Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: O4LgZY7TUQfRAW/waVmrqPpRkAfIIJth40Zg1+V3Q9c=
Subject key identifier: 48:04:72:E7:E0:F3:AB:AC:1A:50:CA:A9:92:44:1D:66:21:6E:87:DC
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 01A08AC3B595173C417FA5E72A9525C1D733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 054D
Signing time: Thu 10 Sep 2026 10:01:16 +0000
Manifest this update: Thu 10 Sep 2026 10:01:16 +0000
Manifest next update: Fri 11 Sep 2026 10:01:16 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: exJtrPUD+CypDn2XIJT4lHPRSVdPltrEdj0gL/PxSLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:b5:95:17:3c:41:7f:a5:e7:2a:95:25:c1:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Sep 10 10:01:16 2026 GMT
Not After : Sep 11 10:01:16 2026 GMT
Subject: CN=480472e7e0f3abac1a50caa992441d66216e87dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:d3:d7:8c:64:3e:6f:ba:45:b1:34:62:c1:
e3:01:71:f5:82:b3:62:ee:5e:22:81:60:82:a9:8d:
42:64:3d:6f:2d:34:3e:bf:60:be:d9:fd:1d:b8:ca:
9b:a0:2e:4c:4f:88:64:1a:2d:27:21:be:e7:fe:01:
d8:08:49:61:8e:47:28:11:24:80:76:94:07:b0:2b:
3d:03:8a:d2:f8:ba:9b:b6:b8:f7:89:7d:34:fe:fa:
8c:cc:2c:a7:a6:4d:d9:38:ed:0f:54:c2:6d:e7:05:
34:df:f0:97:7a:c1:18:25:2c:bb:44:01:16:99:17:
e6:bb:2e:63:01:46:c5:af:42:69:dd:2f:96:1b:4c:
c1:82:b4:35:91:b7:ef:54:85:2a:9d:58:f2:81:b4:
da:e4:0b:ab:70:86:48:35:e5:85:da:30:49:f6:96:
84:73:1f:2c:be:aa:8d:cf:0d:bc:9f:bb:85:0d:32:
76:78:52:d0:34:6e:f1:fb:3b:e4:50:c2:e1:0a:48:
94:e9:e8:fa:aa:a7:fd:3c:cd:2a:76:61:d8:ca:be:
f5:36:6e:04:33:7d:75:16:a4:07:4a:ad:ce:a9:38:
98:5e:87:df:a0:e6:fb:15:98:cf:ad:bd:c6:78:a4:
48:f3:5a:bf:55:94:c7:1f:2f:1c:c2:e6:ea:f7:3f:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:72:E7:E0:F3:AB:AC:1A:50:CA:A9:92:44:1D:66:21:6E:87:DC
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:62:46:b2:19:d3:23:91:de:b3:be:42:be:e3:f2:e4:b5:
fc:f5:ad:8d:6a:d3:cf:9b:fc:44:ec:60:ff:ab:07:04:6a:33:
36:57:66:a2:9c:25:0f:6c:34:4a:2a:79:5b:dc:62:72:30:41:
45:05:4d:58:02:ae:0e:2b:b6:6a:6d:76:19:72:84:82:de:5f:
1a:09:5e:2b:eb:c6:ce:6c:9c:dc:59:c6:7d:25:bb:4b:49:81:
11:6c:83:f7:3d:38:56:e9:93:b7:c9:18:76:9a:ce:f2:ea:1a:
44:5d:7a:7f:70:44:e9:e3:54:24:60:62:d8:a4:65:d6:f6:d4:
84:0d:a1:50:2c:17:2d:ba:f9:11:f1:37:95:5b:31:ed:95:8d:
1b:b2:66:c1:41:e5:a9:2c:7e:17:f4:27:41:c0:f8:14:7b:49:
61:82:63:1c:ad:0a:8f:e1:f5:2d:17:d7:1d:67:76:88:e0:a2:
a2:e4:d7:d9:53:c4:c1:05:48:71:71:57:61:2b:2a:e4:59:40:
25:8d:65:a6:03:d0:75:09:9f:80:a8:b8:fe:9b:69:1f:7c:c0:
65:1d:83:39:6d:76:9e:c0:03:d7:62:7c:71:a0:a2:cb:db:bc:
36:d9:c3:e8:c3:84:77:58:d6:2e:ac:33:3d:73:4e:02:49:b6:
3b:d9:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:11 2026 by rpki-client