Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: H70IlxvHWajQvl7li8jFUHtqdgvWcFLSTTV8N/zUNb8=
Subject key identifier: DB:F9:7B:9D:94:C0:F2:D5:E6:83:E8:0A:17:EA:54:F3:FF:6B:20:94
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 01A08B30D81B7D47B008242A0C5B3ACF9000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 02FE
Signing time: Thu 10 Sep 2026 12:00:29 +0000
Manifest this update: Thu 10 Sep 2026 12:00:29 +0000
Manifest next update: Fri 11 Sep 2026 12:00:29 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: UKqQfyqBg5f2nqWPmx1/WTQNUc+RJDbWh02oYjEhv6k=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:d8:1b:7d:47:b0:08:24:2a:0c:5b:3a:cf:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Sep 10 12:00:29 2026 GMT
Not After : Sep 11 12:00:29 2026 GMT
Subject: CN=dbf97b9d94c0f2d5e683e80a17ea54f3ff6b2094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:1e:f0:f5:b4:87:31:fb:ea:a1:63:89:21:
3d:bd:d5:4d:50:f9:f3:89:7e:ed:9f:2c:d0:2d:3b:
ff:28:ea:2d:8a:ef:5a:c0:ef:93:16:9a:37:26:91:
41:fb:dd:f7:50:48:7c:16:b2:79:c7:1f:7f:1a:8d:
01:f3:90:19:5e:f4:df:44:a3:8f:15:42:ea:c7:ab:
2e:45:4f:56:5a:07:78:1d:38:0e:ce:94:10:aa:7d:
9b:99:3d:31:b1:46:fd:66:8b:77:4e:08:be:f9:a6:
eb:b8:80:02:73:dc:a3:f5:09:c2:a5:fd:3a:99:ed:
5e:7c:a5:26:61:d5:f5:58:b4:ec:f5:fc:06:9a:b6:
f8:86:68:f0:da:43:33:27:e7:ce:a3:fc:84:2e:f6:
30:f9:d5:f7:84:31:55:2a:05:26:5f:ef:53:1b:4d:
4d:93:83:6f:b1:a0:61:ab:79:1f:6f:b6:df:ef:34:
79:67:47:32:43:03:69:be:22:67:46:4c:62:6f:fa:
1b:3f:48:3d:01:c5:b0:09:eb:50:20:af:59:97:b9:
fb:89:67:5c:bf:f5:0d:36:48:85:1f:1f:5a:be:65:
43:ed:5b:40:b2:63:be:7f:46:a1:e3:4f:01:e6:75:
88:dc:9e:8d:99:d6:a3:b5:b6:58:f4:16:82:e1:9d:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:7B:9D:94:C0:F2:D5:E6:83:E8:0A:17:EA:54:F3:FF:6B:20:94
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:0c:6a:43:58:a9:8f:8c:f6:ec:b2:5e:06:a7:5b:98:da:
f3:01:43:f1:e1:16:b5:c8:06:18:80:8d:57:e0:ff:ce:48:fb:
d6:a6:38:45:dd:09:34:46:f9:3f:20:02:c5:50:f1:ca:f4:41:
e8:d8:75:6f:a9:5d:57:cc:f8:ff:32:f7:9f:f4:19:c6:79:3f:
d0:dc:c7:05:0f:b1:f3:cf:95:d6:c0:ea:86:5b:97:9c:3a:cb:
17:b8:4e:84:3e:d7:f0:f5:cd:a9:71:58:76:54:62:aa:36:a7:
fd:9b:06:91:71:1a:56:29:43:13:64:cf:0a:37:db:92:86:df:
ac:18:48:8b:13:90:f5:bc:ca:cc:b9:16:e6:c9:d7:28:22:27:
a7:0f:6e:52:01:b8:c6:3a:20:c0:f2:d2:8b:88:92:2d:bc:7a:
41:3c:5b:c0:03:31:36:69:67:51:02:80:e7:d8:1a:9b:d1:fe:
3b:95:a1:d0:a1:05:af:15:c0:38:b6:3a:94:a5:5e:a9:44:40:
6a:9e:04:e7:72:f2:56:03:2d:60:15:12:05:3c:9d:fa:d5:8f:
b6:42:b6:e8:b7:4f:68:2c:c6:ac:ac:4b:ab:8a:a1:c2:9b:bf:
77:ad:26:98:72:57:fe:fd:6b:ca:82:80:c2:8d:0c:29:35:41:
51:2d:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:14 2026 by rpki-client