
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: 3IPWkVnC8S8h0zCL0siKo3Q3d8p8iS57siGVAhoqw5E=
Subject key identifier: C4:51:08:21:B4:59:57:D9:35:64:82:0C:6A:02:DF:64:CF:EF:1A:D3
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01A002B8D8D74899629613D47F035E3EB8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 070A
Signing time: Sat 15 Aug 2026 00:01:03 +0000
Manifest this update: Sat 15 Aug 2026 00:01:03 +0000
Manifest next update: Sun 16 Aug 2026 00:01:03 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 0J3MT0GyjpElH4yn1qd/mhBxeijjv07tqhaaiHoCOZ4=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:d8:d7:48:99:62:96:13:d4:7f:03:5e:3e:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Aug 15 00:01:03 2026 GMT
Not After : Aug 16 00:01:03 2026 GMT
Subject: CN=c4510821b45957d93564820c6a02df64cfef1ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:4a:7f:48:e8:cb:2b:63:e9:90:7c:c7:80:
62:20:5e:45:65:c4:fd:48:eb:36:c9:67:b1:4c:fb:
29:2d:aa:35:1c:e6:9c:18:e7:e8:34:ce:04:b3:25:
14:dd:d0:98:d9:3e:eb:f7:a7:23:2a:85:4a:bf:79:
9f:19:0b:54:d8:f7:80:37:df:6b:0f:a2:9d:4e:50:
5b:45:b2:13:ae:80:93:4c:a9:5d:8c:bb:f6:83:ef:
e4:43:08:34:13:d8:a4:72:c1:1e:be:87:00:44:ef:
29:47:03:17:66:de:6a:44:1e:a1:cb:0e:93:d2:d9:
55:82:86:11:54:a8:1c:d9:dd:a6:f9:ea:48:23:41:
06:75:1c:c5:4d:e2:41:dc:cc:2a:09:c4:4a:0e:20:
23:75:5a:61:9a:e5:04:8e:5e:a0:f7:7e:b4:96:41:
28:89:4e:c3:3d:d9:af:d9:32:e4:47:db:b5:b0:86:
18:ee:db:9d:a8:ed:a7:be:30:1e:6d:48:59:dc:ab:
07:4f:1d:c0:7b:1e:b5:8e:bb:86:48:2a:66:34:2c:
1f:5c:05:1f:43:06:32:f7:f2:86:6c:60:75:a8:b8:
90:11:02:37:d1:01:e1:a9:97:fc:a6:d4:9c:30:4a:
4b:ea:3c:e6:28:be:e6:25:87:53:5f:9a:fb:4a:39:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:08:21:B4:59:57:D9:35:64:82:0C:6A:02:DF:64:CF:EF:1A:D3
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:18:7b:87:42:ae:5d:89:d0:f6:30:19:b8:97:c8:80:f6:82:
12:be:f9:3b:6f:48:a4:80:42:e4:9f:a0:d4:70:f0:81:db:c3:
69:cb:e0:aa:01:be:4b:eb:33:3a:d1:c7:b5:7f:b5:49:f2:8d:
4d:31:17:36:a3:b8:bf:87:dc:b2:e0:c3:ec:6f:f7:1d:b8:5c:
62:8f:b2:42:18:29:82:f6:ec:f9:dc:60:b4:2f:8e:fd:c6:01:
05:54:d4:4c:1a:a6:49:52:5e:65:04:ff:13:bf:5d:68:76:01:
c6:fb:11:62:d4:c5:67:d5:bc:58:3f:22:bb:e1:97:33:d0:32:
36:29:0f:c7:89:26:75:80:3f:fa:ed:eb:cc:fe:87:6d:76:a7:
a3:3d:34:9f:59:d5:b0:0e:e2:b7:f8:25:16:fc:eb:18:a0:0b:
55:69:46:f6:a0:f5:7e:8b:47:b1:0a:41:82:59:99:9e:ec:ea:
1b:54:49:d4:95:87:cd:6d:33:d6:ae:f2:89:dc:fe:10:5f:5d:
6a:ed:b3:bb:ec:94:48:4f:69:34:85:4d:32:16:08:07:72:13:
ef:8b:a1:fd:33:d9:1b:e8:13:35:87:2c:6d:d6:06:34:96:5b:
ee:86:9d:d5:6c:a3:4f:67:40:ee:d3:43:54:9c:03:04:1e:f5:
1d:e2:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:39:52 2026 by rpki-client