Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: Afhf+B/ADfpoEoET3k54coK1asZMcwCU3y9tegpOw0k=
Subject key identifier: 70:49:C2:99:22:0C:D1:6A:4C:0E:75:0F:5D:B4:CA:C8:CF:EC:4D:08
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019E1DFE18FB42FB0B960FA891BB0A0A94DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 060F
Signing time: Tue 12 May 2026 21:00:52 +0000
Manifest this update: Tue 12 May 2026 21:00:52 +0000
Manifest next update: Wed 13 May 2026 21:00:52 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: Nrzx+J/hII69bl7S0P9fleXUpDvJ6O9IPRLlrRIyBco=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:18:fb:42:fb:0b:96:0f:a8:91:bb:0a:0a:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: May 12 21:00:52 2026 GMT
Not After : May 13 21:00:52 2026 GMT
Subject: CN=7049c299220cd16a4c0e750f5db4cac8cfec4d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:03:4c:87:58:ce:4f:50:77:9e:5c:21:29:
91:7e:df:d0:55:66:72:01:c3:a2:b9:22:1b:57:00:
28:e8:5f:fb:1f:03:1d:bd:da:00:1c:19:a1:3b:dc:
96:8e:c2:b3:f8:6c:44:45:93:5e:4a:03:a9:64:ea:
f0:b8:fe:e4:bd:dc:1d:4f:ad:7f:5d:47:45:18:32:
5d:67:e4:d4:f8:0e:54:30:b3:19:dd:20:8a:7c:40:
db:89:37:fc:93:a3:bc:d8:7f:95:37:69:76:df:f3:
ad:bd:6b:dc:d6:39:39:5b:a9:e5:f5:d1:e3:bf:26:
3e:3c:ab:9b:d8:b8:ee:bf:7f:98:41:03:8e:21:4f:
dd:eb:f4:c4:a6:57:4b:23:a6:cc:8f:b1:ee:7f:f9:
19:8e:4f:d9:88:f8:8d:6a:cd:ed:71:03:97:24:f9:
7a:ac:82:70:60:55:22:78:cc:98:3e:cd:a6:23:b8:
e6:46:1f:15:72:a5:f5:e2:0e:9f:12:1f:27:8e:12:
bc:02:13:53:c6:c2:8d:d4:8b:2f:2e:48:7c:d7:ef:
9b:a6:27:0f:60:f3:42:50:17:b5:8c:06:93:c2:b4:
2e:d7:d5:a7:d0:7d:2c:33:aa:db:b6:f9:ec:50:4f:
a3:9b:27:7c:1e:0d:49:3e:20:62:71:86:c8:4a:1e:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:C2:99:22:0C:D1:6A:4C:0E:75:0F:5D:B4:CA:C8:CF:EC:4D:08
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dc:e4:6b:2d:62:7e:d1:fa:7b:10:91:11:ea:34:b8:49:76:
bf:9e:66:e5:33:79:cd:e1:b5:5a:d3:69:db:15:ba:86:da:81:
6f:47:3c:bf:8d:30:1f:77:af:a5:a9:1c:be:19:b1:c2:3d:4e:
23:ad:92:1a:0e:58:c9:40:4a:f9:df:91:05:d9:4b:f3:d7:66:
9a:83:fc:fc:bb:13:26:06:76:c1:70:7f:5f:87:79:f4:0d:ca:
de:e5:14:b5:bc:ba:2f:0c:57:cc:0d:df:41:7e:85:9a:95:6b:
c7:45:83:7a:6e:52:3a:0c:84:48:8c:65:1d:68:3d:c5:48:c8:
47:ac:a7:6d:4b:8f:d4:d7:23:d5:0d:b0:7c:f4:99:ce:62:e5:
12:4a:36:70:25:15:2c:02:f1:6e:ea:72:6b:c4:ff:3e:ff:48:
a7:99:f3:f0:6f:37:bf:a2:7e:8f:ad:e6:02:f5:89:86:84:00:
6b:9b:4c:32:1b:b1:74:cd:12:96:27:ce:d0:85:9e:f3:b3:c4:
c3:05:85:d2:71:4b:75:fa:71:a6:8c:60:c7:1a:ca:06:c9:e5:
9f:5a:77:08:d0:d6:9d:68:f2:32:45:1d:28:a3:91:82:0d:cb:
cb:c7:6e:e1:32:ae:c1:2b:bc:b7:ce:ed:24:a7:6c:0e:2b:32:
d3:ff:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:22 2026 by rpki-client