Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier: id8Z7rPH2DxINP3q4WQ0yYMbotBVbVD2fAQpdM63EwU=
Subject key identifier: 25:67:D5:0B:04:CF:2A:3D:26:B2:6B:F9:BB:4F:E5:E5:D7:A2:44:B2
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 01A0CD10A553ACD5CBF712018309BD444BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 07:00:15 +0000
Manifest this update: Wed 23 Sep 2026 07:00:15 +0000
Manifest next update: Thu 24 Sep 2026 07:00:15 +0000
Files and hashes: 1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: qJUGbLvBLs6R8rVp3OCd9sdVi0rWs4l/4UfSgX73nPQ=)
2: ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa (hash: tgnllS0U1hZ0N2hin4TK1nqPVptt1uSkt6Jkh0W7oGk=)
3: lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa (hash: iUpeWO/zWeAoo1xidbKM+b5szCcBiTY0HxyO251Cj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:a5:53:ac:d5:cb:f7:12:01:83:09:bd:44:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Sep 23 07:00:15 2026 GMT
Not After : Sep 24 07:00:15 2026 GMT
Subject: CN=2567d50b04cf2a3d26b26bf9bb4fe5e5d7a244b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:ff:2a:8b:33:07:87:ab:41:6e:c7:5c:fc:
b2:fa:8b:49:eb:0b:d6:88:ac:5d:ef:7b:9d:4f:50:
42:f7:0b:5c:39:fd:ba:43:60:cf:75:5a:74:3b:cc:
a4:be:75:8a:71:89:81:e0:19:c2:c5:e9:a7:c5:e8:
14:10:20:2e:fd:01:89:75:3b:fa:ba:11:97:2c:40:
0e:db:3e:ce:85:e8:7d:32:3e:66:a3:c3:d2:d0:54:
ed:93:a6:b7:27:ba:f6:8e:29:c0:07:9a:01:21:d8:
f8:d1:4b:41:7c:16:73:43:93:c3:d3:85:e3:49:6d:
4d:dd:58:c3:27:50:7c:6c:2c:2e:c8:cc:aa:c9:99:
12:7c:58:4d:d4:35:03:b8:41:c0:d2:8a:75:78:c9:
c7:13:f9:f4:27:a2:e5:bd:4c:13:86:52:52:ed:8a:
3d:2a:cc:84:f0:23:0d:c6:5f:d6:89:f0:35:11:ef:
63:87:3d:49:ac:c9:f2:ca:b3:42:ba:cd:6d:a8:21:
9a:d5:d5:2d:c1:f6:2e:ee:64:89:5e:32:78:0b:cf:
0d:28:8f:21:ba:2a:06:08:7e:ac:29:46:2a:54:4f:
1f:d8:25:b3:03:62:61:43:bc:14:3b:14:7e:49:94:
bd:81:73:8f:c3:ed:33:c9:bc:53:e0:0f:99:4e:27:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:D5:0B:04:CF:2A:3D:26:B2:6B:F9:BB:4F:E5:E5:D7:A2:44:B2
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:72:b5:e9:72:f2:3e:96:b6:df:ea:cb:fb:b3:a1:f4:8a:98:
6e:7e:36:73:e1:bf:62:7d:3b:13:91:0c:83:b0:85:3b:a4:a4:
4f:22:44:bc:25:14:3a:9c:dc:d9:1e:39:2e:34:94:bd:2f:3f:
71:f9:cc:59:39:2c:72:b1:cc:10:d2:f7:00:48:d3:7e:64:05:
4c:ae:34:93:ff:3a:18:5e:45:35:95:c0:03:df:35:2b:1a:43:
e9:f6:07:cb:29:b4:f3:c7:16:a2:ad:31:7d:16:62:b0:33:cb:
0f:cd:3b:88:22:be:cb:4b:29:15:4e:a1:88:4c:b3:4c:68:d3:
0c:61:74:64:56:db:56:60:31:cc:92:30:5e:50:8a:37:b9:6f:
73:c1:93:c0:54:26:62:a2:a2:9b:f4:60:37:51:24:b3:58:25:
42:f9:08:5d:0f:44:20:fc:b4:e9:cc:a7:a7:21:43:3f:6b:c4:
e5:ca:9e:1f:8f:22:76:02:21:3e:ce:5a:e5:ed:49:dc:ad:1d:
c5:dc:71:24:62:64:da:fa:15:91:68:d8:81:44:ea:df:0f:49:
8c:75:e5:b1:c9:6b:e7:54:ca:84:de:51:cc:b4:ad:c0:f9:70:
04:67:91:06:e5:8b:8c:69:4c:f1:19:e5:f4:37:7a:51:c5:a3:
1b:86:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:22:49 2026 by rpki-client