Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: 2WDs/u3Q0KdjNSQ6DlIXOU+vWYVpqYD8PbFET9MfXO8=
Subject key identifier: C5:54:E5:AE:EE:6D:38:61:8C:F0:5D:3A:CC:C7:BA:39:13:63:A6:18
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019D37BFF7173A76CF2774BCC31B542995BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 1754
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: lG/UnKyYliQadrsnPclHpyFYRZ5C8pDULkGAe5R6fM4=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f7:17:3a:76:cf:27:74:bc:c3:1b:54:29:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=c554e5aeee6d38618cf05d3accc7ba391363a618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:67:c2:9f:36:62:3f:c2:1b:84:f7:82:50:
56:8e:58:43:47:cd:b0:cc:06:63:3e:e3:16:2e:29:
b3:21:b6:6e:a0:5e:f8:d7:30:97:12:93:da:f7:17:
7d:d6:da:e9:4d:a0:00:d6:0a:62:1e:06:df:c3:6f:
d9:77:90:22:02:19:81:f6:39:83:ca:f0:08:bd:2f:
a1:d6:48:17:1f:f5:cd:14:f9:cf:f8:c5:f4:43:01:
8c:47:23:4b:f5:e7:0b:84:5e:3f:4b:bd:b4:72:5e:
a1:4e:60:48:d2:a6:04:35:73:a0:06:96:93:da:85:
e4:6e:b1:a0:28:0c:f6:6a:27:1d:26:6c:84:83:fc:
5b:d5:37:31:81:e4:e3:9d:34:33:b0:7c:c4:25:a0:
b3:0a:a2:55:87:5d:7e:05:d8:67:ec:a9:9e:0c:ee:
d6:c6:d2:0b:81:97:f3:42:8a:fd:36:f7:ea:20:af:
3b:d0:2c:af:7e:7c:37:45:cd:57:ea:18:d2:99:e3:
9e:22:91:72:14:1a:11:26:26:00:54:48:f4:0a:32:
f9:56:b1:39:61:24:5b:1e:33:2e:a2:63:1c:76:33:
20:1a:d0:6e:12:83:0a:c0:e4:fb:a8:8f:35:30:7a:
ce:61:7d:66:f9:2f:6f:46:a1:8f:14:12:9a:8a:08:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:E5:AE:EE:6D:38:61:8C:F0:5D:3A:CC:C7:BA:39:13:63:A6:18
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:5d:2e:ae:37:e8:97:e4:08:c6:3f:f4:45:97:7a:9f:a7:
64:ba:cf:8f:3a:9a:71:46:af:c5:fa:0f:64:30:52:4b:71:97:
34:59:f7:84:2d:26:d1:c4:21:7a:a3:59:a9:47:8b:c9:33:a9:
d6:9b:1c:98:8d:0f:3a:f7:7f:23:47:ac:a4:ea:a7:59:46:3c:
ac:de:bd:11:b5:8c:27:98:ad:9e:8d:79:43:22:fe:80:6f:c4:
ee:6a:78:14:89:c1:a1:23:ce:a2:c2:86:07:f1:d2:80:26:97:
e2:8d:64:da:a4:95:d4:b7:4c:f7:18:f4:fb:2a:52:bf:aa:4f:
8a:e1:89:83:0d:6e:33:34:2a:bd:b1:b8:b7:84:a1:62:ca:26:
80:cf:68:89:85:b9:11:aa:72:ef:5e:99:72:ef:3c:6c:31:f5:
50:31:ae:72:dc:7d:1a:ed:ec:13:a1:d0:fb:d5:77:ea:44:e5:
1f:90:e0:e4:80:22:d7:7f:ab:b8:d7:69:71:78:e8:1a:9b:ef:
5d:98:3a:f3:94:ce:33:2d:8e:de:4b:d4:a7:35:e5:77:58:6c:
f9:3c:c0:52:fa:fa:6e:2b:40:2e:9b:c0:44:51:9a:7a:af:37:
0e:90:3b:0f:56:79:88:7e:2f:12:94:26:ac:1e:ef:b7:dd:97:
41:69:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:17 2026 by rpki-client