Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: hEEf2sJx+wwTipAx5NlGG2Bm0xlr9Xc+EYgzgiPYkTs=
Subject key identifier: 39:E3:AB:9E:DA:D2:D7:D1:B9:83:62:BC:2E:28:CE:C7:9C:36:A7:12
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019F83B0BBB0C2BDF9492F82603A18E35FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 1433
Signing time: Tue 21 Jul 2026 08:00:25 +0000
Manifest this update: Tue 21 Jul 2026 08:00:25 +0000
Manifest next update: Wed 22 Jul 2026 08:00:25 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: KfDvS6va7DvL6+gAPGry/vbG3qYx3mL8L+H9wYXB39A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:bb:b0:c2:bd:f9:49:2f:82:60:3a:18:e3:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Jul 21 08:00:25 2026 GMT
Not After : Jul 22 08:00:25 2026 GMT
Subject: CN=39e3ab9edad2d7d1b98362bc2e28cec79c36a712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:85:df:1d:2f:bc:b7:cb:e6:f8:d2:9f:29:
ce:20:22:69:b2:df:f0:2b:de:b4:58:7f:f3:9b:0a:
1d:1e:f6:4a:d4:df:91:60:46:86:54:68:4e:d5:83:
f4:7c:86:58:30:01:fa:04:06:34:ff:cd:d2:68:4c:
9f:ff:59:e6:9e:74:80:bd:15:0b:1f:c3:89:0e:39:
91:d4:1e:e8:76:8f:2f:63:18:f3:3c:c3:be:59:75:
bc:76:1d:31:b8:90:f4:0c:dd:82:d5:ff:76:fc:df:
6e:55:23:8b:54:c3:13:3c:ed:de:4e:3f:c0:e0:1d:
e4:4e:dd:07:0e:db:fc:4f:f9:30:69:b8:5f:da:1e:
89:45:c8:b0:db:f1:bd:75:64:41:ad:13:26:86:86:
c0:0f:cc:fa:89:2a:c0:2f:1f:1d:15:c5:4c:ab:4c:
9f:b7:f8:0b:bc:18:95:ce:dc:ed:f7:a6:bd:d9:a7:
a1:33:f0:4a:ae:a8:76:62:12:b1:cc:a1:93:25:e5:
23:a0:bd:f7:d8:c7:a8:f0:71:a1:c4:97:55:1b:0b:
ba:58:4b:42:5d:19:5f:7b:56:05:e5:25:0a:a5:bc:
96:85:6b:65:51:f0:89:fc:d7:eb:a4:2d:58:43:94:
0d:5f:d3:04:f7:53:59:4b:44:07:ee:d8:eb:2e:26:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:AB:9E:DA:D2:D7:D1:B9:83:62:BC:2E:28:CE:C7:9C:36:A7:12
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3b:62:2f:1c:bd:0d:5d:e2:22:78:c6:8d:87:30:59:64:c3:
5a:d5:40:62:dc:cc:7a:01:6d:73:e7:ec:f7:4b:a7:1d:e5:69:
ba:88:e3:e8:12:bf:14:a9:ad:0c:87:3d:16:e5:24:2a:e6:0e:
14:da:a6:13:59:00:25:8d:b9:e7:90:58:62:4a:f1:7c:87:5d:
cb:87:76:9f:fb:81:b3:f6:2c:3e:0f:30:04:ee:99:7e:7f:70:
e6:b5:f3:80:ea:8a:04:10:aa:29:24:ab:40:da:c2:d5:d0:a1:
0e:e1:bb:dc:f6:40:0d:3e:c3:92:7b:c6:5f:cc:8a:4c:45:00:
6d:76:4e:31:0b:f6:17:d7:12:8b:37:3b:aa:92:e4:5d:e4:89:
d7:ed:bd:4c:24:61:c1:ae:cf:5b:78:20:f6:f8:56:c7:f2:05:
7e:0e:2a:c1:92:98:aa:e9:ad:b1:87:f7:97:9c:62:59:58:1f:
39:75:28:f4:3a:b6:72:bb:ee:29:6f:52:e0:4a:90:6f:36:46:
83:f9:01:98:50:58:d9:ea:bd:9f:8c:77:44:52:66:df:92:a1:
92:5f:05:8e:da:a4:53:31:3d:b6:5f:8f:a8:76:c8:3a:31:e0:
77:01:22:65:70:fc:b7:d4:af:c5:64:d9:2c:e2:f2:03:a8:d5:
85:da:56:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DsLuwwr35SS+CYDoY41/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjYwNzIxMDgwMDI1WhcNMjYwNzIyMDgwMDI1WjAzMTEwLwYDVQQD
EygzOWUzYWI5ZWRhZDJkN2QxYjk4MzYyYmMyZTI4Y2VjNzljMzZhNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskOF3x0vvLfL5vjSnynOICJpst/w
K960WH/zmwodHvZK1N+RYEaGVGhO1YP0fIZYMAH6BAY0/83SaEyf/1nmnnSAvRUL
H8OJDjmR1B7odo8vYxjzPMO+WXW8dh0xuJD0DN2C1f92/N9uVSOLVMMTPO3eTj/A
4B3kTt0HDtv8T/kwabhf2h6JRciw2/G9dWRBrRMmhobAD8z6iSrALx8dFcVMq0yf
t/gLvBiVztzt96a92aehM/BKrqh2YhKxzKGTJeUjoL332Meo8HGhxJdVGwu6WEtC
XRlfe1YF5SUKpbyWhWtlUfCJ/NfrpC1YQ5QNX9ME91NZS0QH7tjrLiatBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnjq57a0tfRuYNivC4ozsecNqcSMB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTtiLxy9
DV3iInjGjYcwWWTDWtVAYtzMegFtc+fs90unHeVpuojj6BK/FKmtDIc9FuUkKuYO
FNqmE1kAJY2555BYYkrxfIddy4d2n/uBs/YsPg8wBO6Zfn9w5rXzgOqKBBCqKSSr
QNrC1dChDuG73PZADT7DknvGX8yKTEUAbXZOMQv2F9cSizc7qpLkXeSJ1+29TCRh
wa7PW3gg9vhWx/IFfg4qwZKYqumtsYf3l5xiWVgfOXUo9Dq2crvuKW9S4EqQbzZG
g/kBmFBY2eq9n4x3RFJm35Khkl8FjtqkUzE9tl+PqHbIOjHgdwEiZXD8t9SvxWTZ
LOLyA6jVhdpWfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:09:42 2026 by rpki-client