Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: WenlmC21RyHJ+VRFiDFsP85pIGTzwAH/jh8+skr80Rk=
Subject key identifier: A1:3F:0D:F7:F1:3A:A9:52:12:59:87:D1:54:78:3B:FD:9C:C7:23:65
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019DD01A1AC086942957985CFF7E9A985B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 02AF
Signing time: Mon 27 Apr 2026 18:01:04 +0000
Manifest this update: Mon 27 Apr 2026 18:01:04 +0000
Manifest next update: Tue 28 Apr 2026 18:01:04 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: k0gVsH41OY04viNZoQVIzGm3JSZPPW+5kN2/XSni0f0=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:1a:c0:86:94:29:57:98:5c:ff:7e:9a:98:5b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Apr 27 18:01:04 2026 GMT
Not After : Apr 28 18:01:04 2026 GMT
Subject: CN=a13f0df7f13aa952125987d154783bfd9cc72365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:0c:96:89:af:ef:fb:bc:b4:d0:07:c5:ab:
c1:22:ad:28:50:09:3f:36:eb:52:b7:d3:9e:b9:d2:
78:54:fe:53:18:92:2c:d3:aa:bb:96:68:e2:02:24:
2e:91:bd:ce:5d:85:dd:e2:26:b0:75:8b:78:f9:5d:
d8:ee:23:c7:38:fe:95:63:9d:95:75:8f:52:e2:fa:
bf:e3:d2:2c:6a:be:c7:c4:cf:7c:04:52:8d:07:e0:
44:fb:7d:85:d1:07:3b:dc:c8:e3:64:9d:4a:f9:3c:
c9:87:f4:d3:4f:7a:35:f6:f0:e0:9d:75:4a:45:0f:
67:a8:c2:c3:f2:e0:c3:e9:f3:62:17:53:a9:1a:02:
4c:87:35:39:7a:7c:e2:1d:71:ba:19:92:e8:23:73:
d4:4e:2b:83:e0:e2:d9:ec:f6:1b:bd:cd:a4:a9:44:
22:cb:f7:82:61:4e:d8:6e:ee:d1:53:d3:2f:e2:f1:
77:01:84:92:88:07:33:37:cc:21:16:ce:59:a4:fe:
71:7f:31:95:53:bd:c0:cc:31:d9:3d:be:2e:e4:23:
77:75:93:96:e7:4d:45:58:9f:db:ee:df:ac:ff:ea:
69:89:ad:8a:4d:22:d1:89:b5:e4:ef:ae:55:e4:33:
26:0b:b1:39:69:f4:7a:e8:17:95:8e:b3:76:61:0e:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:0D:F7:F1:3A:A9:52:12:59:87:D1:54:78:3B:FD:9C:C7:23:65
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:dd:55:7c:d8:87:66:a6:0b:80:47:85:e1:3d:41:aa:04:
7f:b0:5e:b7:d1:aa:54:de:15:4d:f4:ac:75:5b:41:31:15:06:
0d:a7:d0:df:36:a2:c7:8a:e8:f3:c5:bb:0c:4b:3f:d9:8b:5b:
ee:17:1e:0d:70:f2:10:09:98:a6:13:fb:17:de:f6:31:ce:d9:
bd:1c:b1:ef:4d:6f:ad:37:13:49:06:4e:a5:4f:76:21:d2:90:
aa:53:85:79:86:db:eb:0a:57:bc:75:6a:4a:fe:2e:0a:df:72:
af:17:a3:81:38:51:a7:e6:bd:91:59:de:cc:70:1f:92:ee:5f:
81:ca:8d:cd:e4:f4:ca:69:c2:8f:55:a1:28:5f:2e:1a:99:b4:
87:a5:37:f4:69:4a:ba:1f:57:0f:4f:47:c2:88:ea:d9:7d:ff:
b4:1a:9e:8e:eb:2b:cd:8a:da:02:09:89:12:a9:7f:9b:40:d9:
87:23:6f:48:a1:69:dd:b3:70:a9:17:33:4b:3b:ee:0c:91:ff:
ee:33:d7:03:05:53:8e:9e:43:9d:82:e0:3a:28:33:20:89:99:
ef:95:66:dc:1c:f9:fc:26:26:e6:cb:f7:b4:84:03:45:98:02:
e9:d4:44:49:48:c1:e0:3d:0d:35:68:06:2d:a4:ba:da:16:d7:
3f:e1:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:56 2026 by rpki-client