Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: EXwnwyEJSKFUIwr5vdP7mglcL4xVofaoL6PFZnf9kqI=
Subject key identifier: 82:CC:C4:A9:76:92:D0:B4:FE:A1:45:DB:69:EB:2E:F2:E0:B5:AC:BD
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019DED806BA0753000C5E58C22B4B4244E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0B1A
Signing time: Sun 03 May 2026 11:01:49 +0000
Manifest this update: Sun 03 May 2026 11:01:49 +0000
Manifest next update: Mon 04 May 2026 11:01:49 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: utxpjghug3SwqaCFsji9h7NBTF36uhdfkV/RNX5hLLw=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:80:6b:a0:75:30:00:c5:e5:8c:22:b4:b4:24:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: May 3 11:01:49 2026 GMT
Not After : May 4 11:01:49 2026 GMT
Subject: CN=82ccc4a97692d0b4fea145db69eb2ef2e0b5acbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:6f:aa:bf:b6:cc:9b:72:5f:ba:c5:14:2d:
96:c5:80:d2:82:20:e4:a7:f1:4b:f0:4f:75:b8:be:
47:57:b4:db:ce:ff:c3:e3:36:28:a4:93:10:1b:b6:
90:c8:6c:bc:ff:67:8a:57:b0:0a:83:e3:be:28:8f:
53:75:b7:10:f1:b9:05:da:af:b4:91:ab:62:16:32:
13:47:a2:b1:b8:9d:64:65:a2:a9:1c:71:e1:58:c7:
7c:43:49:4d:b7:af:80:70:97:49:d1:5f:b6:47:ee:
d3:16:d2:11:46:c7:bf:85:c8:5b:97:dd:47:6e:8a:
ac:28:ab:7f:13:81:69:74:da:1c:bf:f6:7f:0c:5f:
c7:79:a3:f6:d2:d8:48:cb:f2:86:da:d3:da:a9:42:
e2:f6:65:69:77:b7:a4:38:74:80:55:4d:7b:12:9d:
bf:cf:c0:67:5e:cc:33:8a:9e:c7:32:55:81:c8:0f:
57:f7:7f:88:a2:c6:aa:18:28:12:b2:5d:44:3c:be:
93:f2:80:85:de:fd:72:23:9f:67:78:8e:1e:77:75:
19:47:3f:3a:57:76:37:94:c0:24:18:14:8c:b8:a0:
5c:ca:e0:12:3c:3d:8d:6f:cf:7d:e3:c9:d5:f7:75:
70:69:ef:fa:42:fb:10:4f:ec:91:f8:6a:eb:dc:cb:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:C4:A9:76:92:D0:B4:FE:A1:45:DB:69:EB:2E:F2:E0:B5:AC:BD
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:d8:e6:90:d7:c5:e8:c6:ab:0a:33:bc:b3:f5:cd:5c:4a:
ea:82:f9:8d:6d:f3:93:d9:66:bb:df:74:de:a8:17:4c:7e:d5:
25:04:57:0a:5e:6e:5b:65:49:b7:c7:6a:31:b4:1a:2d:eb:d0:
26:93:6b:8c:8c:bb:6d:19:ed:93:fb:de:34:d9:06:65:d8:17:
2a:d6:10:88:4d:11:ee:66:28:0c:11:ea:ec:c6:73:c8:8c:e7:
49:45:6f:cc:f2:87:12:88:74:ac:fe:2b:72:73:2d:30:87:5a:
2f:af:a6:d6:35:83:f8:a2:c3:bd:a3:c6:e8:b2:cc:c7:17:f0:
e9:18:3f:e3:57:b4:39:0e:55:bd:65:91:18:2c:8d:96:1d:cc:
a2:78:77:29:5d:03:25:85:52:98:cc:b6:8d:82:7b:b6:0a:3c:
fb:0d:03:30:58:2d:f7:04:92:ac:2d:a3:c9:f6:41:c4:a2:07:
1b:44:6d:74:30:eb:1e:79:32:2d:97:4f:ba:4a:3c:65:51:d9:
4f:88:90:e4:cf:b8:62:7e:c1:70:6a:9b:e1:72:31:68:b0:8e:
29:fc:60:3f:9d:47:ed:0d:54:3c:6a:a3:dc:15:a1:51:49:da:
b1:8f:1c:13:de:6e:16:39:75:4d:aa:89:84:93:02:02:49:10:
81:51:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:18 2026 by rpki-client