Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: kPX3olX/RzPmRVregTGHwamTJVsFcgpdeTCn3GK6Qko=
Subject key identifier: 2D:A0:61:B7:4B:9E:77:DA:B8:1E:D3:9D:57:E3:AE:A2:89:34:11:A3
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019E1DC70E83ABFEF36A5B78AF3AC0EE1D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0B33
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: cnbTPXQ/GqfRMqxZBXztCUQu2w9XXBJlVgcyVlrAASc=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0e:83:ab:fe:f3:6a:5b:78:af:3a:c0:ee:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=2da061b74b9e77dab81ed39d57e3aea2893411a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:14:cd:b8:73:92:56:33:07:8e:d8:a2:a8:
99:4d:47:9e:d8:77:36:a8:bc:2e:ef:65:15:e3:33:
4c:5f:85:d3:5c:ff:6a:84:fb:aa:e5:6e:0b:b8:d8:
ca:09:8c:c5:80:a4:ec:34:c4:0b:b2:78:50:14:8c:
a1:79:29:81:d3:ad:d6:38:c0:b5:d1:b7:7d:d1:19:
fd:b3:53:d8:af:e5:28:80:8e:f8:5b:5a:f5:55:51:
78:a0:68:74:64:f0:bc:b8:80:ce:4e:ea:22:f1:3d:
96:fb:b1:30:ed:ad:f0:c2:0b:64:0d:5d:15:65:c7:
08:5c:51:14:0d:1a:34:fb:3d:75:0d:8b:fc:09:74:
27:0d:e8:dc:6d:fd:4f:d2:8f:49:aa:83:1c:90:88:
6c:de:58:86:13:17:9e:c6:a5:9d:bc:8f:58:b2:e8:
71:9a:96:74:fb:e8:e6:07:c9:5e:25:e0:01:ec:20:
7d:4d:a0:e8:d4:8a:77:f5:85:57:3b:6b:ef:55:85:
3d:43:fd:96:52:a5:4b:b4:9c:37:f4:73:c3:26:2e:
ae:a9:14:3b:d1:c2:f9:c2:16:be:57:63:9b:a0:2d:
59:a5:8e:54:65:49:78:10:89:1a:7f:f5:b2:3b:c1:
83:22:9d:0f:b8:8f:fb:a5:7c:5f:93:20:18:3a:6f:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:61:B7:4B:9E:77:DA:B8:1E:D3:9D:57:E3:AE:A2:89:34:11:A3
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:73:65:ca:4d:5e:ee:95:4f:d1:78:8d:58:e1:8f:be:49:01:
56:78:5c:06:21:92:10:99:16:3a:3b:c9:c7:ec:27:42:b2:9b:
8f:d2:f8:c3:1e:57:62:7e:48:f1:07:a1:3b:88:8c:21:63:18:
9a:a2:47:f5:a6:70:87:1c:79:57:bc:ba:90:ca:5f:95:0d:11:
fe:91:83:12:23:a9:fd:4e:30:41:5d:e9:14:9c:40:50:b2:96:
a3:25:1c:8d:2b:43:ae:db:f2:c2:89:25:ee:5c:f9:cb:1e:d3:
70:a9:56:81:4e:0b:62:f9:2c:4c:b6:5e:7f:bc:20:72:bf:ce:
78:96:1c:14:92:a3:00:c2:c0:5c:0f:e4:ef:28:87:cc:08:a2:
a0:96:a3:b0:73:28:b4:82:10:43:ff:ca:9a:69:df:76:25:0c:
5f:dd:9e:70:59:0d:e3:b2:38:be:f9:ec:6f:86:c1:a2:06:57:
56:45:dc:1f:55:f1:3f:4e:97:55:47:a0:ba:01:ff:ce:dc:97:
47:30:ec:6c:d9:a2:52:b1:dc:87:4b:26:88:35:86:74:0c:ed:
39:49:db:20:ad:cf:f6:f9:78:50:a1:ba:17:2f:a2:de:f5:d8:
6f:b1:66:7e:69:40:8c:94:68:3d:80:a0:f7:31:da:a1:0b:bc:
56:f1:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:25 2026 by rpki-client