Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: 2E3wDCDUKPQLzP1fLmIG6KhfBx52x8BX2bX7A9WHIX8=
Subject key identifier: 5F:BD:DD:2C:5C:9A:AE:14:1C:12:E6:03:E3:F5:C8:B5:33:B7:B2:B4
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019D265FB0817DE5C2F173B44A72CAFDA37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 174B
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: YSS6McRhEXCqmCkacjSTFCU7ovME/HI29esEXSizP1M=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b0:81:7d:e5:c2:f1:73:b4:4a:72:ca:fd:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=5fbddd2c5c9aae141c12e603e3f5c8b533b7b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:80:a0:4b:39:22:1a:fc:7b:e9:61:21:b3:
e1:0c:bb:75:c4:42:ac:5f:8d:b3:ac:3b:bb:5a:2f:
b0:7b:94:50:43:13:f8:17:df:ca:79:27:c9:0b:6b:
74:00:61:5d:de:15:41:10:b6:19:f1:f1:1a:b3:fb:
79:22:f6:92:78:60:f3:51:73:ce:99:dd:f1:1c:04:
9a:9f:29:09:48:4e:3f:31:1c:43:fa:3e:15:3b:7c:
86:e8:12:4e:ff:0a:26:e5:c1:e7:b0:88:4e:4e:17:
98:e9:46:ab:70:bc:ec:6c:7a:6d:95:49:71:a4:68:
3b:68:4f:17:98:f4:6c:ec:15:5f:20:d0:99:5d:02:
fb:a9:69:b4:36:5a:40:58:41:81:12:78:1c:34:42:
f7:81:b2:15:aa:ff:e7:2b:57:29:ed:ae:83:4e:13:
92:bb:ba:0f:c1:09:14:bd:70:c6:71:a7:e5:de:0f:
62:d7:87:d9:f5:66:e7:c4:61:e8:98:e1:87:df:21:
ee:94:8a:2d:e5:ed:d9:8a:18:cb:a7:ae:79:ab:8e:
ed:48:4f:f8:65:0c:90:09:92:ca:c1:3f:0a:c5:a6:
31:85:72:d0:25:b5:c7:5d:b8:86:3f:f3:3b:f4:0c:
e3:e4:14:97:fd:08:11:1b:54:1c:a1:34:54:42:ec:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BD:DD:2C:5C:9A:AE:14:1C:12:E6:03:E3:F5:C8:B5:33:B7:B2:B4
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:76:87:cc:a1:0e:2c:c9:3a:21:6c:69:05:6c:7c:03:27:2c:
eb:80:0c:45:bf:6d:2d:c1:97:8f:dd:bc:c0:a0:25:74:57:a5:
fe:43:64:7a:0c:83:0d:35:ef:d4:b5:b8:e2:b5:31:7d:ef:57:
f8:1b:fe:35:26:1c:13:2e:e2:80:af:3f:7b:ae:5f:e6:4f:69:
47:88:69:72:33:06:59:e1:23:92:fc:73:d6:1d:46:cf:d4:86:
8c:02:60:57:bf:4e:a4:02:3d:fa:80:ef:20:62:7b:c2:12:f8:
68:71:9d:12:e4:ab:7a:6f:1a:9c:73:2b:6b:d8:f9:fb:f2:ab:
93:e2:97:00:38:8c:08:dd:0a:6a:f5:42:98:30:44:95:0e:df:
fd:f2:ba:62:97:1f:4c:0d:1b:18:2a:6a:24:06:59:7e:ea:d2:
1b:1f:d3:c4:eb:c2:60:10:de:01:c7:ec:44:0c:41:17:ba:39:
c1:46:22:00:fa:bf:f5:0f:fb:f4:55:01:70:51:65:85:2b:f8:
3f:16:6e:96:0c:7c:36:dc:ca:c3:d2:78:33:1e:48:9b:d6:17:
60:6c:28:cc:aa:3c:44:2c:a1:48:3f:b2:84:c2:2a:c5:4f:6b:
87:c5:89:44:eb:e1:41:d0:92:ac:fa:ad:48:c2:47:8d:26:05:
9c:51:db:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7CBfeXC8XO0SnLK/aN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTgwNDE0Yjk0N2YxOTMxZjIyYmM5Yzg3OGMxN2I3ZDIz
MDc4ZWIwHhcNMjYwMzI1MTkwMTM4WhcNMjYwMzI2MTkwMTM4WjAzMTEwLwYDVQQD
Eyg1ZmJkZGQyYzVjOWFhZTE0MWMxMmU2MDNlM2Y1YzhiNTMzYjdiMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1SAoEs5Ihr8e+lhIbPhDLt1xEKs
X42zrDu7Wi+we5RQQxP4F9/KeSfJC2t0AGFd3hVBELYZ8fEas/t5IvaSeGDzUXPO
md3xHASanykJSE4/MRxD+j4VO3yG6BJO/wom5cHnsIhOTheY6UarcLzsbHptlUlx
pGg7aE8XmPRs7BVfINCZXQL7qWm0NlpAWEGBEngcNEL3gbIVqv/nK1cp7a6DThOS
u7oPwQkUvXDGcafl3g9i14fZ9WbnxGHomOGH3yHulIot5e3ZihjLp655q47tSE/4
ZQyQCZLKwT8KxaYxhXLQJbXHXbiGP/M79Azj5BSX/QgRG1QcoTRUQuzJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+93Sxcmq4UHBLmA+P1yLUzt7K0MB8GA1UdIwQY
MBaAFNDoBBS5R/GTHyK8nIeMF7fSMHjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEt
NTE4ZTdhMzU2NjBhLzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEtNTE4ZTdhMzU2NjBh
LzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3aHzKEO
LMk6IWxpBWx8Aycs64AMRb9tLcGXj928wKAldFel/kNkegyDDTXv1LW44rUxfe9X
+Bv+NSYcEy7igK8/e65f5k9pR4hpcjMGWeEjkvxz1h1Gz9SGjAJgV79OpAI9+oDv
IGJ7whL4aHGdEuSrem8anHMra9j5+/Krk+KXADiMCN0KavVCmDBElQ7f/fK6Ypcf
TA0bGCpqJAZZfurSGx/TxOvCYBDeAcfsRAxBF7o5wUYiAPq/9Q/79FUBcFFlhSv4
PxZulgx8NtzKw9J4Mx5Im9YXYGwozKo8RCyhSD+yhMIqxU9rh8WJROvhQdCSrPqt
SMJHjSYFnFHbhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:59 2026 by rpki-client