Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: h95Wpio+fVMLcdVmV+JBfidvXyq/FrBXQY7iZUxUgE0=
Subject key identifier: 21:18:8C:0D:09:6A:E5:26:CF:D0:9A:E9:4D:5E:5B:B0:87:6B:E1:06
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019EF9F073A5BEA6397CAAE75F215B15D2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0BA5
Signing time: Wed 24 Jun 2026 14:02:25 +0000
Manifest this update: Wed 24 Jun 2026 14:02:25 +0000
Manifest next update: Thu 25 Jun 2026 14:02:25 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: WdStW+LO45dwe8TPZjjx8dRVBG/6pcPu2zeEseJuVOI=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:f0:73:a5:be:a6:39:7c:aa:e7:5f:21:5b:15:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 24 14:02:25 2026 GMT
Not After : Jun 25 14:02:25 2026 GMT
Subject: CN=21188c0d096ae526cfd09ae94d5e5bb0876be106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:41:72:eb:af:bc:0c:53:0f:a1:e4:2c:d2:
da:7d:72:77:b4:d2:a2:05:90:f1:50:98:40:f5:80:
38:09:91:96:5a:f7:58:3d:23:a8:30:4e:5c:28:2d:
35:05:36:8f:a6:1a:a5:e7:b2:a6:94:5e:71:e4:d1:
f7:c3:b0:09:93:d8:28:a6:42:b6:29:c2:76:49:9f:
db:10:27:ce:c3:e0:5c:41:12:f6:9f:eb:c9:5f:54:
d4:69:3d:17:60:c3:26:b8:ee:e3:6b:d7:bd:dc:28:
3f:a4:ee:29:de:49:98:75:45:82:0e:cf:d1:69:64:
34:b8:d2:7e:a1:4e:a2:7b:ab:42:ad:06:71:72:f5:
ae:bb:8f:8c:35:cd:ae:d4:d0:76:64:81:c0:e1:3f:
3b:56:24:26:48:0a:16:23:9d:7f:e3:cd:0f:3b:db:
07:ae:a6:48:f0:9a:75:85:1c:5b:3c:39:b7:b0:47:
8f:98:10:c0:a9:0b:22:45:71:c5:18:37:1d:4c:43:
92:f7:2a:10:a7:09:66:17:77:4d:96:02:85:0a:68:
6b:d5:be:6d:91:66:e9:1f:97:f9:e8:a8:c2:1c:cd:
06:c3:07:df:7f:50:6e:a9:04:cb:8f:87:52:f7:b6:
1d:b6:51:67:77:6f:d1:3c:d5:9f:34:6f:d1:07:38:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:8C:0D:09:6A:E5:26:CF:D0:9A:E9:4D:5E:5B:B0:87:6B:E1:06
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e1:25:54:64:f4:5a:fb:91:1a:dd:58:f8:b3:a1:ec:f8:72:
51:ae:8c:42:7d:de:f8:b1:4a:66:35:82:44:67:70:f8:51:66:
1d:f8:90:45:78:94:03:a1:a7:89:d4:b8:05:7d:a8:04:aa:2f:
91:88:42:7e:56:39:3e:72:46:6f:f7:ee:8b:ad:b5:9b:ae:ba:
5d:2a:f0:be:33:98:c2:a5:07:12:79:ed:72:d1:37:e5:f7:27:
2a:86:0a:e9:bc:92:2e:f8:41:a3:4e:16:8c:97:dc:19:6a:d1:
27:a3:26:65:31:9b:9d:6a:11:91:df:be:a7:25:55:69:ba:39:
f8:9d:a3:42:21:24:de:1a:87:3a:1b:1e:55:e9:51:2e:02:59:
26:fe:9c:68:36:0f:d5:50:5a:36:e4:54:ad:1c:05:16:1a:1e:
a0:d4:c7:73:22:85:6f:41:c0:7b:3d:68:9b:0f:d7:4c:73:0b:
87:f9:46:46:54:e9:6f:d0:0e:8f:31:4f:d4:dd:5b:35:cf:9e:
11:ca:b1:d4:36:a4:ea:a9:b5:18:9a:d6:db:b0:a5:8b:dc:db:
4b:5c:4b:5e:49:65:6b:90:d8:73:a2:ed:04:20:48:d5:e7:25:
3b:e0:19:dd:ee:fb:0f:c5:50:fb:e5:36:43:43:23:85:e8:b3:
97:e1:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:05 2026 by rpki-client