Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: 6+Qk/UlVgFQfs2Ejz4kqNoM36vsGqmNGLT+l7EhiBXA=
Subject key identifier: B7:6D:29:5F:30:67:6C:7F:65:28:22:AF:E0:74:78:8B:E7:5B:18:CF
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01A154AE36920B2B35DDAC3DB34A2E6830A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 07B9
Signing time: Mon 19 Oct 2026 15:01:05 +0000
Manifest this update: Mon 19 Oct 2026 15:01:05 +0000
Manifest next update: Tue 20 Oct 2026 15:01:05 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: xU0oVhQO3XKAfGMBul6dE0vu4Gxme1VcQhXp4qLxkdg=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:36:92:0b:2b:35:dd:ac:3d:b3:4a:2e:68:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Oct 19 15:01:05 2026 GMT
Not After : Oct 20 15:01:05 2026 GMT
Subject: CN=b76d295f30676c7f652822afe074788be75b18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:f3:93:26:4e:1e:d5:2e:37:b9:42:c4:e6:
e8:24:5a:9b:04:c0:08:7a:7e:9c:ac:0d:af:19:40:
09:96:26:39:92:34:e8:13:e7:3c:fb:fa:8d:d0:75:
9d:c4:b9:72:68:3b:4d:fe:6f:ee:02:ea:2b:f4:76:
e6:c5:95:d6:1b:03:72:4f:d9:66:76:61:a2:a7:ac:
8d:5b:3e:ae:f5:35:d7:0e:c0:ac:35:d0:9f:93:cc:
59:b4:c7:0f:f0:e7:a2:3f:2f:c9:a9:4e:08:2e:6f:
d6:6c:8c:4f:5b:22:d1:b7:25:53:bf:d0:e9:0b:ce:
b5:d3:10:ba:1f:81:b2:6f:4a:e4:04:18:3b:58:b6:
5b:e5:60:e6:95:64:fc:aa:ea:d7:6c:83:df:3e:b4:
f2:32:d5:18:fd:14:79:17:fb:89:cf:de:ea:0a:84:
3a:7c:10:5d:f9:fa:2c:3c:28:7d:c8:77:af:de:44:
67:4b:4d:7b:14:8f:4c:d4:05:a9:98:95:75:f4:d4:
2f:81:af:fa:09:e7:78:e1:20:16:43:70:06:05:7a:
82:ba:fa:e8:5a:e4:20:3d:9c:a3:64:fc:24:e2:c6:
1f:05:db:0e:a8:a6:ec:48:db:83:c4:e3:75:28:ab:
47:ff:c8:ee:ea:d5:f0:8c:30:dc:55:87:38:fb:d2:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:29:5F:30:67:6C:7F:65:28:22:AF:E0:74:78:8B:E7:5B:18:CF
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5f:35:5c:f9:4a:08:c8:60:ea:28:48:d3:d9:d7:d3:19:8f:
cc:31:df:38:bc:3a:83:93:b8:51:76:6a:85:3d:2f:dd:80:a9:
d4:08:6e:67:1f:44:74:ee:dc:91:40:cc:f6:9d:e5:56:67:89:
ae:f9:9c:d6:d8:84:20:a9:2f:ef:b8:e1:a3:c8:ed:1d:ff:bf:
bd:b3:ad:c8:85:49:24:e5:28:18:0a:f0:2b:25:0d:f6:60:fc:
93:09:3a:83:1a:bb:3b:bc:e6:0a:64:06:59:55:c6:a7:00:29:
9b:c9:cf:03:ef:49:06:ac:7e:ee:e9:70:b1:65:fd:ee:4c:ac:
bf:db:2d:b7:d0:76:92:fa:df:55:c0:2d:25:f0:9c:b9:1f:ca:
49:0e:85:49:d8:2c:8a:2d:ed:a7:13:57:fe:22:87:8f:ec:a7:
5b:1b:3f:89:a0:63:87:6f:54:86:68:5f:85:d5:3a:75:30:2c:
84:46:26:2c:d8:0b:23:49:0f:d0:b1:19:6c:2a:46:f4:b8:38:
d1:59:e5:96:3d:91:e0:7f:4f:24:8f:90:d8:37:4d:e3:a9:b1:
65:ed:2e:71:46:9e:2f:a1:6b:af:6d:72:5c:eb:4f:fd:3f:d1:
27:ce:e9:32:39:e4:72:53:9e:d2:69:f4:70:de:bf:67:e4:66:
87:e2:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:33 2026 by rpki-client