Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: tgtoFRMeEcG4e8Oso2gxQHUxzItdsckE1LWBoW/uIac=
Subject key identifier: B2:4B:F8:5D:DC:F9:C3:3E:C0:B0:A3:51:8D:4E:9F:EC:2A:07:29:98
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 019D26287078D88A1A207A348C209E86F4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: QRjEUWvLIjS9nN/bqE2huZLlnMhT8GuSaW4tatM+g+0=)
2: VORDTVglX3Z4o11ha_rQMbeYDBY.roa (hash: R9axiVVKyBivLuau19G2S1ECw/WVMKwzWPLucwXXO9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:70:78:d8:8a:1a:20:7a:34:8c:20:9e:86:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=b24bf85ddcf9c33ec0b0a3518d4e9fec2a072998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:55:ae:b5:a9:cc:cd:7e:1e:6d:9d:4a:a7:
9d:4e:9e:42:ff:e0:29:4a:ee:49:67:86:d5:84:11:
18:e8:21:6e:ad:80:7e:6b:f5:0a:6d:f7:d3:62:07:
ee:67:49:fd:eb:49:71:1a:bf:1b:32:08:6c:bf:a9:
a2:15:0e:0f:87:9b:64:30:d3:55:14:a7:24:48:9e:
6c:9b:c5:1b:12:8e:f9:d1:61:d5:c1:a8:59:4e:f4:
4a:0b:6f:db:80:aa:c6:e2:8a:65:f8:e7:f7:e2:fc:
13:2e:2d:7a:a1:fe:11:93:36:3d:ae:05:49:d0:56:
f8:51:d8:0e:68:5f:80:bd:e5:a0:51:af:7c:68:ce:
a9:20:6b:03:32:6f:9b:db:63:39:b8:66:74:17:c2:
2d:55:74:84:f1:88:ce:40:1b:5f:5f:d2:c8:3c:c3:
d5:05:dc:8f:63:fe:fc:e3:dc:e5:55:79:90:86:76:
8a:fb:65:f7:3c:ae:f8:b8:2e:9f:04:8a:52:14:8f:
2c:b5:39:cf:f4:25:c1:e1:ec:db:60:f2:33:74:e9:
db:ec:89:a9:df:b5:5f:5e:2d:91:67:11:bf:23:c1:
54:b6:00:f0:b9:13:86:7e:d1:cd:01:68:c1:50:18:
49:78:0b:13:2e:de:60:ad:a6:a9:a8:96:52:aa:1e:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:F8:5D:DC:F9:C3:3E:C0:B0:A3:51:8D:4E:9F:EC:2A:07:29:98
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:23:74:35:9c:ae:8d:c3:a7:61:96:01:8b:72:4c:97:50:ea:
59:e8:f5:6b:a5:e1:f3:47:6d:5a:88:34:7e:06:c9:ff:25:17:
58:b0:b9:65:52:c5:ab:0d:0e:a0:73:82:0a:ec:61:17:33:e9:
5c:b4:23:87:15:c1:06:cd:7b:13:0e:8b:f5:fd:20:63:61:7e:
55:2c:9d:80:eb:c6:cb:b2:b8:97:40:f5:1f:a1:7b:4e:56:e3:
5e:b2:35:c5:f3:df:28:06:0e:19:3e:af:91:1d:a7:8d:e7:5f:
a3:3e:a2:5b:b7:78:a0:b2:54:62:ae:21:5e:dc:8f:e6:ee:51:
2f:b5:7e:12:46:5c:9c:b5:6b:8d:5a:8b:26:61:52:fb:11:a5:
e2:76:ab:fb:42:31:b2:16:31:ff:f9:95:a1:1c:85:2d:49:27:
7d:3f:72:b6:1e:f5:f5:56:02:8a:8e:a6:81:c4:97:02:23:99:
af:7e:24:bb:2f:d3:d8:c2:e0:4f:fb:2b:b8:05:b3:52:e8:da:
5c:6a:b4:20:d1:4c:8a:b5:52:10:33:d2:f7:3e:ee:11:75:fb:
33:00:8f:69:5b:35:39:97:5b:f1:41:91:43:69:21:84:31:71:
8c:67:22:a5:81:29:91:f1:87:82:dc:be:71:67:0b:85:86:ea:
e1:76:b1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKHB42IoaIHo0jCCehvTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj
NTY4NTgwHhcNMjYwMzI1MTgwMTE3WhcNMjYwMzI2MTgwMTE3WjAzMTEwLwYDVQQD
EyhiMjRiZjg1ZGRjZjljMzNlYzBiMGEzNTE4ZDRlOWZlYzJhMDcyOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9VVrrWpzM1+Hm2dSqedTp5C/+Ap
Su5JZ4bVhBEY6CFurYB+a/UKbffTYgfuZ0n960lxGr8bMghsv6miFQ4Ph5tkMNNV
FKckSJ5sm8UbEo750WHVwahZTvRKC2/bgKrG4opl+Of34vwTLi16of4RkzY9rgVJ
0Fb4UdgOaF+AveWgUa98aM6pIGsDMm+b22M5uGZ0F8ItVXSE8YjOQBtfX9LIPMPV
BdyPY/7849zlVXmQhnaK+2X3PK74uC6fBIpSFI8stTnP9CXB4ezbYPIzdOnb7Imp
37VfXi2RZxG/I8FUtgDwuROGftHNAWjBUBhJeAsTLt5graapqJZSqh6mLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJL+F3c+cM+wLCjUY1On+wqBymYMB8GA1UdIwQY
MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt
OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2
LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2yN0NZyu
jcOnYZYBi3JMl1DqWej1a6Xh80dtWog0fgbJ/yUXWLC5ZVLFqw0OoHOCCuxhFzPp
XLQjhxXBBs17Ew6L9f0gY2F+VSydgOvGy7K4l0D1H6F7TlbjXrI1xfPfKAYOGT6v
kR2njedfoz6iW7d4oLJUYq4hXtyP5u5RL7V+EkZcnLVrjVqLJmFS+xGl4nar+0Ix
shYx//mVoRyFLUknfT9yth719VYCio6mgcSXAiOZr34kuy/T2MLgT/sruAWzUuja
XGq0INFMirVSEDPS9z7uEXX7MwCPaVs1OZdb8UGRQ2khhDFxjGcipYEpkfGHgty+
cWcLhYbq4XaxZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:57 2026 by rpki-client