Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: HlQxsm05SWU330P/pXB4JlNv/IqMhGkFnfYggeNP2tY=
Subject key identifier: 0A:0B:6F:6E:4A:C5:52:26:FD:19:C6:FE:B3:23:32:5B:26:18:6B:17
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 01A0D426AE16EC203FBAFF955F42A61528DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: 0573
Signing time: Thu 24 Sep 2026 16:01:39 +0000
Manifest this update: Thu 24 Sep 2026 16:01:39 +0000
Manifest next update: Fri 25 Sep 2026 16:01:39 +0000
Files and hashes: 1: K8tuEs9t8pmrSDJuwwdt6IYJIik.roa (hash: ZshbzN4NQcUPnRU5jRSR+ix2vC7IlJPNo8C+FrStXqM=)
2: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: 21TgYnkToc3oTvANgVKdwKhZMq8Izxua3J852KmF0yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:ae:16:ec:20:3f:ba:ff:95:5f:42:a6:15:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Sep 24 16:01:39 2026 GMT
Not After : Sep 25 16:01:39 2026 GMT
Subject: CN=0a0b6f6e4ac55226fd19c6feb323325b26186b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:63:0c:68:d8:bb:d9:77:a0:e5:3a:ac:50:
b2:12:68:20:53:d6:b8:0e:9b:19:46:14:1a:a0:93:
8b:4c:a2:f9:36:a7:fe:58:5f:8c:4f:5e:ac:33:3b:
07:11:88:59:52:7d:4c:a4:d9:3e:56:4d:13:d1:b8:
c7:35:8d:0f:bf:ee:1d:6f:be:61:3d:95:16:9a:05:
91:a4:38:35:d5:4c:a1:21:8a:b7:7f:72:39:68:ae:
22:b3:33:79:32:76:1f:72:45:45:c0:f7:4c:5c:2b:
a9:2c:39:78:3c:de:a3:66:fb:01:a7:9d:46:b1:78:
8e:d6:55:dd:33:cb:32:e7:bc:48:4a:f9:0f:72:63:
76:26:a3:a1:9a:c0:65:e7:15:c2:d8:5f:b6:44:00:
69:37:40:46:93:53:9d:b9:3b:66:f6:93:72:2a:5c:
2d:32:05:17:4d:49:50:80:69:7d:1c:5c:c5:12:35:
59:b4:8a:a4:a0:6d:00:9d:ec:84:0b:6d:c0:b9:14:
c3:a0:17:46:95:69:e2:be:cf:08:8a:d3:cd:83:ac:
6f:a3:31:c8:ef:b3:69:31:67:68:3b:94:36:46:25:
f2:1f:66:45:3f:27:f7:21:38:49:48:f6:d9:77:8a:
0e:fe:49:27:82:be:e2:d6:20:fe:96:aa:05:13:46:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:6F:6E:4A:C5:52:26:FD:19:C6:FE:B3:23:32:5B:26:18:6B:17
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bc:70:74:51:7b:d7:04:57:d6:f0:c2:72:9d:88:82:be:fa:
d6:0e:58:c4:c9:d8:d8:ba:7a:5e:1f:ad:74:b6:34:96:fe:d0:
1a:a9:e9:07:12:ae:0e:36:41:4e:64:12:3a:d1:4d:5c:b5:b0:
28:ed:89:4d:14:d4:2d:fb:d3:a6:35:f7:ab:a0:ca:03:a3:16:
39:94:68:db:13:c8:83:19:38:bc:9e:7c:33:85:42:7c:fb:4b:
06:1c:e7:c9:fd:7d:89:c0:7c:7f:87:1a:13:7e:00:84:9b:14:
b2:87:07:e4:f7:c0:53:b7:6e:78:29:98:92:02:3a:34:da:f0:
43:3f:d2:54:ac:81:33:d1:a3:37:45:50:6a:18:3f:2d:e8:8d:
43:eb:87:15:08:4f:ab:df:48:d7:df:38:44:94:a2:07:88:bd:
43:78:96:d2:eb:97:7a:37:fa:ef:2d:2d:c9:f0:0e:18:e7:16:
c8:58:c8:f4:76:08:e6:ce:b6:c1:cf:2e:ba:f6:e9:a8:ec:80:
f2:93:76:88:b9:88:cb:9e:51:e8:a1:cf:22:65:0c:26:51:cf:
a1:97:b7:30:fd:e2:4c:44:e7:da:3c:70:0e:85:f7:f7:37:80:
12:ad:9d:0a:5f:90:9d:9d:94:24:d2:21:da:a2:58:16:40:85:
e0:35:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:57:21 2026 by rpki-client