Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: eZl4hATOlgfTNdX+HJyFTBUdgO3tYKRqfB3wjdn6Hnk=
Subject key identifier: EC:1C:1D:5C:92:D8:AC:A0:88:ED:02:B6:34:58:A9:CD:4D:15:35:BC
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019D269616BE5CEEB3AFCBDCA405986986BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0AB3
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: OlUOmoM/rwhzTQT5I7uuGYYUezr5+KxsSmVV72qn+Uw=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:16:be:5c:ee:b3:af:cb:dc:a4:05:98:69:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=ec1c1d5c92d8aca088ed02b63458a9cd4d1535bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:73:a6:ce:ee:b3:b7:49:01:34:b6:61:bf:
45:01:38:60:3b:01:01:3e:d6:8e:6f:a1:41:a8:08:
06:48:fb:05:b8:61:ed:7e:23:3d:1d:6b:d7:99:87:
34:d2:c6:4d:61:e5:7e:a9:72:16:cc:66:8a:a0:17:
72:69:4e:5b:a4:e1:da:3e:f4:1c:80:46:38:d3:fd:
af:e3:e1:4b:a9:a5:45:ad:e7:6c:3c:84:62:76:5e:
07:cf:a9:44:df:28:6b:cc:4c:50:46:13:d0:0e:23:
33:42:3a:94:60:90:ce:42:cd:73:06:96:d6:8b:a7:
83:c7:5b:29:16:8a:d9:88:65:c8:d3:28:03:d2:e2:
4f:0a:70:a9:5e:2e:bd:02:7a:64:97:df:10:e2:82:
e7:64:c9:f4:bf:fd:37:df:0d:68:fb:7b:73:31:02:
9e:c6:80:f9:96:cc:57:d0:46:77:bb:66:75:9a:06:
be:5d:09:6a:6e:68:04:c4:77:37:4a:a8:2f:35:d7:
0a:b1:87:0a:83:d9:bc:ff:aa:bc:cf:b0:a3:6a:c7:
d2:ae:c1:9b:19:d1:33:56:7e:4e:ce:7d:8f:e2:33:
13:7e:67:6c:ab:8e:1b:24:59:8c:1b:88:31:99:18:
ad:77:3a:37:1f:19:d8:ce:bb:a5:0e:ff:74:18:62:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:1D:5C:92:D8:AC:A0:88:ED:02:B6:34:58:A9:CD:4D:15:35:BC
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:22:c0:9c:68:2f:67:53:7e:f8:76:b5:bf:8d:dc:ec:87:
b0:fe:ac:12:13:f5:c8:99:b7:41:cc:22:63:5b:da:55:cb:04:
53:d2:69:14:ec:35:05:a2:33:c0:3c:37:72:6c:57:5e:d4:81:
27:fd:86:36:ea:7a:30:31:8f:17:98:1e:e8:6d:ac:e8:1d:91:
d8:d1:85:57:11:d0:99:89:1e:fa:8d:6b:b6:a6:e2:92:67:cd:
54:f3:44:5f:94:d0:aa:40:33:ef:55:aa:ef:38:ea:d9:8e:61:
ba:82:ba:38:c9:27:7a:af:e9:3e:59:79:bd:c0:b4:5c:42:d6:
78:ba:af:0a:85:45:1a:22:d3:6e:10:e1:81:a9:30:ca:2b:ee:
51:95:6b:62:a8:80:b4:96:37:90:e5:a0:b8:61:43:a1:f6:26:
21:ed:d5:ba:fb:4e:a6:18:e0:46:d5:1d:f8:94:d3:e4:91:e2:
54:cb:55:65:cb:6d:53:e7:43:e1:ff:48:4a:90:f9:06:f2:62:
02:27:25:8d:47:d3:44:12:49:6d:90:87:7d:ae:68:d5:e6:c4:
f7:f3:72:8a:7e:08:d0:89:89:95:87:ef:cb:46:b8:99:cf:90:
10:f7:4e:49:19:15:16:4e:cc:b1:1f:40:8d:ed:d1:46:fb:de:
ef:2b:04:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlha+XO6zr8vcpAWYaYa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjYwMzI1MjAwMTAzWhcNMjYwMzI2MjAwMTAzWjAzMTEwLwYDVQQD
EyhlYzFjMWQ1YzkyZDhhY2EwODhlZDAyYjYzNDU4YTljZDRkMTUzNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoRzps7us7dJATS2Yb9FAThgOwEB
PtaOb6FBqAgGSPsFuGHtfiM9HWvXmYc00sZNYeV+qXIWzGaKoBdyaU5bpOHaPvQc
gEY40/2v4+FLqaVFredsPIRidl4Hz6lE3yhrzExQRhPQDiMzQjqUYJDOQs1zBpbW
i6eDx1spForZiGXI0ygD0uJPCnCpXi69Anpkl98Q4oLnZMn0v/033w1o+3tzMQKe
xoD5lsxX0EZ3u2Z1mga+XQlqbmgExHc3SqgvNdcKsYcKg9m8/6q8z7CjasfSrsGb
GdEzVn5Ozn2P4jMTfmdsq44bJFmMG4gxmRitdzo3HxnYzrulDv90GGIMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwcHVyS2KygiO0CtjRYqc1NFTW8MB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1wiwJxo
L2dTfvh2tb+N3OyHsP6sEhP1yJm3QcwiY1vaVcsEU9JpFOw1BaIzwDw3cmxXXtSB
J/2GNup6MDGPF5ge6G2s6B2R2NGFVxHQmYke+o1rtqbikmfNVPNEX5TQqkAz71Wq
7zjq2Y5huoK6OMkneq/pPll5vcC0XELWeLqvCoVFGiLTbhDhgakwyivuUZVrYqiA
tJY3kOWguGFDofYmIe3VuvtOphjgRtUd+JTT5JHiVMtVZcttU+dD4f9ISpD5BvJi
AicljUfTRBJJbZCHfa5o1ebE9/Nyin4I0ImJlYfvy0a4mc+QEPdOSRkVFk7MsR9A
je3RRvve7ysEQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:34 2026 by rpki-client