Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: XLAgtNZygW+w5g/RZpMXFcaCqAYlnsw+U/8epu6VJWI=
Subject key identifier: 5B:50:74:8C:2B:13:37:05:F3:0F:67:4B:85:C4:09:1B:BB:C0:A7:DA
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019EB5E91CC5554718D17F93CFC375F1D8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 020B
Signing time: Thu 11 Jun 2026 09:00:13 +0000
Manifest this update: Thu 11 Jun 2026 09:00:13 +0000
Manifest next update: Fri 12 Jun 2026 09:00:13 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: NW4pyOC46rQilIBdGMqtbvcjoEdajtH9XKNieFTQnzk=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:1c:c5:55:47:18:d1:7f:93:cf:c3:75:f1:d8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Jun 11 09:00:13 2026 GMT
Not After : Jun 12 09:00:13 2026 GMT
Subject: CN=5b50748c2b133705f30f674b85c4091bbbc0a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:bf:35:b6:35:ed:51:76:c4:1b:71:04:45:
c9:62:88:2c:46:25:49:76:79:6b:ce:e1:bb:05:94:
17:d9:bd:ba:d2:1f:8b:f9:09:42:4e:ca:5f:d4:13:
32:92:da:74:e1:84:a0:dd:bb:5d:6b:ae:f8:53:42:
1a:77:ff:ab:78:ba:29:15:9b:3f:f9:91:b5:eb:c1:
a1:a6:54:32:2d:0c:52:4e:10:c0:2c:0b:50:35:33:
45:25:63:88:6b:3d:60:ad:4d:cf:9f:cb:87:9b:10:
47:ce:51:0e:ae:62:02:b7:b0:a8:73:5b:5f:9a:35:
28:e7:30:99:a1:98:62:df:3f:53:a7:38:b8:cc:d6:
80:a9:5b:0e:27:09:3e:ec:4f:9f:6d:14:1f:c6:37:
7e:98:de:30:3d:5d:9f:42:2e:3a:d5:c6:ad:b5:a6:
23:0c:ca:81:a0:62:40:f4:cd:03:8a:c8:d4:43:67:
8f:9a:86:4d:d4:17:3e:0b:e9:49:1c:a2:ff:cc:eb:
a9:04:22:7b:bc:cd:7c:41:e3:d5:8c:1b:ce:36:7e:
cc:f9:11:ba:ea:43:44:ad:9a:a1:81:45:ee:e3:42:
16:f2:97:e0:76:8f:34:01:69:7f:35:82:4b:49:40:
98:90:08:ff:b2:47:48:39:29:4f:59:c0:ed:8d:34:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:74:8C:2B:13:37:05:F3:0F:67:4B:85:C4:09:1B:BB:C0:A7:DA
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:5e:cd:73:95:19:09:6a:08:ec:79:18:b7:56:a7:7b:a6:
00:a8:87:6a:bc:43:ac:bf:33:90:d0:94:c9:b5:a5:18:9f:e6:
b8:15:db:90:1c:37:f3:b6:0e:ca:85:1c:8d:d1:48:5e:12:75:
af:89:0c:7b:24:57:c8:a5:99:64:e7:00:f3:93:da:76:eb:e9:
62:03:96:4f:e9:bb:f7:47:83:83:a1:e7:58:66:77:3d:a2:db:
80:9b:77:4c:8d:6b:97:c9:96:2e:fd:b7:d6:a7:5a:ea:d7:59:
35:06:d5:f0:c7:1b:a5:62:8d:3c:eb:1e:a1:b6:cf:6b:f3:89:
92:c1:56:1d:e1:86:e3:f0:31:3d:0d:19:75:df:7e:ac:e7:e7:
b0:f2:3a:c4:85:54:6b:35:9f:33:8f:18:ef:bd:ae:99:7d:52:
08:78:99:0b:c0:41:1c:c3:70:cf:ba:78:27:47:ca:25:4c:58:
5c:0b:32:63:48:ac:cb:d2:8c:61:a7:65:e9:88:2b:f9:6f:16:
dc:ca:b5:32:33:81:ec:91:99:fd:6d:7c:4e:89:7c:63:23:b7:
e3:dd:97:fc:3e:9e:19:7a:53:c8:c0:e2:a3:7e:61:ca:c2:9f:
d5:63:a0:9c:72:bf:91:9f:c8:f6:72:4c:1c:6a:3b:df:4d:1b:
db:73:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:52:33 2026 by rpki-client