Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: te4ys85UHLZhICV4qCF5nIiwxe9qVJyyllBfiYbhvb8=
Subject key identifier: 1D:7A:9A:AD:49:57:F9:26:69:19:AD:42:F2:3B:A7:25:3B:AC:71:42
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019D04AF20D55B4495F59A48F4300F23FED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 05C7
Signing time: Thu 19 Mar 2026 06:01:19 +0000
Manifest this update: Thu 19 Mar 2026 06:01:19 +0000
Manifest next update: Fri 20 Mar 2026 06:01:19 +0000
Files and hashes: 1: e7AS-h8UVzO25ySDY88gNZMJcDc.roa (hash: nbzFORwCh+VhrVrfEhpvS2wccja5BBY0hNY1kpvLUoM=)
2: jQQwHQnxt60DZocx5cyYSn7BPpc.roa (hash: uzGsYYKtRtXMEU0FMjrboZQzPWlbaFPHYavLo2IswP8=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: /1DGWOEXNV1F3xj6L9QJswZ/+NzWQc6G1ItgpPEn+hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:af:20:d5:5b:44:95:f5:9a:48:f4:30:0f:23:fe:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Mar 19 06:01:19 2026 GMT
Not After : Mar 20 06:01:19 2026 GMT
Subject: CN=1d7a9aad4957f9266919ad42f23ba7253bac7142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:e3:94:28:ba:9e:18:32:ea:16:6e:34:80:
d3:c6:1f:c6:6d:9a:8b:6b:92:98:c7:15:fc:83:76:
67:38:cb:98:9a:02:a7:e4:89:4d:c1:0e:fe:6e:37:
6d:c0:02:3e:1d:88:ae:4d:43:6d:dc:fc:51:9a:ae:
62:e1:ea:26:9f:90:56:9a:94:65:f0:e0:4d:40:06:
86:c8:9c:24:bb:24:ae:a2:a4:4a:6f:a4:3d:2c:cc:
8f:dd:ff:7c:88:0d:19:57:28:f9:b0:da:5b:e9:16:
79:49:db:b0:6f:82:7d:1d:61:b2:72:37:80:b8:7a:
ed:e1:67:13:7f:d6:60:82:df:cb:60:bc:71:d9:e8:
4c:1f:74:00:16:41:d6:4a:00:c4:59:ef:97:a9:d6:
76:df:d3:98:62:75:3c:e3:a3:8d:da:64:f1:08:98:
67:73:c7:61:72:02:91:97:dd:5b:54:c3:38:99:ec:
88:65:25:02:56:76:eb:9f:0b:c7:77:d4:97:40:01:
ec:c9:5a:51:0a:48:01:16:c4:eb:f9:f3:f7:a3:d1:
59:50:14:ed:27:ad:13:d1:7a:c0:83:61:f2:9b:aa:
ba:7a:f8:30:cb:ef:bf:7d:9e:07:9d:48:32:9e:ea:
2c:2b:35:27:0d:78:c7:5b:89:9c:95:14:2f:a8:63:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:9A:AD:49:57:F9:26:69:19:AD:42:F2:3B:A7:25:3B:AC:71:42
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:60:c9:6e:d0:f3:f7:91:e2:7b:39:5b:47:31:dd:b6:e6:
5c:29:5c:c0:05:6b:ef:38:28:15:3e:10:10:62:b2:b8:6d:fa:
ff:05:61:fd:37:cb:5c:e3:88:d8:d8:df:c1:30:c6:53:1c:16:
c3:75:3e:e3:f7:66:f5:87:ca:a0:5d:b7:f2:11:73:c8:f2:b6:
20:71:1a:7e:8b:83:5c:11:9f:dd:76:4b:b0:9d:fd:0e:d7:ac:
43:b7:35:52:70:d4:8a:66:6a:1c:2d:60:02:ea:9d:19:6a:07:
d3:e8:ad:fa:5d:05:48:0a:db:9c:69:44:f1:c8:f2:90:f0:40:
bd:4c:ca:15:15:e2:0f:10:41:fb:72:16:e1:f6:5c:6d:bc:0d:
2c:7a:db:a9:f5:ae:1e:c1:3d:aa:29:eb:34:16:d8:b2:cf:4c:
20:02:b3:30:1b:41:8e:21:c3:23:0f:ab:9e:c1:9a:8d:95:1d:
36:63:3e:3b:ab:ee:93:0e:bd:3e:c5:3b:61:7d:39:b7:f1:db:
cb:4e:ec:9a:b6:26:8e:b9:6e:93:fc:17:1a:18:36:0b:09:3d:
15:53:bc:96:a0:e6:87:f1:ee:df:89:dc:c3:d5:be:ee:8f:fe:
c2:81:1f:cc:ab:e5:8b:fa:fc:b8:44:9e:9d:d5:2b:45:64:88:
02:7c:b9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0EryDVW0SV9ZpI9DAPI/7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjYwMzE5MDYwMTE5WhcNMjYwMzIwMDYwMTE5WjAzMTEwLwYDVQQD
EygxZDdhOWFhZDQ5NTdmOTI2NjkxOWFkNDJmMjNiYTcyNTNiYWM3MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD7jlCi6nhgy6hZuNIDTxh/GbZqL
a5KYxxX8g3ZnOMuYmgKn5IlNwQ7+bjdtwAI+HYiuTUNt3PxRmq5i4eomn5BWmpRl
8OBNQAaGyJwkuySuoqRKb6Q9LMyP3f98iA0ZVyj5sNpb6RZ5Sduwb4J9HWGycjeA
uHrt4WcTf9Zggt/LYLxx2ehMH3QAFkHWSgDEWe+XqdZ239OYYnU846ON2mTxCJhn
c8dhcgKRl91bVMM4meyIZSUCVnbrnwvHd9SXQAHsyVpRCkgBFsTr+fP3o9FZUBTt
J60T0XrAg2Hym6q6evgwy++/fZ4HnUgynuosKzUnDXjHW4mclRQvqGPnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB16mq1JV/kmaRmtQvI7pyU7rHFCMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcpgyW7Q
8/eR4ns5W0cx3bbmXClcwAVr7zgoFT4QEGKyuG36/wVh/TfLXOOI2NjfwTDGUxwW
w3U+4/dm9YfKoF238hFzyPK2IHEafouDXBGf3XZLsJ39DtesQ7c1UnDUimZqHC1g
AuqdGWoH0+it+l0FSArbnGlE8cjykPBAvUzKFRXiDxBB+3IW4fZcbbwNLHrbqfWu
HsE9qinrNBbYss9MIAKzMBtBjiHDIw+rnsGajZUdNmM+O6vukw69PsU7YX05t/Hb
y07smrYmjrluk/wXGhg2Cwk9FVO8lqDmh/Hu34ncw9W+7o/+woEfzKvli/r8uESe
ndUrRWSIAny5aA==
-----END CERTIFICATE-----
Generated at Thu Mar 19 13:55:16 2026 by rpki-client