Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: dOkdYpXTOo4VS9vXpAwdwWNoOlD0iMulDSFIa1ehWH8=
Subject key identifier: EB:23:BF:8D:79:3C:87:5C:A4:35:C1:3E:2D:C2:30:D6:37:6D:D1:21
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019D2961088EB1EE51ABF33F45A29565AABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 05DA
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: e7AS-h8UVzO25ySDY88gNZMJcDc.roa (hash: nbzFORwCh+VhrVrfEhpvS2wccja5BBY0hNY1kpvLUoM=)
2: jQQwHQnxt60DZocx5cyYSn7BPpc.roa (hash: uzGsYYKtRtXMEU0FMjrboZQzPWlbaFPHYavLo2IswP8=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: nN6DG/tLYsdrSoluRVw9zWeHN879VTVTAl21LvI/VS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:08:8e:b1:ee:51:ab:f3:3f:45:a2:95:65:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=eb23bf8d793c875ca435c13e2dc230d6376dd121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:91:9c:61:79:1d:6e:3d:a9:1c:bc:cb:af:
b6:71:31:4a:c1:64:3f:2d:b8:3e:57:66:86:8c:07:
fb:19:9b:e8:74:2c:3f:94:af:65:32:c6:ce:68:c4:
d9:03:1d:1f:38:cf:26:47:28:3a:aa:45:ec:57:7c:
f5:be:05:08:52:66:b5:db:e9:3c:d3:22:c5:59:bb:
cf:6c:35:27:46:50:f5:61:ba:74:2b:5b:a4:cf:d9:
a6:4b:e7:78:1e:08:f1:87:5f:f0:43:d9:ae:fe:a3:
6b:cc:a5:ea:3d:60:8a:93:c2:a8:d9:28:99:f5:2b:
30:50:6c:90:81:64:88:c1:c3:a8:61:58:d6:aa:61:
49:b1:96:42:36:fd:42:67:28:73:f1:57:05:f0:de:
5f:3b:d3:67:10:85:74:e6:4b:eb:b4:27:19:03:de:
8d:45:0a:f8:da:fd:b5:af:5b:6a:bc:c8:84:ec:2a:
71:32:a0:a4:c9:ef:d6:d5:7a:ba:33:2b:ee:da:ba:
6f:bf:1e:e5:97:26:25:1d:80:dd:d5:6f:f9:56:d3:
95:2b:54:f0:60:72:02:d9:f1:92:c4:bb:bd:cf:a2:
48:1e:1e:41:d6:4e:3d:e9:dd:09:5a:58:6b:60:ff:
0c:36:e5:a8:73:78:ad:8f:9a:10:6c:98:46:c1:06:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:BF:8D:79:3C:87:5C:A4:35:C1:3E:2D:C2:30:D6:37:6D:D1:21
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:95:11:67:59:f3:fa:01:54:46:74:63:53:06:0e:69:9c:
32:e4:38:96:09:3a:97:8f:ad:e2:ce:69:2f:73:f6:ba:ba:59:
7e:78:17:c0:9c:11:14:55:e2:3e:d4:6e:0c:53:83:f8:e3:e6:
48:29:ae:5b:c2:98:72:db:f2:5e:10:b8:a0:f8:85:2a:31:63:
a6:43:a9:1a:a3:c5:00:69:07:ae:c2:bd:b8:a0:62:0c:95:a5:
47:21:5d:f0:3c:9c:3c:b9:91:ae:a8:3f:fa:8b:1d:e4:3f:42:
b1:4f:43:f4:7a:06:6f:ca:5c:9c:b5:28:c9:25:a8:43:55:b2:
2f:2a:cd:7b:e3:d8:99:c2:a3:16:c4:6e:05:8e:2d:2e:3b:31:
8c:63:83:a9:41:3d:f7:dc:f3:59:d8:61:50:ab:53:3c:23:02:
3f:5f:dd:f3:7b:aa:71:33:21:0b:0b:2a:9a:b1:5d:71:eb:01:
1d:82:80:c9:78:af:d1:9f:2c:f1:75:f6:44:a5:f5:4b:c6:56:
55:6c:5d:62:e2:27:64:b6:4c:0b:b7:7c:a4:ec:70:a6:c4:bf:
4a:10:e2:e2:10:32:5c:6f:02:6b:ba:1d:39:c8:88:c6:f0:90:
16:f4:b9:dc:7a:07:b5:da:04:29:29:8c:6c:50:8e:3a:c2:0e:
61:be:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:57 2026 by rpki-client