Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: uB2K033cy1OOc3+BQmrelFHwv576mHYN/7D2svL0sAs=
Subject key identifier: B6:7E:E5:F6:15:F6:B1:F4:53:82:F1:63:DB:F5:0D:C1:63:0F:C9:79
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019E205A7AF2BA9EFE48B856C028FC9374CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 137B
Signing time: Wed 13 May 2026 08:01:00 +0000
Manifest this update: Wed 13 May 2026 08:01:00 +0000
Manifest next update: Thu 14 May 2026 08:01:00 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: ZpphRgCat/bOLGPZ3JUgiy+92yHvqDDqXfFBJDN0RNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:7a:f2:ba:9e:fe:48:b8:56:c0:28:fc:93:74:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: May 13 08:01:00 2026 GMT
Not After : May 14 08:01:00 2026 GMT
Subject: CN=b67ee5f615f6b1f45382f163dbf50dc1630fc979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:7d:42:77:e2:24:56:42:75:f1:8d:2f:47:
b6:a5:37:1d:b4:86:ae:f9:79:a1:b1:2a:7c:68:aa:
17:82:57:89:7d:4b:03:82:e5:b1:73:9d:fc:60:26:
c9:8b:89:62:f5:00:d5:a6:11:81:3d:50:f7:3f:bf:
e4:07:10:e4:e6:6b:98:50:51:2a:68:d4:cc:81:54:
9b:05:b0:43:24:3b:3c:5a:33:50:6d:b0:2c:5a:6e:
3b:55:d3:d6:75:a3:6b:31:fa:54:52:37:8a:b3:e0:
ec:a7:36:49:99:31:b7:d9:c4:85:68:ac:68:b3:63:
ac:6d:5d:13:33:fe:ca:66:b3:4b:8f:21:5c:92:9c:
2b:95:c5:a1:27:53:3e:95:db:46:a0:bc:9d:f8:30:
47:20:78:f1:17:b5:6b:2a:71:d3:9b:6b:6b:ca:3b:
f1:b8:80:c3:dc:65:a5:74:07:4e:58:60:bb:0a:7b:
f3:0b:e2:16:38:ef:9b:3a:9b:c1:15:1c:38:93:a7:
21:1c:0b:40:fe:4d:7a:ab:70:30:3d:fa:1a:3d:79:
4e:ac:9c:3d:3e:5e:70:d7:1b:bd:bf:76:5d:73:75:
d5:a2:6b:aa:ec:86:33:73:47:1d:1c:43:ea:c4:7c:
19:db:7f:96:9b:68:68:b5:50:0f:da:03:71:87:f6:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:E5:F6:15:F6:B1:F4:53:82:F1:63:DB:F5:0D:C1:63:0F:C9:79
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:29:9f:cf:5e:ce:b2:69:b0:4b:62:21:e5:65:29:2d:00:
3a:5b:04:04:03:26:73:04:1b:f7:f3:39:84:78:5d:3d:87:0f:
5d:f3:c1:7e:3d:13:41:b8:77:a4:d2:44:d3:dd:06:33:78:0f:
c9:eb:9e:89:e8:05:fe:d8:19:86:9b:3e:33:2f:0b:f9:48:87:
b0:b3:6c:a0:39:e5:50:e7:8c:7d:6b:c5:af:8a:65:62:6a:f2:
7b:c5:1c:45:51:77:4f:fb:18:a3:99:72:2e:bb:ae:48:bc:68:
02:2a:e9:eb:ee:68:d9:da:a5:91:1e:be:e7:a9:6f:a7:b4:4f:
cf:c7:01:e6:cc:e3:7e:92:80:75:41:dd:c2:9d:3d:67:03:a2:
2b:b3:a8:45:75:2d:57:d7:01:7b:73:5f:e9:b8:f4:a2:5a:ba:
95:da:3a:ce:a3:28:3a:e7:ff:b2:94:13:07:64:d6:dd:72:7f:
26:0c:b0:6f:63:52:c7:c5:56:5b:b4:79:c1:fd:93:40:00:08:
d3:a9:cf:61:d6:3a:92:e0:90:a5:c7:e1:02:b3:88:75:6e:82:
50:96:c5:c9:02:e5:05:da:d4:71:7f:d1:08:bb:2a:f8:38:4d:
87:b4:c5:69:85:73:73:2e:ed:41:4b:72:12:fd:fb:87:95:8c:
16:ec:0f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWnryup7+SLhWwCj8k3TKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjYwNTEzMDgwMTAwWhcNMjYwNTE0MDgwMTAwWjAzMTEwLwYDVQQD
EyhiNjdlZTVmNjE1ZjZiMWY0NTM4MmYxNjNkYmY1MGRjMTYzMGZjOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YB9QnfiJFZCdfGNL0e2pTcdtIau
+XmhsSp8aKoXgleJfUsDguWxc538YCbJi4li9QDVphGBPVD3P7/kBxDk5muYUFEq
aNTMgVSbBbBDJDs8WjNQbbAsWm47VdPWdaNrMfpUUjeKs+DspzZJmTG32cSFaKxo
s2OsbV0TM/7KZrNLjyFckpwrlcWhJ1M+ldtGoLyd+DBHIHjxF7VrKnHTm2tryjvx
uIDD3GWldAdOWGC7CnvzC+IWOO+bOpvBFRw4k6chHAtA/k16q3AwPfoaPXlOrJw9
Pl5w1xu9v3Zdc3XVomuq7IYzc0cdHEPqxHwZ23+Wm2hotVAP2gNxh/aN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ+5fYV9rH0U4LxY9v1DcFjD8l5MB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1Apn89e
zrJpsEtiIeVlKS0AOlsEBAMmcwQb9/M5hHhdPYcPXfPBfj0TQbh3pNJE090GM3gP
yeueiegF/tgZhps+My8L+UiHsLNsoDnlUOeMfWvFr4plYmrye8UcRVF3T/sYo5ly
LruuSLxoAirp6+5o2dqlkR6+56lvp7RPz8cB5szjfpKAdUHdwp09ZwOiK7OoRXUt
V9cBe3Nf6bj0olq6ldo6zqMoOuf/spQTB2TW3XJ/Jgywb2NSx8VWW7R5wf2TQAAI
06nPYdY6kuCQpcfhArOIdW6CUJbFyQLlBdrUcX/RCLsq+DhNh7TFaYVzcy7tQUty
Ev37h5WMFuwP9g==
-----END CERTIFICATE-----
Generated at Wed May 13 15:01:22 2026 by rpki-client