Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: 16+wu4y7Q8ToZnY4vBvPuu+KKukwXr1U9gPQAlAFC/8=
Subject key identifier: 38:D0:C0:AA:57:E7:BA:30:D3:76:43:E3:27:D2:7D:D1:D7:D7:78:32
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019D28BBDCD198729B9F080C737D5F311D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 18E7
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=)
2: 66dOPLt0_WTatbD8jTDqviLCby0.roa (hash: 5X3443GxzYaJM9zk480V7FRqeV1QrGs7L4mBsvUHY7g=)
3: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=)
4: S42dzUuZl7-j_J0-ZxXVtrKgbJs.roa (hash: s55rrVyYG0OPNGkb5I7B3u/giQK0fm5Tvdat0fja0hA=)
5: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=)
6: ZXcMeeipBn7sUUJEU91rzEI17zk.roa (hash: 5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=)
7: fJuTGRvozfm4_e0aUam0wS-AlPw.roa (hash: Z1Mjes1iDe2mLSTG+5DMRvvdh4aNMNzB1Vnh815bgHo=)
8: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: q3jVRH088+EQ2EQXFCJytY+RPf7ZwyxDkQ8wU/d47HQ=)
9: tWaaQl6DbtQP8JlymCiz4JsmtTc.roa (hash: CGoPt79QJGnvAkPfN7vV0Ad71vJ218WZxi4WmsIzFpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dc:d1:98:72:9b:9f:08:0c:73:7d:5f:31:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=38d0c0aa57e7ba30d37643e327d27dd1d7d77832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:db:a3:f0:be:c9:8f:74:a1:44:43:d2:a4:
20:aa:f0:80:7b:d9:07:12:9d:e0:d2:f9:ea:17:8a:
f0:25:f7:f6:b6:17:06:4e:3b:0a:04:1b:ed:eb:21:
3d:84:70:a4:df:25:8b:e0:7b:3c:b0:76:7c:7c:50:
46:04:2c:23:9a:c3:63:d7:34:b1:81:c9:2e:8d:cd:
f7:0f:94:1f:30:f3:c3:35:da:7a:66:38:d0:e8:a1:
12:c9:ae:82:46:cf:d4:47:74:7d:03:8b:fb:c7:06:
3e:a4:e8:ee:25:cf:ad:9b:7a:e4:0c:16:73:f0:bc:
d9:cf:3d:fd:91:46:b9:66:2c:e8:2c:85:13:72:20:
8b:1a:d2:a3:b5:5f:a8:80:16:06:4e:df:7f:40:49:
e1:73:c5:67:64:9b:de:2f:30:53:10:6f:7d:ab:6d:
76:d8:7c:58:29:8d:c5:a2:42:ee:e4:31:dc:06:1f:
4f:58:03:98:50:59:e9:ed:42:97:ff:59:e8:ff:30:
ff:54:c8:54:24:77:48:7b:25:65:fe:39:22:40:46:
d3:15:0f:cd:ce:cc:bd:e0:31:34:25:b7:e1:13:79:
6d:99:de:76:5a:64:13:fa:a1:e5:4a:f7:2b:c8:c2:
25:44:1e:94:5b:44:8b:81:1a:c2:24:5c:ca:59:58:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:C0:AA:57:E7:BA:30:D3:76:43:E3:27:D2:7D:D1:D7:D7:78:32
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ba:ad:4d:73:1a:75:6e:20:a3:0d:08:cd:32:72:1a:c2:d8:
11:fe:a5:92:02:8d:3d:ee:5c:d7:57:93:85:ad:12:e8:75:c8:
d5:b1:a1:5f:4e:75:5e:37:61:d3:e8:6a:9b:6f:68:02:36:bc:
31:82:ed:c9:a0:de:0d:e7:93:4b:e7:ed:65:57:a1:a4:a2:cb:
77:6a:b5:d5:4b:ef:0f:05:73:d5:ac:ab:74:9f:4c:8c:bb:d2:
d1:c1:db:0f:43:d0:3c:a0:06:8f:ef:7f:56:5e:bf:a9:c7:0c:
be:b4:ee:76:d1:60:e0:5e:c1:01:d2:35:8e:ad:58:18:d2:5b:
9f:20:4d:c4:b4:ca:5d:9f:e4:6b:06:1e:1f:68:42:8c:cf:93:
ac:68:3b:34:61:49:8d:23:7c:9c:da:43:33:c8:e9:2b:8e:eb:
85:41:fa:bb:f3:f4:fd:39:c1:a3:86:3b:f5:b2:dd:38:c8:9f:
3d:7a:44:2d:be:aa:4d:a8:d2:b9:bb:56:71:82:1a:80:d6:58:
8b:cc:7e:1a:ab:d6:6b:ff:c4:26:87:89:70:16:f2:ec:2b:21:
a6:5c:b6:c9:ef:1c:df:05:2b:d0:25:65:75:49:b1:3c:f8:35:
6c:d6:35:6a:44:e3:89:aa:e6:21:e2:3d:70:93:86:46:21:0d:
71:54:55:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9zRmHKbnwgMc31fMR1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwMzI2MDYwMTMzWhcNMjYwMzI3MDYwMTMzWjAzMTEwLwYDVQQD
EygzOGQwYzBhYTU3ZTdiYTMwZDM3NjQzZTMyN2QyN2RkMWQ3ZDc3ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wbbo/C+yY90oURD0qQgqvCAe9kH
Ep3g0vnqF4rwJff2thcGTjsKBBvt6yE9hHCk3yWL4Hs8sHZ8fFBGBCwjmsNj1zSx
gckujc33D5QfMPPDNdp6ZjjQ6KESya6CRs/UR3R9A4v7xwY+pOjuJc+tm3rkDBZz
8LzZzz39kUa5ZizoLIUTciCLGtKjtV+ogBYGTt9/QEnhc8VnZJveLzBTEG99q212
2HxYKY3FokLu5DHcBh9PWAOYUFnp7UKX/1no/zD/VMhUJHdIeyVl/jkiQEbTFQ/N
zsy94DE0JbfhE3ltmd52WmQT+qHlSvcryMIlRB6UW0SLgRrCJFzKWVj0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjQwKpX57ow03ZD4yfSfdHX13gyMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbqtTXMa
dW4gow0IzTJyGsLYEf6lkgKNPe5c11eTha0S6HXI1bGhX051Xjdh0+hqm29oAja8
MYLtyaDeDeeTS+ftZVehpKLLd2q11UvvDwVz1ayrdJ9MjLvS0cHbD0PQPKAGj+9/
Vl6/qccMvrTudtFg4F7BAdI1jq1YGNJbnyBNxLTKXZ/kawYeH2hCjM+TrGg7NGFJ
jSN8nNpDM8jpK47rhUH6u/P0/TnBo4Y79bLdOMifPXpELb6qTajSubtWcYIagNZY
i8x+GqvWa//EJoeJcBby7Cshply2ye8c3wUr0CVldUmxPPg1bNY1akTjiarmIeI9
cJOGRiENcVRVyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:25 2026 by rpki-client