Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: DspjtwH7uz8ypqomnjvEy/ykVLvSnSoA6sr5UXFruIw=
Subject key identifier: 95:34:24:12:1F:FE:53:9A:53:31:60:69:7F:D3:1A:F6:25:21:92:D8
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019D389C279F0F766B30D25B7BFEDC89FB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 1303
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: JxWKFachX8RHqJrPZlrmYwDSEDrFlw51CjXmpJbcAoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:27:9f:0f:76:6b:30:d2:5b:7b:fe:dc:89:fb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=953424121ffe539a533160697fd31af6252192d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:e2:96:2d:5f:9d:79:02:47:08:bf:61:d7:
18:ff:7b:d6:c7:0d:37:c8:4d:56:71:2d:4e:aa:b6:
83:70:61:e1:35:2c:06:89:8a:e0:3f:07:5d:76:57:
bb:07:74:f6:5f:a2:ec:2a:0a:bd:e1:a0:0b:f0:aa:
16:d3:f2:db:27:5c:b4:6e:96:76:92:80:2d:28:d5:
b6:03:b5:c6:43:0c:36:bb:ce:92:38:9b:cb:8a:08:
ef:c0:2a:7e:74:39:be:07:ea:bd:23:ed:bd:c0:de:
8f:fc:94:83:62:a3:45:78:72:38:d4:67:99:41:3d:
c0:e7:e0:d1:05:5c:49:16:12:f3:b6:79:1a:de:c5:
72:e9:20:86:c6:c1:04:7e:63:5c:e8:5e:3a:a4:8b:
cf:fa:a4:dd:f7:98:08:68:9e:b2:69:47:1a:d3:c5:
6f:80:ec:71:02:49:f4:f3:e0:cc:76:47:7a:4b:10:
c6:28:25:3b:63:60:c9:c0:c1:d1:3a:92:73:84:19:
f0:8a:4e:a6:f1:4c:bf:11:18:0f:d3:9e:78:a6:79:
03:7b:94:31:b2:5b:95:99:67:43:92:43:d0:93:9f:
aa:12:dd:08:53:d3:40:82:7e:f0:b3:02:71:32:bd:
95:80:1c:05:23:69:38:4b:7d:64:40:84:64:27:ee:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:24:12:1F:FE:53:9A:53:31:60:69:7F:D3:1A:F6:25:21:92:D8
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a5:ea:fd:1f:41:2e:95:4a:0b:d4:5b:6c:f9:99:03:a0:ea:
e4:88:65:35:f0:dc:9e:64:78:b7:d3:6c:73:74:4d:ef:7d:22:
a2:d7:e9:4b:db:c4:4e:0e:fe:b7:15:63:06:b8:ab:4a:7c:0a:
4a:b8:74:57:ec:93:fa:8c:2c:fa:9d:c9:c9:0e:da:6b:15:f5:
66:51:93:64:1b:f1:9b:87:12:2b:95:3f:a4:e2:4d:05:84:e2:
88:67:d4:ae:60:15:a1:bc:e5:0d:45:d0:e6:85:d3:3c:b3:c1:
80:5e:ff:f1:55:90:a3:59:3f:56:04:fd:54:76:0b:aa:79:f5:
6d:60:06:a8:85:1f:bb:49:c0:21:dc:d5:9a:20:e1:a5:56:67:
e6:64:b2:1c:f8:59:a0:e8:c5:ee:cf:5a:94:02:45:66:d3:eb:
98:e6:ba:6a:30:40:f1:7b:22:c3:09:de:aa:0b:d2:15:c8:b6:
e3:6a:59:c3:d4:65:df:6c:8a:32:98:44:1d:6d:14:25:cf:81:
39:a4:b3:2a:7c:2b:a3:ff:c5:20:39:aa:61:7c:f6:25:01:27:
c2:a6:a2:97:fb:5b:ef:92:f2:cf:74:1e:01:d5:b2:fa:72:b3:
6f:60:3f:9f:a0:91:d5:06:e2:4a:cd:a5:94:19:ae:b5:17:b1:
de:2f:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client