f:8a:d3:d9:bc:16:
34:ed:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:47:41 2026 by rpki-client