Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: AVwHIkm+Eop8WKdut/Y72E7K9NsAcVt3/O+5TRKFqOw=
Subject key identifier: 18:5E:B9:20:83:6F:78:7F:F5:A6:92:20:0E:E6:EE:D3:26:43:92:5E
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 01A0DC4D666D86268D68B28FB7E5BB6820B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 0328
Signing time: Sat 26 Sep 2026 06:00:55 +0000
Manifest this update: Sat 26 Sep 2026 06:00:55 +0000
Manifest next update: Sun 27 Sep 2026 06:00:55 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: a3nGTAXpUi9Tqk5WocX/ItslOHubsTnvcTw143qcTcg=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:66:6d:86:26:8d:68:b2:8f:b7:e5:bb:68:20:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Sep 26 06:00:55 2026 GMT
Not After : Sep 27 06:00:55 2026 GMT
Subject: CN=185eb920836f787ff5a692200ee6eed32643925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:94:73:4b:b1:c2:72:7a:78:35:a8:ed:fc:
8e:d4:c2:df:3b:d2:05:4d:3c:8e:e7:23:94:c0:db:
c1:21:27:4c:ce:a5:23:d1:5a:e2:93:5d:0c:2b:b6:
e5:14:9a:1a:e1:2c:2a:7a:2d:11:24:18:4c:4c:c1:
69:f0:b6:77:f5:17:46:e9:44:08:97:a6:bf:79:ac:
a6:8e:d0:0c:b1:83:ec:47:32:54:0b:5e:2f:8d:c3:
be:1e:b5:d2:3e:00:96:46:ab:c0:6d:7d:c4:cf:d9:
73:14:95:4b:a6:00:05:4b:24:19:df:14:41:e6:84:
80:98:d3:90:a9:66:33:c7:3b:4c:b5:ce:c7:39:ad:
84:42:79:7c:79:be:2c:1d:1f:48:7d:a8:59:3c:06:
7e:67:46:48:de:02:57:41:37:ef:b0:ad:2d:f9:8f:
5a:38:40:73:43:95:a6:7b:cc:f4:62:c7:5f:af:07:
15:95:9e:b7:d2:1a:3b:b0:5e:ab:c3:ec:e5:e8:65:
d0:d5:d1:16:bc:35:53:c9:f9:be:60:5e:0e:c4:69:
3b:ee:d5:e5:91:99:1c:6c:7e:ac:54:59:b3:eb:22:
45:46:b7:d7:d6:f9:eb:07:e2:c6:0c:6f:83:e4:93:
6f:e9:d3:ab:ee:09:96:2b:0a:da:4a:fd:41:b5:23:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:B9:20:83:6F:78:7F:F5:A6:92:20:0E:E6:EE:D3:26:43:92:5E
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:95:f6:2f:ee:9f:27:f9:b4:21:5e:22:4d:b7:3b:b2:2c:
98:dd:6c:ca:f2:49:58:c5:4f:be:64:fb:4a:c8:ed:86:05:f2:
49:cf:89:3a:b4:c9:0a:e8:0d:76:76:7a:dd:ff:08:15:33:21:
d6:24:50:8a:fe:d9:1a:8e:c8:29:a5:c8:da:87:19:ff:ef:6f:
06:1d:ff:ac:89:74:fb:26:be:03:47:ef:13:ef:0f:dd:f2:89:
52:10:82:8d:08:a8:b2:52:4a:e7:03:03:72:9e:03:b6:63:a2:
6c:f4:0f:9e:cc:6f:13:da:27:85:01:0e:20:8a:bb:93:26:58:
45:c8:c9:67:34:06:35:89:52:c3:fa:b8:81:f9:6a:c0:e9:f9:
89:bb:24:c2:fb:79:7b:64:7f:d1:9a:58:11:c1:b3:90:db:6c:
9d:12:19:e1:66:64:9f:af:f5:cc:6d:65:33:16:5c:2e:11:69:
e4:74:94:a3:6b:42:ed:75:35:bb:8a:72:2b:7d:db:b0:ba:6c:
86:35:03:bc:92:da:36:be:08:29:90:16:30:a8:eb:8b:83:ac:
9c:14:6d:1e:cb:15:bf:7f:a7:c4:e3:68:83:4c:3b:5a:19:34:
e4:bd:79:9c:ed:3b:5a:5c:6a:89:2e:26:78:5e:f4:84:ec:6b:
23:66:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:45:55 2026 by rpki-client