Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
File: og1pGrGc3PKKmJbL9aegr0uWHpg.mft (raw, json)
Hash identifier: X+hv2OKwUO2uX7eetCH8PQdgg5mB/fsbIDfXiXYzGQA=
Subject key identifier: 93:D0:9A:B9:F3:DE:73:95:2F:98:96:5E:C1:F2:4A:A6:AA:68:92:72
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A17DE161039F36102F9BD5D17A8FCF2779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
Manifest number: 0140
Signing time: Tue 27 Oct 2026 15:01:24 +0000
Manifest this update: Tue 27 Oct 2026 15:01:24 +0000
Manifest next update: Wed 28 Oct 2026 15:01:24 +0000
Files and hashes: 1: 6ooBKqODZG-Sfj_comNyd2sFbho.roa (hash: 5M67xR2rRGTfh2U+1vfNIVWM6nUiRi28sSM5j9PI9Ko=)
2: 7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa (hash: nAtI6W4M1c0vsQcQPICfweTzeaicv4tPcI6rzxIYt3U=)
3: Ht4gLytEcp_KuBqBAxhc4TGmrqY.roa (hash: Ku7KdI3THuaF+2J+NEcq3D/LPC2M+x1PZP/Vfd+uHGA=)
4: IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa (hash: OO25rjwfSavJiJbGapEYm9624aA5wv7SmTNCcKdZxlc=)
5: TT8-biGj6CFuxERFdHhLIBjNePs.roa (hash: FQ8jfBT4/96D/e5hkPSQmC2cdfeej56HOqwfNbEnQl8=)
6: jLICgzGjZbg6ih5YbC1LTWsuPhA.roa (hash: 0iWQKi/+XiZtP0YMahcmPIoWNvYsjSIN8AISUMTg1xo=)
7: lrxW-68xMEjuQOGQtmcz2oD98IQ.roa (hash: Aj4NQFWqkGRsVLSnM+GlHUa3QlgiT+8/Rte7ZwlNNS8=)
8: og1pGrGc3PKKmJbL9aegr0uWHpg.crl (hash: 91aN/kPMrXetxwM0nky7HRAqBXosFU20ytne5Fmc7I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:61:03:9f:36:10:2f:9b:d5:d1:7a:8f:cf:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Oct 27 15:01:24 2026 GMT
Not After : Oct 28 15:01:24 2026 GMT
Subject: CN=93d09ab9f3de73952f98965ec1f24aa6aa689272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:84:19:fd:a8:fc:97:ab:f2:7f:eb:0f:bf:
e3:e5:ad:19:49:be:a4:d4:c6:f1:ef:04:68:22:b3:
a1:92:f5:ed:bc:37:d3:93:5d:60:78:04:29:bf:81:
8e:a5:17:b4:e3:bb:63:af:cf:0c:a0:fd:1f:08:a7:
8e:aa:08:cc:ea:da:43:f9:19:fb:fa:40:ba:f2:ce:
89:ff:0c:6c:37:6a:cc:d0:65:2e:df:51:0e:07:40:
c8:e9:f6:f4:44:6e:47:9a:76:3c:0b:78:b9:d9:03:
30:97:e2:0d:dd:86:c2:c7:a7:b9:74:e0:98:9d:44:
61:ac:45:cf:aa:19:a4:b0:80:ef:4b:0d:0e:f6:cf:
c5:7b:6e:5f:bc:c3:39:57:23:be:39:87:08:d0:69:
52:f5:cf:6d:17:d5:1a:36:d6:30:0a:30:aa:04:d3:
3b:91:79:26:8b:29:e5:a9:99:39:43:e8:d2:79:e8:
0c:05:68:2f:ed:a7:1c:b8:18:17:de:f6:3e:c3:d9:
c2:36:90:a2:9a:ac:6a:3a:24:8e:4b:91:9f:d8:e2:
4a:b3:f9:f2:59:66:dd:e9:c2:fa:c5:f5:d0:77:fd:
2a:3c:96:c9:c0:07:9b:48:d8:7c:35:97:fc:12:24:
30:1f:cf:dc:e4:d0:8d:47:3f:97:4a:f5:cf:82:0b:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:9A:B9:F3:DE:73:95:2F:98:96:5E:C1:F2:4A:A6:AA:68:92:72
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:0b:d6:b5:c6:74:81:20:ce:72:7c:39:d5:68:dc:f8:15:
f7:3e:64:0b:6d:99:85:6a:eb:47:69:71:68:86:e4:39:5c:b4:
0d:6e:e0:60:b5:3f:5a:25:b5:0a:66:69:9a:8c:9f:39:fd:43:
00:c0:0f:5a:60:70:82:a3:5a:ca:29:de:a3:61:09:00:29:8c:
3d:9d:6a:b9:24:05:18:96:1a:78:02:ca:44:2d:0b:a2:73:2d:
13:ce:75:ba:46:d2:aa:c2:6b:fa:9f:d7:ec:91:ff:80:83:69:
da:4b:36:94:08:f7:12:29:56:16:1c:f6:5e:1d:b0:c3:e4:14:
15:ab:e8:3b:2f:78:21:ae:0c:30:72:b7:4b:44:3d:b4:ff:14:
e9:f1:04:29:1a:16:05:e3:06:6d:b0:0b:9a:9c:c5:9d:ec:db:
ac:a4:4a:80:cb:87:28:f2:16:7c:72:6b:41:46:e1:65:02:f3:
91:02:ea:76:31:80:c4:76:04:f5:56:32:06:a6:e9:eb:55:c8:
94:8a:74:80:24:0a:b2:fc:76:2b:a5:ca:fa:7f:26:c0:3c:40:
45:41:06:17:4f:31:16:c2:83:69:aa:92:4e:58:6a:2d:38:9c:
01:71:38:fe:32:d6:f5:87:e9:af:a2:96:a9:e4:19:8b:3a:34:
e7:2b:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:09:54 2026 by rpki-client