Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: 50GrzX8nWYvH7i4cV7ZuUEHQ4UXAmm2Scm7+75U+N7g=
Subject key identifier: A9:0F:53:05:C5:FD:DA:56:12:DE:DC:16:5D:47:A7:EB:31:BD:CD:2A
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01A09EEF34DBC85EC0E818A19E41AE4518F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0C7F
Signing time: Mon 14 Sep 2026 08:01:11 +0000
Manifest this update: Mon 14 Sep 2026 08:01:11 +0000
Manifest next update: Tue 15 Sep 2026 08:01:11 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: xmUl9fr0DprI3xeKGYCgP84dtQLWsxoP0gziIi36png=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ef:34:db:c8:5e:c0:e8:18:a1:9e:41:ae:45:18:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Sep 14 08:01:11 2026 GMT
Not After : Sep 15 08:01:11 2026 GMT
Subject: CN=a90f5305c5fdda5612dedc165d47a7eb31bdcd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:41:19:5c:2e:2f:87:23:72:bf:40:47:17:
06:1e:e2:6b:a9:fd:25:28:7c:be:a0:cf:a4:a5:1c:
3e:cf:19:9a:79:47:47:c1:b7:81:b6:68:1f:8f:cf:
0c:ca:4a:81:3d:55:b0:7b:a1:61:5a:63:3c:50:1f:
6d:f8:2e:a0:88:1d:2f:56:b5:be:91:58:74:d9:96:
83:3b:ff:b2:04:80:3c:39:93:78:e4:cd:6f:ab:8b:
a7:c6:a7:26:62:2e:5b:11:46:9a:81:6e:16:d3:30:
ac:42:e5:11:04:fb:31:6a:9b:4d:44:b3:f4:c4:a3:
58:d5:06:bc:98:e2:aa:02:2d:57:d8:19:63:1a:b0:
81:a7:0d:60:92:44:16:fe:20:f8:09:ac:32:b4:d0:
d1:a0:59:ff:fc:3b:99:94:6a:23:1c:de:4c:8b:55:
85:bd:22:0b:c2:6a:a5:d5:87:45:4f:2d:6a:b1:cd:
3c:a5:ed:87:98:99:dd:75:fd:5a:c0:56:0b:04:5b:
1d:97:0e:8f:b7:da:54:ee:7f:5c:e1:b0:8c:93:9a:
05:f2:9e:88:70:c8:dd:bf:c6:4b:ec:3c:91:6a:54:
ac:05:b7:65:6c:9a:99:f8:64:3a:ad:ad:e7:0f:44:
66:8d:49:b4:0f:54:82:38:a7:9b:67:18:49:cd:16:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:53:05:C5:FD:DA:56:12:DE:DC:16:5D:47:A7:EB:31:BD:CD:2A
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ab:20:7a:fc:ad:91:9b:a7:e6:91:06:cf:ef:4d:7e:af:a4:
0a:fd:2e:29:21:0d:f1:95:56:cf:05:a2:42:d7:40:60:f3:f0:
42:45:15:fa:08:37:e9:9b:00:0b:8a:51:08:78:c2:67:38:f4:
47:39:eb:15:9c:d2:a2:b7:00:6d:d2:5b:7f:ad:f2:94:c7:c8:
76:d5:a4:b1:ee:be:4c:aa:1e:4f:8f:de:4b:70:80:ab:6b:07:
85:72:ba:77:fd:9c:be:70:f0:dd:02:b4:5d:f5:eb:b5:88:7a:
0b:b3:fe:c0:19:3a:46:b1:83:18:48:63:c2:b1:30:3e:76:0f:
35:b1:31:2e:e8:c0:07:d1:ff:bd:78:c5:bb:5c:7c:a4:ea:c3:
8b:13:43:ac:0c:b7:c6:10:8f:86:0d:5d:42:12:18:0b:ce:5c:
f4:ba:fc:d3:8d:58:a9:a4:99:01:91:74:b0:6b:71:be:ab:0f:
03:dc:02:78:92:89:2c:94:55:c2:b0:7d:2f:70:59:88:cd:a9:
16:3b:05:f6:86:b3:09:3d:9e:83:31:45:4a:ec:16:02:b3:e5:
04:b6:2d:f1:be:0a:39:a0:ad:85:ed:9e:0c:3d:99:d4:c5:03:
f8:83:d5:75:27:b7:1c:7d:ac:06:59:63:ff:a8:26:1b:36:ed:
d4:e9:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 12:01:43 2026 by rpki-client