Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: iNkUrnDxK5i3pobW/jos2WFWCTY9edxbiEk+Dfjox6Y=
Subject key identifier: 69:9B:07:29:85:7F:DB:A6:38:89:1B:F1:94:63:E3:55:83:5A:AE:57
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019D31BE87773B12993682B55716BB1D38B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 0142
Signing time: Sat 28 Mar 2026 00:01:03 +0000
Manifest this update: Sat 28 Mar 2026 00:01:03 +0000
Manifest next update: Sun 29 Mar 2026 00:01:03 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: 5xvhWBQgCuineK+QYyWjoNpgGvPcs5EcvN4kAZFDoes=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:87:77:3b:12:99:36:82:b5:57:16:bb:1d:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Mar 28 00:01:03 2026 GMT
Not After : Mar 29 00:01:03 2026 GMT
Subject: CN=699b0729857fdba638891bf19463e355835aae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:96:ad:a3:c4:f5:8f:d7:76:75:5b:0e:b1:
08:02:29:87:fb:7e:96:82:a2:e8:ce:d5:a5:c8:05:
df:36:17:3a:b7:7c:a3:da:c6:d5:9b:02:00:43:6c:
a6:b3:d3:c2:3e:31:29:2d:08:d4:6a:cd:30:bd:2d:
b6:9a:1a:c9:6b:49:72:7e:ea:9d:5b:ec:ee:8e:b6:
33:b2:d3:eb:91:a0:a9:7e:42:0f:a5:dc:ab:7c:67:
0a:84:4d:27:94:e5:e2:1d:87:18:7b:e9:d9:e4:b7:
f2:94:5c:c8:7b:63:b6:1b:01:b0:2b:0b:c1:9d:e3:
be:c1:5a:cf:a1:d6:19:08:ec:02:5a:f7:19:a7:de:
07:75:5c:75:a1:4f:05:e7:3d:25:05:bf:8c:4f:ae:
f2:ba:58:48:00:35:cb:d3:7a:a5:a7:b3:1d:f8:30:
69:b5:f1:a2:cf:99:89:5a:23:1b:cd:75:47:11:42:
21:ab:ae:d4:dd:f4:ca:1b:02:75:73:06:a2:c3:06:
60:ea:df:09:10:ae:f6:87:65:16:b4:9f:6a:bf:bd:
a5:44:76:ba:9d:a6:a7:9d:5d:7a:90:86:35:1d:e1:
da:79:e4:07:66:27:86:5d:5d:e6:46:d2:61:d8:6b:
4c:e3:4e:25:bc:10:a3:9b:e5:82:c7:48:00:43:6e:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:07:29:85:7F:DB:A6:38:89:1B:F1:94:63:E3:55:83:5A:AE:57
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:e1:90:52:ad:e7:0d:7b:7e:23:f8:55:b0:03:8f:c1:03:
7c:74:57:6b:17:b5:0b:2c:43:30:48:0b:11:78:25:04:48:8b:
d4:32:7c:d5:17:21:e9:14:c7:27:ff:70:56:db:b8:a4:70:fd:
27:fa:80:3b:74:84:42:58:ea:5a:19:1a:d9:43:d4:4f:54:c7:
fa:76:00:c5:c5:b4:35:7a:8b:03:d5:6f:6b:94:fd:96:98:cf:
33:6d:38:d2:49:0c:57:f5:46:c2:c0:4c:6f:45:82:ce:9e:a1:
01:41:89:ce:f3:63:b4:d5:71:ba:50:5a:93:dd:12:ee:df:c8:
3b:ed:2f:1a:33:99:24:05:6c:63:cf:5a:cb:19:10:77:78:00:
b9:b9:93:57:04:03:54:d1:04:3f:12:d7:e0:e6:4a:d5:52:4e:
5a:d9:a4:74:ea:67:35:b4:4f:f4:be:f0:86:cc:0d:71:65:f5:
37:b7:86:b3:ca:6b:fd:db:1d:1a:39:fc:fe:cc:b0:3b:50:fc:
52:33:9a:ab:40:29:79:0b:51:cd:97:32:9c:a5:c4:4b:86:b8:
d3:e1:d0:bf:3a:35:c0:ea:8b:94:aa:53:ce:70:49:6b:b8:f9:
e4:b9:14:80:4c:83:4f:51:b7:cb:04:36:e1:46:38:e7:30:d3:
f1:c7:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:23 2026 by rpki-client