Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
File: OggZA5tm-u8UP2Jid5J3Yikxe2I.mft (raw, json)
Hash identifier: 3sePZnIG1ALvJ2Bsuz0ShVhqPlFDIgYADTlTiNXIx+A=
Subject key identifier: 35:F9:A1:87:D2:3D:75:36:86:76:A1:56:71:7F:DF:69:4A:61:15:BF
Authority key identifier: 3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
Certificate issuer: /CN=3a0819039b66faef143f62627792776229317b62
Certificate serial: 01A0DBA9D4704D075CECF7DA7AFC0AFB34C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:15 +0000
Manifest this update: Sat 26 Sep 2026 03:02:15 +0000
Manifest next update: Sun 27 Sep 2026 03:02:15 +0000
Files and hashes: 1: A9l3yW06MCRhC0vPEP_5L6oe6PU.roa (hash: QnT+4PmCf+dobjyw/dCsgXjulmPpCRJdE+AVb3L/yCw=)
2: OggZA5tm-u8UP2Jid5J3Yikxe2I.crl (hash: aSgERzecOXuj8xG6wFMhMzTuAauUf7Q/jfcd0DomWo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:d4:70:4d:07:5c:ec:f7:da:7a:fc:0a:fb:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0819039b66faef143f62627792776229317b62
Validity
Not Before: Sep 26 03:02:15 2026 GMT
Not After : Sep 27 03:02:15 2026 GMT
Subject: CN=35f9a187d23d75368676a156717fdf694a6115bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:3e:bc:9d:74:38:de:c5:dd:52:8d:23:fc:
29:62:91:e4:38:14:94:64:9a:6d:28:34:d6:7d:88:
5b:8a:1b:35:ef:df:c1:0f:64:c5:67:dd:2b:99:11:
e6:8a:e6:76:b7:34:dd:32:22:3c:7a:70:aa:19:d2:
41:f9:ac:ec:9d:c6:e3:a0:b7:d1:1c:d8:f8:7f:c5:
3e:f7:0a:c9:e3:cf:6c:8c:14:30:6e:5e:e4:6a:e9:
19:1f:ed:02:a4:fe:82:d9:57:13:68:a4:32:40:fe:
33:e0:48:80:9f:d1:aa:a8:4c:55:9f:c3:de:85:7d:
c4:56:6b:7b:db:37:5f:74:73:a8:13:a8:72:62:ac:
d0:20:52:db:7f:40:b8:7e:e1:6d:b2:be:55:34:e9:
3e:5c:71:af:0b:95:27:cc:bd:d5:82:47:50:99:16:
3f:54:4f:c9:67:f8:eb:6c:5f:9a:74:57:ac:f8:a3:
5f:63:59:ab:b2:cb:4a:73:4b:e0:3c:5a:0c:43:3a:
94:fb:3a:c6:ba:7e:e1:b9:53:77:86:02:7a:f6:ef:
81:77:00:01:ce:90:48:9e:08:5e:79:ba:d7:a7:8d:
1a:a0:a3:ca:47:5b:d1:bc:4e:61:ee:22:69:8f:9b:
b5:6e:bc:00:ef:f8:89:52:07:18:81:f5:5d:dc:50:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:A1:87:D2:3D:75:36:86:76:A1:56:71:7F:DF:69:4A:61:15:BF
X509v3 Authority Key Identifier:
keyid:3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:71:87:05:0e:4a:9a:4a:1f:0f:f7:5f:73:13:c9:40:1d:
43:c8:68:5d:87:66:92:55:5d:96:11:76:7f:10:53:be:1a:99:
6a:08:a5:88:d0:0c:5f:f1:66:b8:b4:9c:14:d2:bf:22:ef:69:
76:6c:1a:7c:54:a0:0e:cf:d6:3c:f5:55:19:aa:40:b9:2e:55:
1e:8c:0e:e3:5f:bb:90:87:0d:42:a8:3b:28:10:13:ff:e3:bc:
26:e8:10:2d:fc:ef:69:72:d9:11:b3:9c:44:fe:2e:c6:b9:6f:
81:3b:20:89:37:75:13:1e:93:d8:f9:b1:84:a5:16:03:81:8f:
ea:97:ae:a7:94:d8:56:fc:46:f0:53:0d:fd:31:24:9a:7d:a7:
ba:e5:30:24:94:1e:9d:93:e4:80:db:d6:87:12:74:86:e2:b6:
8c:80:d3:60:ee:fc:6e:29:42:b2:d7:6c:bd:f0:6c:11:a0:cf:
fe:88:50:e7:18:81:6d:ca:2d:e9:27:98:9e:6f:5a:65:71:23:
ae:c8:00:13:9f:b3:8b:3b:2a:f7:fb:60:7c:f5:fc:84:84:bb:
f0:84:d4:16:a5:ec:cf:3b:0e:15:52:fc:19:6b:04:d0:4d:cd:
b5:8c:e8:94:8a:93:16:3b:22:ed:9d:44:1d:e8:4b:49:a0:5a:
74:86:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:22:39 2026 by rpki-client