Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: C16bhQoJydJlo1geTtYBSdwbPHiqNJdfTHNc/HnnrII=
Subject key identifier: 0F:8B:90:09:47:F8:D6:E2:BF:6E:28:E5:38:94:2A:39:93:BC:4A:1B
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01A0E098D45DAF1E810128ABFEDA1C62DFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0CA1
Signing time: Sun 27 Sep 2026 02:01:47 +0000
Manifest this update: Sun 27 Sep 2026 02:01:47 +0000
Manifest next update: Mon 28 Sep 2026 02:01:47 +0000
Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=)
2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: KVcrVrfbA5O7Ik1YKWXgNccKMgmSeHfct4mF/gKAce8=)
3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=)
4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:d4:5d:af:1e:81:01:28:ab:fe:da:1c:62:df:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Sep 27 02:01:47 2026 GMT
Not After : Sep 28 02:01:47 2026 GMT
Subject: CN=0f8b900947f8d6e2bf6e28e538942a3993bc4a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:10:e2:59:af:6c:2d:f5:92:ef:31:57:6d:
5c:c4:3c:8f:e0:f6:95:c6:1a:e6:69:78:63:50:fa:
5d:45:82:d6:68:05:31:66:1b:3c:03:6b:3b:b7:7c:
a8:91:e3:9c:5a:e2:9b:c8:7f:44:05:5b:ac:45:f8:
f2:2b:e6:d3:cf:60:f8:c3:9c:34:7d:f0:b0:b4:8c:
b2:fc:99:77:3d:44:d6:26:b5:98:30:47:a9:40:8c:
f4:e3:98:1d:a4:c2:3e:e8:42:50:a7:fb:3c:9a:36:
ef:a3:30:e2:a6:c4:ff:65:c6:27:de:07:38:1e:34:
f9:53:b2:fe:26:79:1a:dc:65:2c:37:41:08:dd:74:
bb:6b:ba:8c:08:01:a2:52:7b:4b:de:d2:64:84:b3:
3f:ad:ed:b4:a8:45:2c:9f:e4:5a:aa:62:85:ed:20:
e8:8a:73:b5:bc:3b:c8:e3:f5:36:a5:19:9d:5f:83:
9a:26:ac:74:d9:fe:4d:5e:8c:d6:bb:18:43:5f:27:
28:41:2d:c8:b3:0c:3d:27:bc:c1:86:94:01:fc:93:
f6:a1:8e:ba:ed:99:a7:8e:68:d9:ed:4a:81:01:91:
63:29:ee:fd:65:f5:95:d8:53:8a:9c:13:58:2d:a2:
17:b7:6b:f5:16:6f:b4:2b:8b:da:96:cd:52:7e:7d:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:90:09:47:F8:D6:E2:BF:6E:28:E5:38:94:2A:39:93:BC:4A:1B
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:53:44:ac:10:16:e7:bd:e5:cb:2b:49:79:80:34:f6:6f:32:
8c:8e:11:66:b4:b8:3c:d8:e3:f9:e7:eb:83:1a:d3:a6:e5:96:
d1:f9:5c:2c:98:25:75:21:13:c4:6b:24:a1:5f:b7:fb:0d:22:
63:bd:0f:cc:d6:60:82:db:dd:ac:dc:0e:f7:d6:a1:e3:70:e9:
ea:6d:3d:c6:97:f9:9b:c4:7f:59:22:57:03:5e:05:ed:17:0e:
4e:a4:1a:49:a3:a3:0e:65:dd:d1:c8:e0:2c:ad:98:72:8f:4a:
ae:11:f8:4a:1a:80:e6:f0:53:77:85:4d:46:7e:54:2e:fa:79:
ef:66:df:1e:33:e4:c2:0e:39:b4:84:84:6c:57:8a:7a:e9:6e:
46:83:76:ed:7b:37:41:6b:9d:1a:66:26:17:b9:1b:98:03:af:
0d:e0:4f:c6:cc:05:91:00:a3:0a:fd:a2:49:cb:4c:48:4e:f4:
2a:70:b6:f4:f7:4e:7e:6d:15:2d:4c:f6:9b:38:4e:92:a7:19:
27:f8:c2:88:2d:6d:29:10:a6:70:0e:c5:41:d6:98:31:6f:1a:
9c:a9:e5:09:30:f9:15:49:8d:14:01:a3:9b:aa:3e:0e:68:57:
c0:19:a7:f0:5f:85:06:9d:cd:1a:a7:1c:bd:65:07:96:c1:76:
26:05:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:43 2026 by rpki-client