Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: xnmZzNAw+qDTOyGBxhn/WZtEBDyQGnHm9PaSlKIqh60=
Subject key identifier: 52:7C:91:BF:62:57:2D:88:22:A8:D3:21:96:D2:23:42:45:9B:52:3E
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01A0E888B538053720BC8F7BB84C2EBFE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0781
Signing time: Mon 28 Sep 2026 15:01:08 +0000
Manifest this update: Mon 28 Sep 2026 15:01:08 +0000
Manifest next update: Tue 29 Sep 2026 15:01:08 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: h5Cri/JwjZOlu020nSnL7DWd72NOZiK2suAD47O50eM=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:b5:38:05:37:20:bc:8f:7b:b8:4c:2e:bf:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Sep 28 15:01:08 2026 GMT
Not After : Sep 29 15:01:08 2026 GMT
Subject: CN=527c91bf62572d8822a8d32196d22342459b523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:88:0a:ad:93:36:7c:1b:91:58:40:c7:13:
cb:0b:d2:c8:b1:ed:e5:86:cd:c4:c8:a6:f5:d7:24:
21:3c:f7:5b:3a:f7:de:c5:7e:82:07:63:4f:3e:64:
02:c3:4a:a1:b9:e3:ab:ec:19:93:85:41:5e:6e:3d:
16:47:47:9e:22:37:ea:6c:14:c4:16:d0:10:63:95:
4e:4a:55:48:3d:37:46:4a:8a:73:fe:c6:b7:1b:cd:
9d:45:d3:6b:4c:fc:c0:92:fa:be:5b:00:4e:f4:b9:
60:e2:8a:3c:57:32:41:cc:c4:32:46:be:9a:90:e9:
c1:a0:e8:da:f8:66:db:f7:e5:ed:43:15:8c:ea:e7:
e6:72:f4:9f:a3:be:3d:fc:95:f3:14:2c:4c:dc:cf:
4f:42:e5:f8:f9:aa:9b:94:18:71:d4:8c:93:c2:b0:
3e:fe:77:ff:8c:28:f6:f7:79:9d:9f:2b:44:95:1b:
bd:36:b8:fd:4e:2f:dd:7f:d1:b0:4b:8a:ad:92:82:
92:62:09:8b:64:24:31:37:6e:7d:a0:1f:8c:8e:77:
04:93:a7:44:cb:59:26:2d:19:7c:3f:d3:d6:00:7f:
2c:28:9a:26:aa:2f:a3:16:08:41:c1:03:ad:dc:0a:
8f:d9:16:b9:e5:76:b5:3b:f6:6b:33:a5:be:32:a1:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7C:91:BF:62:57:2D:88:22:A8:D3:21:96:D2:23:42:45:9B:52:3E
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:35:33:0e:87:97:45:18:d9:9f:e2:07:80:7b:02:1d:1a:8a:
c8:bd:c0:77:0b:9b:eb:1c:c4:d4:5a:b2:c1:5e:86:8d:b8:0e:
f4:30:65:f3:88:7a:27:a7:1c:34:41:0d:be:a7:16:32:3e:6e:
b5:41:ec:e2:63:b6:c7:a5:9b:aa:80:fc:5d:e9:fa:08:ed:38:
59:34:3e:f3:53:d6:26:fe:61:b5:90:09:2a:e2:e2:93:50:db:
5d:83:d6:1f:0c:47:5c:ba:84:ec:a7:f5:cb:c7:8d:9f:7e:ed:
a0:29:10:0f:6d:63:a8:7c:f2:67:09:f6:63:42:34:50:cd:70:
46:ed:68:ac:82:52:0e:8a:99:5f:74:82:e4:80:2d:6f:0a:2e:
16:10:b9:27:31:4e:59:cb:80:bd:ef:55:40:78:23:03:51:32:
9c:5c:fa:b4:8a:1f:97:4f:00:f0:e8:d2:c3:96:d0:be:5e:c5:
f4:db:0f:aa:cd:87:d0:ad:ad:4e:a9:a2:89:aa:3f:71:12:c8:
2d:a1:20:c9:be:af:9c:57:60:93:5a:ab:aa:ed:3d:c7:38:8b:
92:ac:92:6b:c3:90:e9:34:c9:cd:8b:70:c0:e7:2c:4b:94:57:
12:be:e2:b4:50:bf:a0:18:7b:c9:86:a2:0f:03:81:91:b6:b0:
a5:e3:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:01 2026 by rpki-client