Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: yc6B9t4CJOW4wh/aB1khzGlWmoS37KXYLIFxPMRTDkY=
Subject key identifier: 5F:6F:F5:40:6D:E4:D5:9E:93:CB:3A:B0:06:C4:B0:E6:D0:45:9B:0F
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019CE66DAAB5518F15E3D49AE255D118A69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 0236
Signing time: Fri 13 Mar 2026 09:01:12 +0000
Manifest this update: Fri 13 Mar 2026 09:01:12 +0000
Manifest next update: Sat 14 Mar 2026 09:01:12 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: f3/P6Q2Ivz8jUlkL0GzD0GcZIXow04moBVUcmsyfKX8=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:aa:b5:51:8f:15:e3:d4:9a:e2:55:d1:18:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Mar 13 09:01:12 2026 GMT
Not After : Mar 14 09:01:12 2026 GMT
Subject: CN=5f6ff5406de4d59e93cb3ab006c4b0e6d0459b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:5c:a0:d1:c3:3a:96:f0:9d:b2:c4:7e:0f:
6a:d9:c4:4e:10:21:b9:0c:de:32:c2:9e:4e:3f:00:
7d:d3:fa:50:b5:5c:a7:c4:30:74:13:5c:ff:59:cd:
f0:78:1b:63:0b:ed:4b:0e:34:75:e5:41:96:5e:77:
17:d0:b7:30:00:ba:9b:48:95:12:d3:ae:d1:f4:66:
31:88:ba:ba:a6:f3:ba:7b:1e:5a:d9:de:d7:2b:2b:
5a:eb:27:bb:58:a8:12:c0:c4:30:64:72:92:1a:fb:
fa:dc:79:c9:54:9f:89:94:f0:d5:0a:94:9c:cf:27:
b4:35:c6:00:bf:60:00:92:00:39:ca:d6:ce:66:b9:
2d:89:ff:8d:4e:2a:a9:a3:4f:2c:c0:4f:bd:3d:24:
50:a9:a0:a4:43:ae:1f:12:1f:8d:67:a9:7a:7d:28:
5e:f6:ee:53:33:0c:ac:27:6b:33:93:52:79:08:4f:
60:31:9c:d3:c4:7c:ac:32:bc:ef:7a:a3:41:28:4a:
c9:3a:c2:5d:4f:24:c6:46:92:93:39:79:92:b4:e1:
d9:c3:d2:0c:8d:c5:01:7d:64:6c:86:9b:82:c7:01:
07:d5:b6:67:32:6e:94:d3:f6:bf:13:70:50:8d:0c:
da:f2:6c:39:a2:18:ed:22:a2:a5:cf:5c:ea:6a:0e:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:F5:40:6D:E4:D5:9E:93:CB:3A:B0:06:C4:B0:E6:D0:45:9B:0F
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b9:9b:72:96:e1:05:d0:7c:23:e9:ae:82:45:d4:52:3f:90:
f4:eb:65:3b:ce:07:1e:d0:d3:14:fd:0a:80:f4:8b:5c:87:c9:
27:c8:ec:64:57:28:b8:82:b3:f3:27:ae:78:de:78:81:02:23:
ba:47:4d:4e:14:39:e5:2c:57:c6:34:5a:c2:27:43:05:49:8f:
44:cb:68:b2:32:22:b8:cb:47:a8:a1:4e:61:f4:df:44:80:af:
6d:cf:04:4c:e8:13:19:f5:88:b1:0c:98:a2:c2:ce:0f:29:fc:
cd:35:8f:e4:18:2b:3e:d4:cd:08:0b:3d:1e:24:36:72:e1:a3:
d5:14:83:1e:dd:8b:a8:00:f7:6c:13:8b:72:93:a7:f2:5a:bd:
18:b3:2b:b9:4a:0b:c7:9c:e1:df:88:ac:29:70:1f:51:ab:20:
53:b2:00:43:4b:a2:52:1c:32:92:46:c4:ba:6b:ee:c2:2c:4c:
fb:25:1a:9f:da:23:b3:dd:dc:f5:28:9e:b1:85:e9:e0:6b:f5:
f8:64:93:eb:35:27:fb:89:08:9b:31:9d:f8:a6:94:c3:d9:4a:
8f:dc:4b:9a:1f:91:ce:69:bc:7e:aa:b9:75:1b:b6:30:06:0f:
01:50:89:f3:a6:41:bf:d0:26:1b:23:91:dc:05:af:01:5e:41:
0e:43:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:48 2026 by rpki-client