Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: JO8StcNiFmRdK3fSvbKPIdE7UGchVkzZO1RC+jgOUUI=
Subject key identifier: 5D:17:2F:63:5D:FC:19:44:FF:7C:75:E1:2D:D0:5E:FE:2B:D7:50:89
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019F902355D1BEF6678F30D76357B54044CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 027C
Signing time: Thu 23 Jul 2026 18:01:02 +0000
Manifest this update: Thu 23 Jul 2026 18:01:02 +0000
Manifest next update: Fri 24 Jul 2026 18:01:02 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: TgmYUo2rQup2v8S0A5IsAUqrFFlvkCHKyphye3YJgAQ=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:55:d1:be:f6:67:8f:30:d7:63:57:b5:40:44:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: Jul 23 18:01:02 2026 GMT
Not After : Jul 24 18:01:02 2026 GMT
Subject: CN=5d172f635dfc1944ff7c75e12dd05efe2bd75089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:60:1b:c0:84:58:e7:d0:06:23:9b:02:4d:
7f:30:6d:d8:5b:12:84:85:9a:2f:71:90:c2:d1:67:
c1:91:e4:82:e4:cc:7a:17:1d:56:d6:a4:00:a7:76:
4b:43:f1:ce:ef:33:7d:36:be:f9:9b:59:b4:6e:19:
96:2a:cb:f8:ac:63:0e:bf:16:ae:50:aa:c6:5d:f3:
2c:1a:c5:2c:28:3a:ca:d6:0f:34:3b:81:5e:b3:97:
96:27:18:43:ac:5e:6a:ee:d1:86:d4:f2:0a:fd:12:
eb:6b:88:33:8e:b3:b6:45:fd:8d:6b:da:a9:7c:e3:
52:2a:2d:6d:2b:6e:9d:78:a1:d9:c2:ed:89:41:c0:
3f:bb:04:5f:af:3e:19:84:77:f4:3d:05:60:eb:13:
58:cf:41:ed:cd:f0:ea:75:20:e6:06:51:8d:1a:af:
41:69:77:c2:ef:47:55:9a:8c:dd:6c:ad:71:0d:d7:
ad:33:be:b5:6d:81:09:1a:5b:a4:9c:4b:45:cc:95:
2a:9b:3f:ad:f1:97:e8:7c:71:ad:6e:bb:92:0e:70:
62:27:22:78:89:8a:fc:a7:33:49:3f:f0:75:dd:a0:
a0:ef:06:47:fe:b2:9c:07:64:35:1f:f8:66:63:4a:
2d:10:44:76:eb:1c:b3:fc:e4:81:f4:68:65:6b:6c:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:2F:63:5D:FC:19:44:FF:7C:75:E1:2D:D0:5E:FE:2B:D7:50:89
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:dd:2f:74:c6:70:ae:7c:f9:7d:dc:67:22:52:2b:bf:57:
c7:8c:3e:fb:2d:4e:26:86:cf:2f:19:e8:f5:04:5b:85:35:7b:
f7:1c:f3:ad:08:ad:5b:fe:0c:00:cc:06:a2:a7:4f:7b:fb:6d:
ad:36:e8:e9:00:16:ae:f9:2f:82:9c:4d:19:da:2c:b7:a0:4c:
2f:c7:23:03:12:b4:b8:71:cb:36:13:d8:9d:63:07:ee:54:a2:
b5:5f:94:72:b1:82:7f:b5:43:75:c0:2d:8d:e4:18:5d:14:18:
d5:01:e0:f9:c7:74:9a:db:fc:ca:cc:e4:bc:4c:c0:f7:58:9a:
67:2b:d4:e3:86:e9:d9:3b:1d:8d:3f:d0:7f:5e:0d:f8:e1:1a:
23:9f:ca:bb:94:0b:f4:24:45:84:fc:06:2f:a7:ea:13:9d:30:
3f:d7:b7:a1:d1:8b:76:27:38:cf:30:b1:04:ef:ae:8d:87:e5:
c3:1a:9d:be:af:16:70:b7:88:78:32:62:b1:c0:a1:c2:ad:b9:
ba:34:21:d2:bf:ac:ef:8f:71:6c:cf:e2:93:59:b1:7f:fc:22:
55:f1:47:95:19:71:24:42:e6:fe:c0:5e:27:cf:23:5b:e3:9e:
14:43:e3:90:df:f4:5e:52:88:d1:15:74:cc:1e:dc:66:71:d9:
7d:81:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:10 2026 by rpki-client