Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: Lr6hqJdTMg0DUrtd2NP+xATxuiA4XHPWJZClCyYNqcA=
Subject key identifier: C4:60:F8:2A:73:34:66:9A:8F:9A:B9:BB:8C:5C:B7:F7:B7:B3:48:7D
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 01A0CCDA2AD9554AF63CCDEF159B33CB114F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 043B
Signing time: Wed 23 Sep 2026 06:00:44 +0000
Manifest this update: Wed 23 Sep 2026 06:00:44 +0000
Manifest next update: Thu 24 Sep 2026 06:00:44 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: 4Nsdz9qQiEdEGhH2jBuvTf13PI1s4gPBE/umt+Nwm6Y=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:2a:d9:55:4a:f6:3c:cd:ef:15:9b:33:cb:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Sep 23 06:00:44 2026 GMT
Not After : Sep 24 06:00:44 2026 GMT
Subject: CN=c460f82a7334669a8f9ab9bb8c5cb7f7b7b3487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:17:40:02:17:7d:ed:2f:91:0f:0b:20:eb:
ee:94:a2:ec:f6:35:d4:0b:f3:47:57:0b:7d:04:35:
54:c4:fb:0e:b7:1a:26:38:c4:e7:2e:c4:b6:9d:85:
c9:2a:ba:4e:c0:60:68:ad:00:9d:a6:fd:0c:97:fc:
d6:2a:e1:40:66:0c:f1:47:55:6c:02:91:98:7e:cd:
4f:67:ac:a1:7b:44:b9:2e:8f:38:b6:c9:8a:a4:c3:
c9:0e:57:90:c1:a5:03:96:2a:6c:d4:81:15:c2:43:
fd:85:00:ae:2e:ac:cb:da:89:b1:67:91:d8:5d:63:
24:4f:6b:06:30:a6:e8:d6:e1:8c:30:ab:7f:23:f7:
bc:85:15:e1:54:b8:53:9c:f9:60:01:76:6e:82:2f:
c6:1b:6e:28:98:7b:62:db:8b:2c:0f:78:13:58:c0:
e6:ec:68:f7:04:9b:2a:76:41:09:fb:80:10:64:fc:
69:d3:01:53:30:34:8d:e5:f8:28:6d:c0:7b:eb:25:
70:d9:b3:12:6a:e1:81:2e:67:a9:e1:12:2e:9f:a4:
ec:99:11:3b:bc:9e:46:7c:22:b8:92:46:8b:52:95:
d7:26:19:76:dd:57:76:d3:66:d3:a8:92:ce:a2:29:
59:9d:b8:5b:be:d7:3f:73:c5:bd:e7:42:d8:bb:af:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:60:F8:2A:73:34:66:9A:8F:9A:B9:BB:8C:5C:B7:F7:B7:B3:48:7D
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:29:de:f6:ad:78:df:2e:01:f1:88:35:58:49:fd:2d:87:
64:10:8d:d2:57:76:a2:b7:3c:a2:ee:7e:ec:ee:91:22:76:7a:
c2:61:4e:9c:f7:c8:42:3c:9a:8a:43:e5:2f:63:af:ab:08:ed:
c4:75:b3:e6:55:7d:09:c3:63:ca:a4:13:88:bb:ce:eb:80:1c:
a1:62:b5:3f:18:33:8e:9c:d8:69:7e:d4:ea:55:f8:90:3f:93:
03:52:14:30:93:15:f4:91:12:3f:d9:f3:a8:b1:6f:f5:9b:51:
46:30:43:1a:24:41:e6:ba:6d:1c:93:4b:51:e1:9d:e8:7a:e6:
cc:cb:31:15:e5:4a:bf:fb:ab:ee:2e:05:e1:d7:95:97:55:e3:
70:c6:ff:1d:f6:8b:35:f8:cc:37:53:59:d4:7b:4c:a7:88:03:
39:13:b8:f5:c1:45:36:07:13:e0:7f:2a:b3:42:66:2f:19:fa:
47:b6:2c:67:a2:6c:83:51:c3:e0:f5:ce:93:c7:62:84:5a:d2:
0a:ea:84:e9:eb:a7:ce:6f:57:bd:af:fe:33:8b:14:00:83:3f:
bd:ed:ee:99:b8:2d:98:39:15:5b:7b:ae:f0:55:c2:7c:ff:db:
06:fc:de:e9:e6:ab:b0:a5:e2:b5:a2:89:32:47:e8:75:d4:f9:
0d:73:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:52 2026 by rpki-client