Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: 4PE7j6Ye2e1ePzoO5/BOyvgZkuSehYjn7+kqLMeDxok=
Subject key identifier: 05:D4:23:DB:97:5B:03:54:D5:FF:69:22:E2:D8:F9:8B:42:0A:26:5C
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019F902368B0F13D91962E9A26480CB9DC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 0397
Signing time: Thu 23 Jul 2026 18:01:07 +0000
Manifest this update: Thu 23 Jul 2026 18:01:07 +0000
Manifest next update: Fri 24 Jul 2026 18:01:07 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: 9Hb7KhNDjPvU+m73mRc9L2Z9ysqFoZe/balXc1FqnIQ=)
2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=)
3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:68:b0:f1:3d:91:96:2e:9a:26:48:0c:b9:dc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Jul 23 18:01:07 2026 GMT
Not After : Jul 24 18:01:07 2026 GMT
Subject: CN=05d423db975b0354d5ff6922e2d8f98b420a265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:72:3b:1e:07:75:19:2a:20:a5:7f:b3:8d:
e4:d4:e6:e2:c0:dd:c8:24:18:56:b0:7c:db:19:e3:
bc:5e:9e:1e:3f:3d:80:c6:ad:1c:cb:4b:c5:ed:9d:
2c:61:b6:80:d9:90:12:ad:0b:02:41:1d:22:02:a9:
13:f2:24:46:83:ad:6a:ff:76:65:9a:d7:32:43:e2:
90:c5:cd:6f:bc:c7:a1:3d:43:b6:50:a1:c7:24:c0:
2c:30:bc:b5:8c:06:69:fb:f8:69:b3:65:35:34:c6:
1b:4c:40:7a:fc:9d:27:e8:b7:41:34:75:fa:08:46:
18:8b:a6:b6:dd:78:36:37:65:e2:cc:53:cc:a3:af:
b6:91:98:97:3a:1b:15:3a:9d:4e:df:75:09:0d:34:
81:09:bb:67:14:3f:91:6b:2f:e9:47:fe:6c:3c:1c:
16:ba:9d:63:35:36:13:e7:4d:76:cd:6b:ea:73:11:
0b:10:e9:9c:ff:c7:f6:d8:41:fc:df:11:d3:8f:13:
f0:d2:c4:f1:99:93:a3:72:f6:9c:31:69:c6:2f:f9:
fd:1e:2f:33:57:11:cd:28:23:39:32:e8:42:97:64:
b3:7d:23:22:ac:1c:e0:87:b3:5d:85:d8:01:49:5b:
05:dd:f1:0d:ee:00:ce:42:48:4f:4b:6a:b2:27:12:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:23:DB:97:5B:03:54:D5:FF:69:22:E2:D8:F9:8B:42:0A:26:5C
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:74:e9:43:1b:de:88:d3:b7:77:6a:d7:42:af:b7:bc:09:b6:
b7:f9:69:b4:a5:50:2d:88:74:de:f1:dc:84:92:d3:5a:ee:1d:
6c:56:9d:08:d6:5e:83:34:68:2c:c6:47:fc:fc:72:b1:cb:0c:
8d:ac:0a:6d:18:5a:8c:40:83:6e:7b:ff:c4:85:81:7a:3f:e5:
16:67:b8:17:02:a2:5a:33:88:c3:59:f1:1c:c5:b4:ef:82:c4:
23:43:17:72:a7:ad:52:85:21:52:73:c8:3d:1f:13:28:ef:72:
cb:61:f6:02:99:cd:4b:53:17:28:68:6e:07:01:76:62:95:0c:
17:66:d0:0d:65:fa:62:97:8c:a0:c3:aa:dc:5e:17:a8:ae:8a:
a0:3b:ec:37:d0:bb:fb:de:f4:10:04:75:6f:72:8f:a1:bc:de:
de:c6:30:06:44:3e:8d:fc:f2:3e:a0:bc:f4:69:18:5e:71:a0:
f5:86:5b:1b:32:0a:3c:39:3a:ae:04:d9:40:c2:68:7d:98:f7:
e6:eb:07:d5:dd:77:4a:4d:ea:dd:6b:70:9b:31:6f:6b:9e:4b:
55:2a:63:82:d7:5f:71:77:21:9f:e2:ca:de:59:01:22:cd:25:
ae:82:f7:6d:aa:9a:2f:98:57:7d:2d:0d:77:79:95:ca:63:f7:
e5:e9:ef:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI2iw8T2Rli6aJkgMudwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy
NjQxMmYwHhcNMjYwNzIzMTgwMTA3WhcNMjYwNzI0MTgwMTA3WjAzMTEwLwYDVQQD
EygwNWQ0MjNkYjk3NWIwMzU0ZDVmZjY5MjJlMmQ4Zjk4YjQyMGEyNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ZyOx4HdRkqIKV/s43k1ObiwN3I
JBhWsHzbGeO8Xp4ePz2Axq0cy0vF7Z0sYbaA2ZASrQsCQR0iAqkT8iRGg61q/3Zl
mtcyQ+KQxc1vvMehPUO2UKHHJMAsMLy1jAZp+/hps2U1NMYbTEB6/J0n6LdBNHX6
CEYYi6a23Xg2N2XizFPMo6+2kZiXOhsVOp1O33UJDTSBCbtnFD+Ray/pR/5sPBwW
up1jNTYT5012zWvqcxELEOmc/8f22EH83xHTjxPw0sTxmZOjcvacMWnGL/n9Hi8z
VxHNKCM5MuhCl2SzfSMirBzgh7NdhdgBSVsF3fEN7gDOQkhPS2qyJxJTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXUI9uXWwNU1f9pIuLY+YtCCiZcMB8GA1UdIwQY
MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt
MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4
LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnTpQxve
iNO3d2rXQq+3vAm2t/lptKVQLYh03vHchJLTWu4dbFadCNZegzRoLMZH/PxyscsM
jawKbRhajECDbnv/xIWBej/lFme4FwKiWjOIw1nxHMW074LEI0MXcqetUoUhUnPI
PR8TKO9yy2H2ApnNS1MXKGhuBwF2YpUMF2bQDWX6YpeMoMOq3F4XqK6KoDvsN9C7
+970EAR1b3KPobze3sYwBkQ+jfzyPqC89GkYXnGg9YZbGzIKPDk6rgTZQMJofZj3
5usH1d13Sk3q3WtwmzFva55LVSpjgtdfcXchn+LK3lkBIs0lroL3baqaL5hXfS0N
d3mVymP35envpQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:45 2026 by rpki-client