Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: 0U1Jm3Kwf6bqSJe1iE0ouDzoxciepiF1KO0Sfj0H7mU=
Subject key identifier: 2A:75:11:73:16:11:AB:72:40:DB:EE:0F:07:9D:E1:C3:79:15:D7:D0
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019F94A47729FF4B0BAB54491A2B220A82CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 06D1
Signing time: Fri 24 Jul 2026 15:00:34 +0000
Manifest this update: Fri 24 Jul 2026 15:00:34 +0000
Manifest next update: Sat 25 Jul 2026 15:00:34 +0000
Files and hashes: 1: jcjuL1I-OfryfxagoMIECR7PHIk.roa (hash: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA=)
2: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: EGpF0Y3ageWzBG+3YtHucpEJQ5hCPqYRsuHMrVXMB/I=)
3: okAiKYw_e6QZvczizc6rlRpUxK4.roa (hash: y34ynPJrPUC/f+ZX4ZIuMeW7p+J1n4LsqB74LxIVy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:77:29:ff:4b:0b:ab:54:49:1a:2b:22:0a:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jul 24 15:00:34 2026 GMT
Not After : Jul 25 15:00:34 2026 GMT
Subject: CN=2a7511731611ab7240dbee0f079de1c37915d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:aa:2c:f5:18:6a:f8:df:26:67:36:8e:93:
c6:ac:68:05:ee:4b:c3:94:d1:93:84:32:89:eb:39:
cb:43:06:3b:09:13:62:30:a4:14:97:90:5c:3a:d9:
0a:40:0b:2e:f2:70:7f:23:6d:23:6d:17:1c:49:7f:
df:a2:bf:68:a8:a3:11:fb:68:cc:13:be:27:a0:98:
d2:05:37:02:c7:38:11:0e:58:79:d1:9e:b8:4a:c4:
18:82:e7:03:c2:db:43:fe:52:6d:18:88:ea:93:ab:
85:83:af:c3:28:84:8b:1e:d2:04:cc:fb:5f:d9:cf:
f8:d8:0f:15:08:38:15:b1:9b:59:03:27:78:c2:dd:
15:06:9a:7a:61:43:c3:7d:7a:bf:93:0d:eb:d7:b7:
de:55:ae:b5:1b:71:73:cf:0b:cb:74:94:c8:34:b9:
59:e2:ac:03:53:a6:ed:70:bb:17:4f:36:d0:ae:fe:
5d:bb:ec:b1:28:20:82:04:ea:15:d6:27:78:2b:41:
3a:0b:0f:eb:1f:0a:51:4c:af:60:99:f9:06:a3:cf:
3c:2c:ec:b2:f3:2b:ea:c5:3e:63:49:5d:7c:ab:0e:
30:60:6a:71:92:05:b6:e7:4c:c2:41:3a:f9:1b:ac:
75:36:db:6d:8a:c5:f9:e7:ab:6c:88:ca:18:12:96:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:11:73:16:11:AB:72:40:DB:EE:0F:07:9D:E1:C3:79:15:D7:D0
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:7d:cb:43:19:2b:82:eb:3e:f1:ef:cb:64:63:ba:a6:ee:
05:c6:14:f4:47:04:fa:26:8a:1a:af:ca:8e:e6:2e:88:77:d6:
9a:ed:97:86:31:a5:84:aa:29:99:d1:11:15:3a:84:c2:2e:e0:
3d:7b:e8:27:94:25:0e:2a:06:be:23:30:40:05:69:c9:f3:31:
88:36:61:39:12:5f:66:86:9a:0f:47:11:70:db:82:fe:6e:9b:
50:4a:d4:71:82:be:36:2d:f6:ce:12:1f:ac:f6:2f:a6:3a:ea:
c8:6a:b0:76:6d:95:0d:c5:dd:51:23:3c:18:27:85:30:71:98:
8a:1d:d2:b4:09:75:e2:0d:71:cb:04:6e:d1:32:21:0a:86:90:
85:82:09:fe:fd:20:ba:a6:3c:32:4a:39:81:ed:bb:7b:cb:13:
1b:93:23:92:5f:e9:4d:11:b7:25:82:2e:3a:34:20:e3:05:de:
37:7c:d1:be:97:b9:85:53:da:97:91:78:f5:26:1e:40:20:cd:
02:1f:b1:45:52:ce:11:1d:e0:c6:98:1c:9a:35:2a:89:16:c7:
bf:d1:ee:3d:1f:fd:bd:bf:b9:91:73:3a:f0:e1:e4:7e:6d:95:
d6:1d:11:a9:65:ad:bb:8c:9f:e5:d2:72:a6:01:32:cf:c2:ad:
3b:ce:e5:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpHcp/0sLq1RJGisiCoLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4
NmViYjEwHhcNMjYwNzI0MTUwMDM0WhcNMjYwNzI1MTUwMDM0WjAzMTEwLwYDVQQD
EygyYTc1MTE3MzE2MTFhYjcyNDBkYmVlMGYwNzlkZTFjMzc5MTVkN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/CqLPUYavjfJmc2jpPGrGgF7kvD
lNGThDKJ6znLQwY7CRNiMKQUl5BcOtkKQAsu8nB/I20jbRccSX/for9oqKMR+2jM
E74noJjSBTcCxzgRDlh50Z64SsQYgucDwttD/lJtGIjqk6uFg6/DKISLHtIEzPtf
2c/42A8VCDgVsZtZAyd4wt0VBpp6YUPDfXq/kw3r17feVa61G3FzzwvLdJTINLlZ
4qwDU6btcLsXTzbQrv5du+yxKCCCBOoV1id4K0E6Cw/rHwpRTK9gmfkGo888LOyy
8yvqxT5jSV18qw4wYGpxkgW250zCQTr5G6x1NtttisX556tsiMoYEpbIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp1EXMWEatyQNvuDwed4cN5FdfQMB8GA1UdIwQY
MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt
YzRkNDJiN2Y2MjcwLzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw
LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtp9y0MZ
K4LrPvHvy2RjuqbuBcYU9EcE+iaKGq/KjuYuiHfWmu2XhjGlhKopmdERFTqEwi7g
PXvoJ5QlDioGviMwQAVpyfMxiDZhORJfZoaaD0cRcNuC/m6bUErUcYK+Ni32zhIf
rPYvpjrqyGqwdm2VDcXdUSM8GCeFMHGYih3StAl14g1xywRu0TIhCoaQhYIJ/v0g
uqY8Mko5ge27e8sTG5Mjkl/pTRG3JYIuOjQg4wXeN3zRvpe5hVPal5F49SYeQCDN
Ah+xRVLOER3gxpgcmjUqiRbHv9HuPR/9vb+5kXM68OHkfm2V1h0RqWWtu4yf5dJy
pgEyz8KtO87leA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:09 2026 by rpki-client