
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: GrBgEXDTnH5hG3LMGafRkQgFYiiUCENiadj4lfO2UQo=
Subject key identifier: A0:33:26:9C:55:79:6A:9E:01:6A:B5:8A:84:79:A6:E9:D0:E2:1E:E2
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 01A0CD7EBD6B0290CE96BA9D7D540B5EFB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 1967
Signing time: Wed 23 Sep 2026 09:00:30 +0000
Manifest this update: Wed 23 Sep 2026 09:00:30 +0000
Manifest next update: Thu 24 Sep 2026 09:00:30 +0000
Files and hashes: 1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: aAUDqZmTYjC1euzgPrQpHlDNx6M6a0eFLN5kcocwBc4=)
2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:bd:6b:02:90:ce:96:ba:9d:7d:54:0b:5e:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Sep 23 09:00:30 2026 GMT
Not After : Sep 24 09:00:30 2026 GMT
Subject: CN=a033269c55796a9e016ab58a8479a6e9d0e21ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:77:e5:11:12:58:eb:c2:ef:09:1a:fc:52:
f2:67:bf:a8:81:50:5c:50:2c:47:02:9f:c1:fe:74:
4a:2a:a5:2e:56:f1:ed:c4:41:d1:29:f5:2a:4f:55:
f2:e0:36:f4:f8:72:7c:db:04:b2:66:2d:77:04:29:
16:14:cc:93:90:4c:d9:a8:ed:64:8d:4d:15:02:86:
1b:50:c0:1b:a7:58:1a:1e:8c:02:3f:98:49:9e:f2:
44:4f:f4:2c:2e:f6:46:2b:da:44:67:ce:ef:67:1e:
61:56:d1:53:62:ed:23:d4:68:6d:4c:9e:b4:45:e5:
8f:4c:e2:a4:27:00:d9:bc:69:4a:d1:8f:43:3d:74:
0c:b5:9e:95:ef:bd:3f:9c:e1:8a:6c:a6:72:57:9e:
45:5d:25:02:0f:c5:e7:73:82:ae:72:a6:bb:6f:10:
07:c2:cc:f5:69:e4:62:11:7f:11:f0:9a:fa:b8:48:
e5:5f:8e:39:8c:1f:a2:87:42:f4:72:ff:2c:68:45:
b5:b9:f2:15:15:d2:f7:a3:a8:fd:5e:f8:da:f3:d1:
b3:47:43:03:20:41:57:c5:44:f1:ee:5e:e8:cd:33:
e3:6f:13:68:fe:e7:07:ef:f4:fc:b4:cf:81:a9:6a:
67:a0:13:81:89:aa:9c:4e:bb:4a:49:4d:94:68:24:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:26:9C:55:79:6A:9E:01:6A:B5:8A:84:79:A6:E9:D0:E2:1E:E2
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bb:1e:31:ad:c2:56:60:aa:ec:ec:3d:7e:7d:87:9f:95:f5:
ea:80:07:8a:86:37:40:e5:41:4b:c2:0d:75:01:41:5a:75:80:
a6:87:f9:59:b1:5e:f4:be:19:a6:84:da:f1:69:4b:99:6a:7b:
86:a2:bf:1a:17:cb:9a:dc:d0:3d:f2:d6:fe:bb:ae:6c:db:ec:
94:e3:68:e6:a4:8e:a4:50:64:aa:06:73:4c:67:8a:93:2a:0a:
84:c9:54:e3:21:95:14:09:6b:97:5c:de:a3:3e:70:da:ea:60:
0e:e6:7b:4c:01:54:34:2a:fd:95:61:67:c2:5b:a8:c2:3b:fe:
91:27:07:22:d4:b7:3d:c9:3b:42:c0:0c:38:38:af:0a:21:91:
77:fe:bc:bb:21:64:9f:fa:f2:96:2f:03:87:a1:9f:68:16:2c:
d4:b6:e7:dc:40:c3:76:f3:36:50:8b:c7:ec:08:f4:d5:ad:a6:
cd:59:65:77:a4:44:bc:90:b7:33:82:65:43:d0:a4:a6:73:fc:
31:e8:fc:ed:8f:ab:fc:54:46:b6:3a:b5:7b:57:67:a1:5c:b3:
09:43:b9:97:bd:67:6b:d9:24:9c:9d:b2:0b:47:1a:09:91:82:
4f:15:7f:36:5d:4f:e8:a6:25:e9:1c:f8:fc:d9:4d:dd:36:75:
3e:4d:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:02 2026 by rpki-client