Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: dX2nswJKbSe6JSzCQkWdpXyEErrdACGYiFq6nmzJpLg=
Subject key identifier: FA:78:9F:BF:EF:82:05:15:B1:29:94:6F:C7:52:D4:A9:8B:61:05:36
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019D281684274774E0E153E471B31CC44AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 0258
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: ybCAlkz4Ojhq7cSyqfis8ZU0b4NJ8rZdY/8h7XD4UaQ=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:84:27:47:74:e0:e1:53:e4:71:b3:1c:c4:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=fa789fbfef820515b129946fc752d4a98b610536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:bf:c6:44:fc:27:fe:e7:37:6c:9e:ca:93:
5c:20:88:9c:3b:94:9d:b0:8e:4a:df:88:97:b1:50:
b4:40:3a:7a:73:f4:0f:18:b7:2f:89:84:fe:85:fa:
35:d5:16:25:c1:33:a5:93:dd:83:4c:fb:79:01:b4:
33:78:2e:f7:09:51:d7:a2:9f:9c:a2:b8:6b:15:fb:
f4:c2:c4:b1:20:1b:cc:04:23:46:c9:aa:85:e5:61:
4c:3a:31:95:34:bc:e7:77:9a:72:f9:d2:a8:49:42:
24:79:56:cd:b2:da:2f:95:23:4f:2e:27:88:da:62:
70:29:57:42:3b:7d:b5:78:00:62:c1:bb:5d:29:e9:
67:31:6d:8e:80:e6:c6:17:c8:c5:f0:8d:44:d1:ca:
ab:01:77:49:02:ca:39:e2:7a:6b:aa:6c:c2:75:35:
6f:73:71:14:65:c2:bb:07:90:2f:fb:22:ad:b7:68:
d2:7e:73:70:70:c3:fb:52:fa:cd:eb:e2:cf:de:3e:
97:42:3d:d8:0b:8c:e4:79:e5:36:3a:40:e1:a4:4d:
b4:01:dc:f5:84:0b:b6:e0:68:2b:28:2f:d6:1a:05:
d6:81:a5:3d:9d:bc:80:a9:b6:59:5a:18:47:b7:2e:
cd:bc:83:e9:c3:6b:a7:8b:79:4e:a2:1e:ef:b7:ac:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:9F:BF:EF:82:05:15:B1:29:94:6F:C7:52:D4:A9:8B:61:05:36
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:54:c8:ff:72:12:6f:c5:7d:57:28:c5:b1:20:b2:84:1d:
4b:69:b3:65:8b:0d:7d:78:66:d7:33:99:84:bd:b2:ec:7e:a8:
e0:5c:bc:b2:24:d6:7b:9d:2e:6c:2c:9f:48:ac:7e:89:6f:df:
d9:ed:01:b8:87:08:4f:ed:77:7b:e7:74:0e:3f:1b:c0:42:9a:
c9:01:f3:e0:b4:b6:32:bf:d7:58:00:ea:35:25:6e:1c:3e:14:
0d:e2:60:d6:f8:03:aa:61:ec:1e:7a:87:6b:74:32:cc:4d:2e:
4a:9b:37:6d:bf:55:1b:a7:04:2d:29:05:44:cc:6a:e1:dc:28:
d0:46:6e:02:27:46:ba:a0:88:81:eb:2b:5b:de:bd:2c:2b:20:
b9:89:5d:53:1d:21:60:96:36:38:c2:4e:b6:f0:a6:5b:53:e4:
18:16:4a:e9:68:c2:ff:3f:29:51:f3:fd:7b:2a:cf:cf:30:46:
48:66:55:6c:6f:63:23:44:31:64:3d:cf:7e:8a:79:5b:c3:c3:
e3:8e:c5:86:96:bd:6c:ab:23:bb:ce:a4:58:3a:75:9f:9b:ee:
ce:12:b0:0a:b6:95:b7:90:0a:43:83:fc:1f:88:0e:57:2b:4c:
5e:8c:55:b3:52:6a:e1:3f:8f:c9:f9:08:c1:2f:78:6c:d7:40:
4f:e7:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:38 2026 by rpki-client