Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: xihQJRkzCIkfOCjhFckVS9IMBpkzKp3/vOS0TqC1uYo=
Subject key identifier: 03:0F:C7:5E:A5:19:95:24:EF:94:6F:5D:2C:06:8A:D0:F0:94:21:92
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019D3977E39284FA77C08F6011B963C56A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 0146
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: hphRTnXDeaPd1NSXx/rCltJzM8hcYzRVkox/+gc1nJY=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e3:92:84:fa:77:c0:8f:60:11:b9:63:c5:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=030fc75ea5199524ef946f5d2c068ad0f0942192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:05:65:00:84:1f:ab:38:b8:ac:9c:a5:04:
05:cb:29:3d:30:b6:a8:b8:9e:44:1e:b9:3a:17:cc:
df:a8:05:90:b6:c6:40:d8:39:2f:ea:d2:76:ff:5c:
9e:2c:3b:af:66:66:a8:fa:6d:00:fb:9c:18:5a:ec:
19:72:db:fc:4a:5a:0c:a6:d3:9a:c2:c6:89:f6:8a:
c3:f0:ff:7d:33:1e:2d:c5:0d:6f:22:51:f8:f9:f2:
89:d7:26:a7:c6:56:ba:34:f1:4e:71:53:4d:99:29:
d2:03:d2:51:ad:7f:c7:66:5e:38:d1:6f:53:b8:94:
bd:0e:f5:1a:49:15:21:c3:0c:ba:e4:22:62:b6:5f:
c2:33:c5:25:db:8c:e3:dd:c0:70:e1:05:7f:4f:b8:
73:ab:c3:7e:bf:1f:b9:57:9b:8b:82:5d:89:6f:13:
8a:d1:86:c8:11:22:85:4b:aa:33:d0:35:c8:fb:7a:
81:ff:27:78:67:88:29:97:c8:02:8f:66:b2:11:66:
f7:a2:0a:e3:50:4b:b1:5b:09:d8:44:ae:a1:78:32:
da:cd:e9:07:cb:e3:9b:51:7d:77:81:32:d4:9f:29:
50:4e:7a:c5:93:9f:f6:0a:8b:f8:c7:60:f8:c9:8d:
69:08:9b:01:8a:9c:fa:7a:07:76:47:e3:63:62:90:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:C7:5E:A5:19:95:24:EF:94:6F:5D:2C:06:8A:D0:F0:94:21:92
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:64:7b:dd:fc:35:2f:27:fd:68:8e:d1:68:0f:0b:28:96:d4:
73:42:93:ad:55:ee:cb:d3:ae:96:47:86:9d:39:ba:46:e2:1f:
3d:59:65:b1:a0:8d:05:95:c2:3d:04:01:04:03:c9:4f:3d:e0:
13:8d:4e:92:58:98:15:a5:bc:8b:ca:15:75:4d:4d:30:81:28:
4a:e8:f1:8b:1e:59:13:ae:2a:62:8d:b4:a7:7e:36:2d:32:3a:
bc:cb:f6:3a:3a:50:c2:5a:d5:2b:fc:8f:0d:47:4c:5f:75:9d:
e4:c2:3d:0a:8d:1d:ec:e7:81:a0:65:5f:64:ab:b3:f1:40:22:
46:48:8c:be:d1:45:b9:f4:0a:dd:e2:13:2a:85:2b:45:d9:77:
e2:c4:4f:a8:ff:aa:0b:1f:f3:b9:17:53:e5:43:d0:48:b0:17:
3a:2e:70:1a:1e:e5:99:a7:00:ed:80:94:47:ec:64:a0:88:da:
fc:fb:bf:5e:a0:e5:e1:86:51:ca:54:d5:db:b3:9f:e0:03:6d:
c5:60:5f:86:a7:0a:e0:ab:62:ae:94:bd:bc:75:4a:1a:a9:c6:
d8:91:b3:db:41:b0:97:60:30:3c:c0:79:bc:c6:1a:45:d6:69:
67:f2:21:7c:e6:54:0a:fd:f7:d7:8b:b1:46:99:75:e1:95:09:
9f:36:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client