Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: AP9Q9m/TnxEhGjpyD1Lf1MuyFVlOGC+0FXLQyoFmtwE=
Subject key identifier: 72:28:EB:A0:24:FD:9A:F5:ED:A1:4C:2A:A8:69:90:88:49:DA:10:E7
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 019D258336B003B018759103AAA4E637C6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 0B62
Signing time: Wed 25 Mar 2026 15:00:49 +0000
Manifest this update: Wed 25 Mar 2026 15:00:49 +0000
Manifest next update: Thu 26 Mar 2026 15:00:49 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: xGDsSYa8uWg6wUSg2pIuzafqoqWy39vWNM4KRGIGZA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:36:b0:03:b0:18:75:91:03:aa:a4:e6:37:c6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Mar 25 15:00:49 2026 GMT
Not After : Mar 26 15:00:49 2026 GMT
Subject: CN=7228eba024fd9af5eda14c2aa869908849da10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:ee:ba:1c:e7:18:73:19:6c:4b:dc:99:ac:
b3:a9:68:cd:f4:49:3e:9f:16:35:07:52:07:3f:6f:
fd:74:e7:41:02:e5:b8:f4:63:06:71:f5:40:69:09:
10:ea:f1:03:6a:fb:ca:f9:b1:36:b7:8f:6c:4e:c8:
86:59:78:57:72:03:be:55:bd:fc:78:9b:ab:d6:ed:
88:56:b8:07:cc:04:c9:c6:fb:74:a6:8b:4a:20:83:
28:f6:33:2b:c9:0e:2a:9f:12:d4:b6:f3:e9:97:8d:
b2:a3:25:fb:71:47:cc:33:4c:b2:a3:51:c8:ab:5b:
32:5a:98:89:09:6a:95:88:78:61:08:96:a8:d7:3c:
c5:08:f9:70:87:e7:1f:0d:c0:fb:ad:e7:8d:ed:be:
fe:da:08:2a:77:68:6d:7e:17:6c:6f:5a:f0:a9:2b:
c6:02:bb:aa:49:c3:42:ca:ac:e3:a6:fb:1b:9f:a6:
5d:d4:9e:9d:31:bf:a7:93:98:9c:ef:43:6d:ad:8b:
c7:8f:a7:27:7d:3c:55:c7:c3:1a:5f:ed:b2:f3:16:
6f:dc:c7:91:43:01:6b:58:cb:1f:e3:de:c4:66:17:
48:0b:1c:47:78:80:5d:e8:b5:32:73:8d:85:76:dd:
c6:29:65:2c:3a:b5:e0:0b:e6:87:45:d6:b2:18:3e:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:EB:A0:24:FD:9A:F5:ED:A1:4C:2A:A8:69:90:88:49:DA:10:E7
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:09:7a:89:51:54:df:5d:98:90:e5:c1:0d:c5:03:67:80:
09:9f:69:0a:4f:6f:a1:78:d3:4d:ac:1b:39:65:ed:40:ec:86:
ed:bc:df:2d:36:75:1d:f2:2b:93:7c:0e:e6:87:23:85:9d:2b:
a5:d4:a2:de:02:8d:03:7f:2a:5b:0e:57:29:b6:ec:5d:f4:46:
c5:15:b2:d3:51:74:7b:df:9d:e1:95:23:14:ab:1b:f1:03:c0:
cc:fe:6f:e5:f7:6f:3a:6f:37:df:67:07:7c:b0:ce:9e:f4:fe:
14:35:5b:6d:7a:b4:b3:4f:7a:80:4c:8c:90:43:7e:7a:b9:be:
52:4d:9f:57:32:d1:3a:7e:46:d2:23:f3:ec:31:58:b4:74:50:
d2:50:c7:ce:8a:dd:7f:ef:e8:c2:72:86:d0:9d:3c:83:25:24:
7d:1f:de:85:82:e8:b9:18:17:db:85:26:5a:75:8e:31:c5:41:
d0:d4:b0:96:08:45:b5:6b:da:e8:fb:a1:90:4d:1a:46:e5:a6:
66:ff:47:04:11:0a:57:f8:be:df:a2:e1:20:6e:46:49:12:81:
15:19:51:b1:56:ef:a0:63:92:f6:12:1e:e3:9e:3c:41:10:e9:
41:b7:2c:8a:cb:21:63:70:3c:79:fb:49:52:e3:18:dc:10:9d:
1c:10:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client