Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: 9D8nllmp9i+VojDmCPWofrdp1TvsxMn6PBQtAPFSMeE=
Subject key identifier: 03:BA:07:F2:E4:47:D6:82:E6:45:C0:FD:DF:32:35:94:AD:5E:1E:6C
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 01A0024AEF8D32AD9CA75B2745F987838DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 18C6
Signing time: Fri 14 Aug 2026 22:01:00 +0000
Manifest this update: Fri 14 Aug 2026 22:01:00 +0000
Manifest next update: Sat 15 Aug 2026 22:01:00 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: SpZpC1Ldwbf/3iMgiIuakposDkn02XooFc0tG5gU1gw=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ef:8d:32:ad:9c:a7:5b:27:45:f9:87:83:8d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Aug 14 22:01:00 2026 GMT
Not After : Aug 15 22:01:00 2026 GMT
Subject: CN=03ba07f2e447d682e645c0fddf323594ad5e1e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:2e:60:43:a1:06:8d:be:47:4c:29:00:74:
70:71:f0:6b:14:bd:e0:cc:ad:68:e8:6a:68:d3:7b:
c6:40:ee:1a:cc:86:09:8f:96:da:af:dd:32:42:c5:
81:fa:66:45:49:e3:fc:08:1c:4c:e8:70:df:31:53:
d3:a5:bc:f5:2f:92:cb:7d:b7:98:f5:4c:e2:1b:2f:
b7:29:59:7c:75:5a:8d:b3:9b:56:8c:be:2f:42:77:
39:64:66:79:eb:c5:53:a6:01:4d:f3:8e:12:72:0d:
da:8c:30:ba:3b:53:a7:c4:7c:23:61:f3:3f:a9:3a:
06:46:17:94:e3:24:54:2d:ec:d5:8a:f9:2c:fe:df:
c7:5c:9e:6a:1f:53:14:a9:9b:a5:28:3f:9e:3f:e8:
97:01:7d:cd:d0:97:80:2a:02:ca:2b:ff:00:76:20:
e6:cc:d1:bd:4b:85:3b:3e:28:97:ce:59:3e:b1:96:
e9:72:0b:42:b4:c5:11:f4:dd:7e:d8:e9:91:2a:c1:
3c:db:83:1b:b7:ab:95:2b:3d:7d:fd:b7:fd:1b:f0:
a4:e7:0f:2c:2a:ba:86:63:bb:8f:89:d6:67:a3:4a:
2e:a1:7d:3b:d8:de:c7:e3:e0:d6:7d:16:76:fe:69:
4d:3a:5c:16:fd:93:b2:59:cb:29:79:cd:75:92:e1:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:07:F2:E4:47:D6:82:E6:45:C0:FD:DF:32:35:94:AD:5E:1E:6C
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:49:3f:c1:05:e8:7f:95:e1:ba:85:41:68:1e:2d:61:aa:40:
a3:a9:5e:a7:52:5b:67:4b:10:2c:c2:25:4f:25:7d:9d:b7:fc:
b6:8c:94:68:21:b6:3b:e3:42:eb:27:e4:f9:ea:e4:d5:55:97:
a2:ad:2f:63:f1:13:54:d6:91:ca:54:5f:8b:80:40:92:69:6c:
b3:1f:d5:32:fa:e7:bd:fc:70:e1:78:5c:1f:75:1e:0b:90:59:
7b:d6:9a:d6:ae:f5:8a:be:6e:0f:5d:92:68:9c:c7:96:b8:d4:
4a:86:92:90:7a:07:94:b0:78:57:93:fa:89:52:99:60:b8:07:
39:db:d4:d7:ea:12:e9:5a:9d:4a:bb:fd:97:f1:eb:03:5a:8d:
60:3d:4f:4d:46:7d:c7:38:bf:05:37:b8:39:78:10:cc:83:66:
9d:09:be:33:aa:54:b4:ea:85:53:09:b9:09:0a:f2:2e:2e:09:
f6:29:93:d8:08:ee:32:89:a3:81:69:84:9a:65:91:1f:a1:29:
21:41:de:ba:1e:8a:4b:a1:de:b3:aa:bd:98:16:4d:10:95:30:
eb:49:33:9c:d8:84:6a:21:b6:0b:67:da:15:24:07:b5:13:4b:
69:e4:2f:53:dc:b8:e3:78:1d:fe:1f:6e:1a:6c:93:e6:a5:6c:
b6:16:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:46:12 2026 by rpki-client