Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: ISYAq8iaCYxmkFpk13sEJQzutn8zoh3xwj18Ge5I1SY=
Subject key identifier: DE:85:0A:3B:39:CA:FE:23:E3:00:47:1E:99:88:1A:A6:63:E0:23:1F
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 019F91A37486F26ECDDC42AD25E8176958B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 04CC
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: X3Okj49hsaPWxmTcxETWHh4tu5KXwjhfISOb7EZq/n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:74:86:f2:6e:cd:dc:42:ad:25:e8:17:69:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=de850a3b39cafe23e300471e99881aa663e0231f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:21:a0:59:9c:e3:7e:71:48:db:3b:52:21:
b1:89:96:76:53:4c:e7:c0:12:76:f6:32:7b:33:bc:
2c:76:1e:7f:94:3b:e4:76:33:29:4a:ff:90:75:2c:
de:24:94:15:b5:c8:0f:ef:3c:27:b5:2e:99:87:f8:
28:2c:75:b9:da:7e:72:0a:0f:c0:ec:6d:29:ea:b7:
73:da:7c:44:4d:d3:18:a4:74:4c:a7:63:42:c0:b9:
71:0d:98:3c:3f:e7:e8:89:8e:d0:8f:58:2f:b5:c4:
27:84:e0:16:68:1b:67:f3:16:d4:2f:e5:d3:0d:3f:
de:2a:d5:c7:25:31:89:a7:22:eb:96:0b:0d:d3:aa:
f0:33:ea:89:b2:70:a0:53:4e:a7:6b:14:29:6d:be:
55:13:81:69:90:a6:11:b5:86:93:30:dc:9d:c3:3e:
1a:30:46:0d:28:be:92:c4:fe:61:3c:f3:dd:fb:9e:
80:7f:e5:91:18:b4:35:97:40:2b:73:39:3d:fd:d3:
be:fa:f1:e9:ed:d8:80:b3:19:0a:01:86:35:21:a6:
8e:b2:72:66:fa:8b:6c:96:55:6f:ad:ef:a2:10:39:
3a:5a:6d:1c:c5:83:a3:6f:1c:0a:bf:0b:cb:3e:fe:
56:24:7a:a0:f2:1c:66:d7:a2:87:d0:44:74:fd:7e:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:85:0A:3B:39:CA:FE:23:E3:00:47:1E:99:88:1A:A6:63:E0:23:1F
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:0d:09:78:86:12:99:3f:83:f8:17:20:be:ec:86:8c:65:
ff:74:54:e7:78:a7:a0:ff:9e:af:d2:ca:6a:ca:89:71:f1:9c:
fb:3b:50:88:f9:a4:4c:61:6e:e5:6b:51:c1:10:73:25:a3:f6:
52:b0:4c:0b:ed:50:fe:91:f4:cd:81:66:9d:4a:b7:f8:1c:d8:
36:b8:2a:ed:03:2c:02:a1:e2:a5:29:88:b0:98:72:f9:d5:eb:
ec:c2:1c:06:c3:10:8a:37:9e:f0:76:41:ad:62:dd:d2:43:6d:
de:6b:cb:57:2c:96:f2:c0:17:3e:45:9d:81:07:22:0b:76:99:
a0:54:cb:2e:c9:f2:c5:56:3b:6f:78:9f:7d:54:e3:27:5e:c1:
f4:5e:46:2a:24:bf:2f:a2:ee:26:81:70:32:ea:32:11:fd:1b:
fa:c6:9b:34:33:05:88:95:3d:aa:f3:b0:87:b9:f2:52:96:fd:
fd:1e:9e:34:02:b8:93:e5:f7:73:11:7b:a5:c2:d5:01:70:56:
58:d2:b8:c9:fb:a4:a3:bb:16:f5:90:99:a9:dd:b9:7f:4f:7a:
85:95:4b:43:f9:90:74:1e:4c:7c:ec:98:4f:6f:3e:aa:5f:38:
53:f2:03:e2:eb:27:05:ad:ca:c7:b1:c0:59:87:d8:21:25:64:
d7:74:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:22 2026 by rpki-client