Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: Xc7lqbo1jSaXEYjs7/IpQnOJOI2vwk2icWE1EqN/wL0=
Subject key identifier: 9B:CA:62:48:24:5F:1C:9B:D6:11:8F:EB:93:21:7F:53:AE:1F:07:94
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 019FA11658D607F0400216D17AC4B726F36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 04D4
Signing time: Mon 27 Jul 2026 01:00:24 +0000
Manifest this update: Mon 27 Jul 2026 01:00:24 +0000
Manifest next update: Tue 28 Jul 2026 01:00:24 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: 2bIJI6KuscuHMhlHAB3cqgu9x3n0ZCK0USc0mD+N3mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:58:d6:07:f0:40:02:16:d1:7a:c4:b7:26:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Jul 27 01:00:24 2026 GMT
Not After : Jul 28 01:00:24 2026 GMT
Subject: CN=9bca6248245f1c9bd6118feb93217f53ae1f0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:3d:ce:71:55:c5:90:71:f9:78:53:8e:8e:
3d:78:4a:13:e6:14:3f:f7:8f:b2:2f:35:47:77:ea:
33:55:4b:85:84:5b:51:53:8a:df:8f:37:5f:8d:92:
eb:e0:82:c2:a8:b2:96:ee:f0:29:65:43:c2:f4:97:
5f:35:15:75:86:e5:3e:16:20:be:9c:dc:b9:aa:d0:
54:68:60:1b:08:e4:7f:d5:7a:fd:f1:3e:e8:89:77:
3e:ba:2c:7e:49:bc:1f:5e:dc:68:7c:f8:0d:72:ee:
72:a7:47:a6:7c:b0:fe:91:2a:76:2c:97:c7:40:7e:
b2:ef:a5:04:1d:62:86:89:ac:21:5e:ba:eb:e1:72:
13:09:9e:75:b3:f6:4b:6c:95:4b:2b:2a:a4:82:5f:
66:b0:5f:21:24:94:b0:ba:5a:e8:55:2e:1e:39:15:
57:7a:97:d3:40:ea:09:a8:5d:d6:25:84:de:f2:39:
d2:4c:e7:52:12:a1:65:ea:ac:1e:8f:2b:5c:6a:17:
69:23:f8:e5:f3:09:2a:f9:60:e0:e5:a0:da:53:cb:
ef:55:b7:58:18:88:62:a5:f2:fa:24:cb:9a:be:26:
85:04:af:3c:4b:2f:4e:ca:60:2d:f5:87:14:3b:8b:
d7:8d:d0:09:88:fb:bf:4e:f6:89:40:b2:9f:61:6f:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:62:48:24:5F:1C:9B:D6:11:8F:EB:93:21:7F:53:AE:1F:07:94
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:3b:1e:7f:37:58:af:29:81:80:8c:b7:0e:b7:8f:33:4d:
c4:6b:7c:21:6a:d7:ee:2b:d0:c9:dc:38:ae:63:a6:0e:8a:52:
f3:1d:bd:ce:c6:f8:50:f1:47:fe:0a:1d:57:ab:f6:aa:56:b8:
1b:75:59:a6:a1:51:31:cb:28:f3:db:7b:01:ae:ba:8f:80:af:
8c:84:41:b7:36:db:d7:1a:e8:ce:b5:11:fe:d2:0f:e1:3e:8e:
82:eb:f6:89:7e:19:d7:81:0d:cc:50:f7:2f:bd:19:27:a6:a7:
a1:e4:a2:4e:9f:cd:40:47:b4:5f:0a:dc:a7:ba:9f:9a:62:7e:
f2:6e:b7:2a:e3:bc:a7:96:c7:ae:06:c9:f9:09:32:9b:8a:3c:
d1:71:95:a6:3c:f4:b9:81:96:68:e2:9c:27:2e:7d:89:f2:f5:
f8:50:73:f5:82:2a:fc:a6:06:e4:c8:5f:ab:14:62:54:7e:51:
d0:bf:12:26:91:04:e0:87:68:65:a2:98:90:bc:50:b2:d3:2f:
fa:ec:02:af:14:d5:54:9d:1c:3c:65:a9:48:17:35:21:b2:5b:
fe:e4:a8:71:74:6e:d0:b6:40:5c:96:24:46:e5:63:d7:da:17:
92:93:37:e7:00:d0:ba:7b:f5:26:30:c8:f5:bc:be:a9:c7:4d:
fa:5e:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:47:38 2026 by rpki-client