Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: 7jJvWFYEUGHhxjnjLL0cP2Sl/FrNWC+gwRQ0y772+tI=
Subject key identifier: B5:E5:5A:DE:2D:BA:B9:8D:2C:66:A7:5E:95:79:2F:7F:F6:41:8A:5F
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019D273A8EA996C53885F95D8C045DAE1588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 12FA
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: l0yNL7qqkxS7aUeAG4BqF/WQmmgTUN8U9wKrR5STRUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8e:a9:96:c5:38:85:f9:5d:8c:04:5d:ae:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=b5e55ade2dbab98d2c66a75e95792f7ff6418a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:13:69:6b:36:f8:61:52:3e:36:7b:37:e1:
04:34:26:da:5c:c0:fa:f7:33:74:11:26:b2:ed:40:
2b:56:96:06:44:91:62:e0:72:6e:be:1a:07:24:47:
7e:bf:23:ef:e5:83:f2:ce:86:e1:f4:36:5c:0d:52:
fb:da:d2:87:0a:68:e9:8b:d7:c6:66:af:b6:36:e4:
42:e3:0b:ae:e7:3f:81:6a:4e:dd:e8:72:d2:3c:6f:
14:17:ef:11:95:09:4d:52:88:f4:51:74:73:fa:6c:
47:bf:94:12:cb:8d:8a:e3:6c:23:62:d4:64:cb:a3:
8d:a1:04:ca:48:da:2c:27:5d:ed:c1:4a:1d:a0:38:
64:34:dc:8c:67:62:6a:62:d9:3d:32:d5:5c:ac:eb:
65:59:3e:46:8f:00:f2:af:bc:a3:a6:13:2f:ea:29:
56:f2:00:7c:93:85:b1:1e:1d:c9:54:e2:0a:e1:6f:
94:1c:c4:c2:32:83:c3:cb:26:45:f7:39:63:6f:e5:
d1:4a:2b:ae:78:cc:01:ab:88:2d:31:ae:cc:34:35:
08:bf:8c:8b:93:cb:9a:e9:92:bf:41:9d:e3:bb:0a:
0d:52:df:23:6d:aa:f1:3d:30:94:b8:d6:b0:4f:a7:
08:a1:76:78:7e:a7:b8:ec:39:1d:68:4e:d5:f5:3c:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:5A:DE:2D:BA:B9:8D:2C:66:A7:5E:95:79:2F:7F:F6:41:8A:5F
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c9:cd:d2:77:9a:56:b7:37:a0:55:0a:0d:01:85:0d:c7:87:
3a:ca:42:83:0f:a9:0e:38:c8:f1:69:45:4f:74:6b:0b:b8:89:
de:6e:a8:a8:69:e7:6f:2b:aa:30:69:55:68:de:bc:42:41:c3:
49:f2:06:30:97:c3:3d:8a:35:8c:98:7a:97:9f:4e:ee:98:6e:
75:26:48:00:28:8c:80:d1:b0:7b:92:6e:bd:25:43:f2:83:8c:
5d:e5:47:59:ed:c1:24:1f:8b:bf:0e:52:d8:20:e0:c3:84:66:
88:a7:9e:31:15:74:02:ea:5e:c6:d6:0c:d1:a2:58:e3:66:7e:
29:6d:a5:d5:ae:29:89:90:d1:de:b1:5b:61:81:4f:0a:87:22:
fa:ca:89:bf:44:0b:eb:74:7d:dd:4f:e4:da:53:39:c7:9d:19:
73:51:78:78:48:4f:a9:48:79:b0:72:8f:4d:db:75:98:c4:75:
e8:7f:b1:a4:7e:a9:67:0c:49:74:3e:e3:7c:13:bb:8b:81:03:
28:cf:72:d9:61:d1:10:c9:d8:20:78:86:10:7c:74:90:15:37:
e8:d6:da:21:a2:0b:41:19:95:9f:b2:8a:e9:bc:99:3d:9d:2c:
82:45:b0:d9:11:3c:06:e8:34:3c:6a:14:49:04:64:df:40:0c:
82:8e:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:42 2026 by rpki-client