Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: x8ZjbetAI3m/CqfZaxlBrlv+8FyQ6dtpbTpy1treAvE=
Subject key identifier: 62:7B:C0:7C:D7:5C:19:BF:C2:6B:A8:52:DF:E2:C0:16:FC:C6:CC:23
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 01A17E1851AF7114C3E436FEB17CF1CA5FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 05CB
Signing time: Tue 27 Oct 2026 16:01:25 +0000
Manifest this update: Tue 27 Oct 2026 16:01:25 +0000
Manifest next update: Wed 28 Oct 2026 16:01:25 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: 3U778wLakkRSAuA6SVJRorV+C0pvzp0o/o/A4nPanZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:51:af:71:14:c3:e4:36:fe:b1:7c:f1:ca:5f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Oct 27 16:01:25 2026 GMT
Not After : Oct 28 16:01:25 2026 GMT
Subject: CN=627bc07cd75c19bfc26ba852dfe2c016fcc6cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:39:9a:1f:e5:97:65:67:3d:6b:5e:bc:74:
94:dd:45:3a:16:f3:31:fc:a2:54:55:5e:b2:bf:c2:
bd:fc:45:b0:b9:7e:7b:a6:9b:63:ce:35:c1:21:df:
7f:ae:e5:a1:35:53:97:53:c3:24:f1:c7:dc:2c:28:
02:8b:1b:7e:5f:fd:ef:b4:29:25:b2:f2:a5:6f:ea:
5d:1b:46:26:17:08:0a:d6:5c:48:9c:c9:da:b8:8a:
b4:b7:e2:97:9a:9e:a3:60:54:f8:7f:f0:5b:f5:6e:
a4:aa:51:32:c3:3a:aa:3f:1d:28:68:64:bf:ea:a6:
15:2f:cd:25:93:9b:c3:b8:05:02:fe:9f:1f:06:44:
2b:0d:14:12:92:37:58:57:10:5c:46:63:f1:3b:41:
0d:14:81:0b:a7:e2:85:78:e1:c8:67:e0:e0:9e:04:
20:29:b6:b7:ed:d0:a4:bb:58:85:94:d4:4b:74:1b:
76:57:ab:af:b3:51:2c:5a:86:c1:ed:cd:7b:3e:25:
bb:54:c5:02:ab:a5:8e:b9:bc:e2:d1:d1:81:69:2b:
dc:b2:58:b8:53:3b:80:22:9b:2e:81:3d:af:8d:1d:
59:e7:82:f9:da:30:3f:70:18:3c:3e:b4:9a:ab:76:
d5:0a:5b:67:d5:1d:57:37:55:17:4d:f7:26:68:8b:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:C0:7C:D7:5C:19:BF:C2:6B:A8:52:DF:E2:C0:16:FC:C6:CC:23
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:9f:1c:78:e1:89:1b:a7:45:a8:5e:7b:98:e5:9b:20:ce:
ad:ac:d2:65:b6:13:e4:69:55:d2:46:15:c5:8b:08:e8:97:c9:
e1:2d:ea:6d:e0:17:68:75:2d:b3:b3:75:b4:0a:aa:ad:eb:fc:
9b:08:bd:10:1e:ce:2c:8b:62:8c:40:24:c4:06:41:6f:1a:e4:
08:07:d9:99:7c:10:bf:76:bb:fc:b8:51:cc:e0:72:63:75:45:
37:fb:bd:7f:c5:f8:97:72:5d:83:19:13:c0:d9:d4:46:bb:40:
a9:48:37:69:3d:50:6f:97:66:ed:3a:db:c6:d8:82:ca:27:01:
a6:39:78:20:df:7d:4e:ff:f0:d7:38:37:ba:7a:56:0d:fd:f8:
15:16:0a:82:21:a4:d0:27:e0:41:02:68:a2:1f:1d:1d:62:e0:
a0:0d:fc:aa:2f:3f:6e:67:09:93:7b:3e:5b:84:54:28:c9:35:
2c:1a:4b:c7:85:09:94:ab:69:9d:f9:70:70:d5:c9:ef:e0:60:
c6:36:5a:e3:78:e8:00:7a:10:39:ac:38:db:85:ee:c1:a4:ff:
b8:03:61:25:71:08:97:56:3a:02:6c:5d:f6:20:a3:8b:04:90:
47:de:8a:a8:dc:44:ca:7c:f3:6c:09:c8:ef:b4:fd:6a:ac:12:
cf:a5:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:31 2026 by rpki-client