Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: H8SrDMj1JxT44SD+GhNBuSscON65rifG2Fzj11fKR+Y=
Subject key identifier: A6:62:1E:DE:4B:50:B8:F5:91:87:2C:3E:07:28:43:A2:87:4C:06:60
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 019D29CEA215F136664723282949F37226CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 11:01:40 +0000
Manifest this update: Thu 26 Mar 2026 11:01:40 +0000
Manifest next update: Fri 27 Mar 2026 11:01:40 +0000
Files and hashes: 1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: X04cUzwU+QKJHqLuAT73ihhK8nA99/jeOyRRtZBN020=)
4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a2:15:f1:36:66:47:23:28:29:49:f3:72:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Mar 26 11:01:40 2026 GMT
Not After : Mar 27 11:01:40 2026 GMT
Subject: CN=a6621ede4b50b8f591872c3e072843a2874c0660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:f6:73:43:49:e9:2f:a5:d4:52:93:7f:d2:
6f:f3:07:ef:a3:5e:ae:3f:82:0e:11:2c:bd:d2:18:
58:c0:4f:3e:af:c7:43:9d:7b:2d:ae:63:4f:24:8c:
9f:7a:64:42:d1:2e:aa:db:be:1e:d8:f9:62:0c:28:
80:cc:ca:06:10:37:e3:fe:d8:9c:b2:5c:40:ef:bc:
4c:73:b8:5c:92:a2:56:33:56:d4:da:6d:93:ec:fa:
ed:c9:9f:08:40:d1:8f:e4:6f:f8:1c:2f:40:6f:d9:
cf:cd:1f:a8:35:ac:07:4e:22:66:e5:c3:12:14:4d:
36:ab:d2:ce:15:16:4a:ed:39:e6:e5:2d:74:fc:db:
6e:a1:c1:68:d2:bc:bb:46:5c:be:d1:d9:8d:71:aa:
84:f5:7d:71:7b:c0:6c:09:b8:1f:92:eb:78:4d:00:
c2:2f:aa:c4:99:36:19:3e:d6:e5:3f:ae:9b:f9:da:
7a:10:71:75:35:95:b5:c8:e0:f5:36:a9:47:ad:88:
c4:42:4a:c4:ea:c2:85:8d:78:d4:3d:f7:d5:27:a9:
1f:6c:9a:2b:cd:bf:41:ae:07:39:a5:13:df:e8:09:
62:4a:e3:e0:0b:1c:57:c7:4e:a3:a2:44:46:c5:e7:
0b:d5:61:30:3f:2a:cb:d2:fb:58:0e:d5:2e:64:8d:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:1E:DE:4B:50:B8:F5:91:87:2C:3E:07:28:43:A2:87:4C:06:60
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:67:ee:0f:de:84:7d:1b:0b:b5:14:2f:ec:90:d0:e0:80:
36:bc:72:a1:06:78:8d:53:e1:da:a4:a9:24:e6:95:81:1d:12:
24:8f:c1:31:80:e2:3b:98:7a:ed:6b:92:4a:37:80:2c:d6:24:
de:f2:36:cd:21:c0:42:b2:5b:b8:c6:f5:53:77:2f:ac:b3:c4:
c7:c4:24:1c:b3:3e:0c:7d:91:62:44:14:f7:ff:f5:db:c2:3b:
84:ad:ee:c9:dd:80:e1:c9:73:5f:21:e6:84:8b:57:12:6a:90:
57:1c:ce:91:e4:ac:9a:87:a9:c7:0f:ab:5b:be:20:80:fc:b5:
08:47:f9:d8:d9:58:9d:60:2d:5f:70:b2:2f:a4:d8:ec:5e:5a:
c6:38:fe:a9:89:da:13:08:eb:bd:b0:b8:76:5a:d0:ea:d1:c6:
9e:d5:70:66:e1:9a:bf:97:37:bf:de:2d:7e:e5:93:81:1e:82:
7e:c5:d0:4d:a0:a1:72:d4:56:8f:14:75:0c:ba:0b:69:ff:63:
98:f9:ee:85:42:1d:20:45:82:41:11:f7:69:d5:cd:36:56:e2:
da:e9:3a:8e:4b:54:cf:89:49:2f:c2:54:4c:28:2b:00:c9:9c:
59:86:e6:1e:c1:68:18:75:46:66:ed:ac:30:c2:54:1d:56:1b:
d5:55:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:15 2026 by rpki-client