Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: hTmYUi7oHYknymkNyNw11IL3NirdhFPXZBEuH99HUZQ=
Subject key identifier: DE:41:D1:63:97:CC:63:9B:20:D2:74:84:A8:5E:C2:B4:09:01:6C:C2
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019EB80E804A4F4A3AC02AE9197BE771C70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 036D
Signing time: Thu 11 Jun 2026 19:00:18 +0000
Manifest this update: Thu 11 Jun 2026 19:00:18 +0000
Manifest next update: Fri 12 Jun 2026 19:00:18 +0000
Files and hashes: 1: UR53OvR6lP83MQVG_HiJaUyZZxg.roa (hash: uKHy1N03Km5obJme4UmR6kFR7628v113ae1J13gFuGM=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: 4y5DydUKWat2ctWLxaWcTG/rXPDQvKiV9/iXyirL31E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:80:4a:4f:4a:3a:c0:2a:e9:19:7b:e7:71:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Jun 11 19:00:18 2026 GMT
Not After : Jun 12 19:00:18 2026 GMT
Subject: CN=de41d16397cc639b20d27484a85ec2b409016cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:51:b1:68:3a:55:7a:ad:3f:86:68:cd:eb:
04:9d:0b:ec:df:b9:a4:7b:63:15:c7:31:53:6d:8a:
2b:89:40:e8:01:b4:c7:73:e0:00:6a:4e:65:56:79:
44:dd:f5:ec:5c:2d:a0:a8:76:2a:91:47:d5:c1:74:
64:6d:cc:5a:7f:d0:ad:65:ce:de:73:08:98:20:2c:
c7:d9:be:a1:ec:99:19:bb:96:78:de:26:2f:67:b0:
e0:07:e9:d5:fa:7f:6c:cc:a8:e2:07:4b:f1:a9:55:
7d:09:f0:99:82:3f:13:9f:a1:e5:4b:f6:fd:82:1b:
18:d4:a2:ba:88:26:78:9c:c1:5e:3a:16:4a:43:2b:
41:f9:dd:a1:72:0a:68:66:a9:e8:23:74:ba:f8:fb:
e2:11:b9:58:f1:7e:a7:1a:e2:a3:42:d2:b9:9e:97:
f6:0a:3e:34:f7:2b:b6:50:b2:30:b1:d1:33:e6:d8:
53:04:73:87:d4:9f:37:41:63:dd:3f:e3:b4:31:77:
ca:bc:43:2f:7d:18:2d:f8:41:18:91:3d:fe:10:45:
04:4c:ae:04:98:1b:99:e3:d5:27:25:3f:a3:4f:47:
04:1c:df:d7:80:c6:50:fd:72:9f:c6:e8:48:67:96:
1f:93:7b:46:fe:0a:a4:86:cb:d8:9d:35:59:cc:28:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:D1:63:97:CC:63:9B:20:D2:74:84:A8:5E:C2:B4:09:01:6C:C2
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:ca:9d:b0:07:18:d6:93:56:cd:41:94:81:d0:17:df:3a:
36:2a:c6:98:0e:ef:12:7c:63:f8:1b:b8:7d:65:6c:86:32:94:
76:78:56:f7:0f:31:78:1f:50:cc:23:67:f5:ea:85:e5:97:46:
90:08:d0:cc:8d:6e:e3:23:15:cc:9f:3c:04:74:58:10:15:11:
98:b6:4f:5b:24:3a:42:8a:25:93:2e:71:a2:b0:da:45:a2:12:
fe:c6:e7:5b:26:97:d3:42:a8:71:b0:f2:24:0f:72:ba:f4:8f:
33:dd:5c:16:36:70:94:bd:75:fc:fb:0c:a1:b0:bd:91:c9:22:
0e:13:bf:d9:d9:00:83:0e:1c:e0:f0:3a:71:b4:b6:8f:7b:09:
ec:ee:4c:28:5a:00:7f:5e:7d:49:d6:f7:6d:23:84:2e:a1:fc:
95:f4:4b:40:f8:94:1a:b2:93:78:af:72:d2:25:cf:a6:d7:6b:
21:53:8b:a4:37:9a:fd:aa:9b:78:20:a9:80:ae:ce:27:f9:5e:
8c:73:36:39:bd:85:6a:ef:1a:f9:d0:0c:1a:43:7f:88:64:34:
7a:90:43:12:eb:79:af:70:32:b1:52:93:ca:82:23:12:84:bd:
da:82:22:b7:95:a3:6d:50:61:32:d7:0f:c5:b7:20:48:87:5f:
6b:ea:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:36:43 2026 by rpki-client