Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: uTU1N2P20i2pKx8woreDHeSQLPOBs2HpXJBm9eHKdxM=
Subject key identifier: F8:6E:81:6B:BA:E2:07:05:CE:3D:FB:7E:A7:98:08:74:A9:5A:69:A4
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 01A124D40D3FAE9CDDE0139495F3F241359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 150B
Signing time: Sat 10 Oct 2026 08:00:38 +0000
Manifest this update: Sat 10 Oct 2026 08:00:38 +0000
Manifest next update: Sun 11 Oct 2026 08:00:38 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: Q3dMXenWMYV0q5rBI4P8lg69bbpVPLzskM0Na5Fx8/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:0d:3f:ae:9c:dd:e0:13:94:95:f3:f2:41:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Oct 10 08:00:38 2026 GMT
Not After : Oct 11 08:00:38 2026 GMT
Subject: CN=f86e816bbae20705ce3dfb7ea7980874a95a69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:a9:34:d1:e1:a3:92:54:e7:22:04:bc:40:
5a:15:ea:8a:ed:d2:88:46:19:bd:9f:a6:f9:db:82:
45:23:8e:f8:74:21:2f:11:fa:18:9e:e1:fd:cc:cc:
22:38:11:5d:6b:de:81:fc:07:67:e7:dc:c1:3d:18:
a9:64:82:06:b1:6b:5f:a4:f7:da:14:e8:95:b6:70:
5a:91:e6:7c:c1:fb:63:18:8e:f3:2a:cf:c2:a3:21:
d5:5f:4b:27:f1:8f:e0:54:4b:bf:a8:a9:87:15:03:
86:25:04:e2:8b:e2:fe:f5:8e:3e:d2:be:0c:bd:18:
f3:57:33:e7:16:9e:6d:bf:94:9b:d5:d8:b0:07:97:
ff:2f:4e:25:e2:6f:03:3b:84:7b:d9:a2:bc:cb:ff:
49:92:b3:90:71:2c:24:59:9b:0d:7b:4f:9f:c4:b0:
8b:36:e2:28:53:2c:f4:f9:29:30:e0:c2:bb:fa:cc:
b4:ed:75:e8:04:ef:ed:1d:24:d5:fd:1a:cc:af:9d:
49:8a:2a:31:b1:22:a6:2b:26:a6:20:46:5c:86:40:
a6:46:15:3c:56:cd:7c:49:16:d8:b1:bb:3b:e1:81:
a5:c0:5e:87:47:46:e5:4a:92:b9:74:c3:a6:90:25:
5a:29:07:be:18:07:c5:0a:6e:3c:1c:3c:0f:2a:0e:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:81:6B:BA:E2:07:05:CE:3D:FB:7E:A7:98:08:74:A9:5A:69:A4
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:64:04:fa:96:16:c8:e1:1e:8b:8b:42:ef:c9:64:f7:5e:93:
43:3a:08:69:6d:c3:45:38:c5:e1:1a:d9:47:de:33:c6:6f:81:
64:9a:81:84:05:4b:c2:ac:99:41:9a:71:70:c5:d5:74:e1:18:
c7:65:92:8f:e0:8c:e4:7a:cb:f9:d6:be:fb:12:8a:d3:54:8b:
bf:3f:37:0b:f1:61:00:b4:6b:73:bc:ef:28:ef:92:bd:0d:23:
70:c0:ee:57:8e:11:58:a7:02:b3:b5:39:53:d5:48:d1:31:54:
cc:c0:47:74:e6:b3:fa:02:7b:83:5d:48:68:1b:44:2b:90:07:
fa:86:59:e7:6d:6f:c6:fa:82:5a:8a:96:48:79:94:67:55:af:
bd:35:a3:9d:36:06:cf:77:88:87:3d:10:c4:0a:eb:23:b1:46:
dc:1e:74:de:9c:2f:7c:d4:16:06:31:59:c2:c6:31:a2:7d:ff:
5d:8d:8c:8e:72:23:d6:0b:01:ec:9f:59:7e:e8:0c:3e:37:53:
f8:69:72:66:c4:4d:c6:f7:43:da:11:b3:be:50:80:3b:b0:38:
93:82:2c:a3:4d:e0:30:94:e7:3e:77:91:58:ea:fd:37:b1:19:
37:fe:5f:64:4a:18:c4:77:f4:95:ec:8b:16:dd:0c:fc:c7:b7:
3c:b3:28:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1A0/rpzd4BOUlfPyQTWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjYxMDEwMDgwMDM4WhcNMjYxMDExMDgwMDM4WjAzMTEwLwYDVQQD
EyhmODZlODE2YmJhZTIwNzA1Y2UzZGZiN2VhNzk4MDg3NGE5NWE2OWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlqpNNHho5JU5yIEvEBaFeqK7dKI
Rhm9n6b524JFI474dCEvEfoYnuH9zMwiOBFda96B/Adn59zBPRipZIIGsWtfpPfa
FOiVtnBakeZ8wftjGI7zKs/CoyHVX0sn8Y/gVEu/qKmHFQOGJQTii+L+9Y4+0r4M
vRjzVzPnFp5tv5Sb1diwB5f/L04l4m8DO4R72aK8y/9JkrOQcSwkWZsNe0+fxLCL
NuIoUyz0+Skw4MK7+sy07XXoBO/tHSTV/RrMr51JiioxsSKmKyamIEZchkCmRhU8
Vs18SRbYsbs74YGlwF6HR0blSpK5dMOmkCVaKQe+GAfFCm48HDwPKg6c+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhugWu64gcFzj37fqeYCHSpWmmkMB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmQE+pYW
yOEei4tC78lk916TQzoIaW3DRTjF4RrZR94zxm+BZJqBhAVLwqyZQZpxcMXVdOEY
x2WSj+CM5HrL+da++xKK01SLvz83C/FhALRrc7zvKO+SvQ0jcMDuV44RWKcCs7U5
U9VI0TFUzMBHdOaz+gJ7g11IaBtEK5AH+oZZ521vxvqCWoqWSHmUZ1WvvTWjnTYG
z3eIhz0QxArrI7FG3B503pwvfNQWBjFZwsYxon3/XY2MjnIj1gsB7J9ZfugMPjdT
+GlyZsRNxvdD2hGzvlCAO7A4k4Iso03gMJTnPneRWOr9N7EZN/5fZEoYxHf0leyL
Ft0M/Me3PLMoyA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:58 2026 by rpki-client