Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: nkKzQvmh+r6Jp5/BRG0tlCIFEVr/6SR6bU2DOv5LsT4=
Subject key identifier: 03:0B:68:CD:54:88:59:63:9F:19:34:19:92:BC:11:D9:DF:0A:7A:65
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019F932443FF54204872A9171C711F730595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 143B
Signing time: Fri 24 Jul 2026 08:00:55 +0000
Manifest this update: Fri 24 Jul 2026 08:00:55 +0000
Manifest next update: Sat 25 Jul 2026 08:00:55 +0000
Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=)
2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: 6lyNXFOmlFP3QV/ZceArbYkU7UflY2JVWY37FqT4zVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:43:ff:54:20:48:72:a9:17:1c:71:1f:73:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Jul 24 08:00:55 2026 GMT
Not After : Jul 25 08:00:55 2026 GMT
Subject: CN=030b68cd548859639f19341992bc11d9df0a7a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:e3:3b:50:3b:2f:58:8c:f8:e9:c4:c7:d6:
b3:4c:e8:9f:47:01:b6:67:de:28:f2:1c:49:c8:68:
f6:75:24:89:44:47:43:a8:63:c5:46:50:f1:78:99:
27:7e:87:fe:7f:3f:94:9c:60:d4:81:b5:86:fc:11:
0d:d6:bd:25:29:0d:bb:d6:e5:83:f1:94:43:db:e5:
59:a1:67:7c:bf:47:0f:49:35:74:c6:70:55:0f:63:
ee:31:d5:90:52:6b:8e:f9:9a:92:33:4c:3a:56:26:
d8:b8:15:5d:16:f6:ab:b0:dc:d7:45:10:bb:e2:15:
d0:2a:81:33:80:81:5f:3b:33:60:25:da:cc:b1:bf:
b9:33:65:fd:61:cb:bb:24:b4:d8:b9:82:7e:87:9b:
64:fd:c5:82:12:e1:49:e1:b5:41:7d:a8:7c:f5:64:
43:76:75:13:19:6a:a0:f0:82:f3:a5:9e:2c:60:af:
f9:60:32:91:a9:73:e4:38:65:92:8f:73:7a:cf:74:
be:f7:64:65:8e:0c:90:91:6a:3e:06:60:6e:82:7a:
9a:c7:bd:47:7d:95:b8:cd:ab:f2:8c:7d:ed:44:f6:
fb:57:8e:2a:0d:3c:46:7a:69:e0:b5:e0:5b:f5:a8:
22:ef:51:89:3c:25:f4:49:45:9a:45:95:71:ec:19:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:68:CD:54:88:59:63:9F:19:34:19:92:BC:11:D9:DF:0A:7A:65
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bf:c8:af:23:e5:9a:d8:5b:7e:32:9d:a8:b6:41:49:89:af:
5a:20:e5:8a:38:79:5b:c9:20:f3:90:19:d8:ba:06:93:85:67:
d2:2e:be:77:cb:3e:c8:58:98:49:a7:66:83:23:89:ba:cb:b9:
0f:42:28:09:bb:a3:d5:d6:55:c7:3a:c5:7f:ac:5e:ef:36:e5:
a2:cf:c5:58:1f:9f:04:6b:d9:9c:c5:33:dc:0f:2c:c1:25:5d:
9e:13:ca:a3:d2:3a:f8:71:2a:ee:1e:3e:b3:d1:8c:f2:6b:54:
43:79:4d:19:f8:76:07:fb:05:0c:c0:35:7a:94:b8:29:73:21:
b4:cd:59:c2:1e:4b:5f:60:42:d2:9c:6f:23:71:3f:f7:79:6d:
73:a0:b5:0c:32:8b:86:90:26:70:2e:5d:4c:6f:e4:f8:16:96:
e2:d8:11:c1:2e:e8:d6:0e:35:6b:5a:0f:99:d3:9d:d7:b4:ac:
30:59:1d:51:4f:d8:24:4d:df:09:92:81:1b:c4:30:f0:5c:6a:
ae:c5:23:02:ef:70:dd:c2:7c:3d:6a:17:9d:a0:1d:24:7e:f0:
a9:a5:83:b3:d9:a2:b2:b3:ba:0b:6a:52:cb:5d:a9:04:9e:88:
18:3d:6d:8b:c0:d3:64:2d:8e:da:67:87:74:06:f0:12:70:21:
61:76:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:25 2026 by rpki-client