Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier: trPv1BxlkL8FwIMUPfqN4c8G2/4E6mwmlSO637N2Ww0=
Subject key identifier: 80:2F:3A:72:F3:1B:FE:48:68:05:00:43:BD:05:A9:09:87:39:74:E2
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial: 019E21369DC9DDB1AB2CF160A20B09ECD081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number: 01BE
Signing time: Wed 13 May 2026 12:01:27 +0000
Manifest this update: Wed 13 May 2026 12:01:27 +0000
Manifest next update: Thu 14 May 2026 12:01:27 +0000
Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: UisX0K+v4Z6LTcA7VgvTnV3Ocytu4BWa+ZQhVb5DPns=)
2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:9d:c9:dd:b1:ab:2c:f1:60:a2:0b:09:ec:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Validity
Not Before: May 13 12:01:27 2026 GMT
Not After : May 14 12:01:27 2026 GMT
Subject: CN=802f3a72f31bfe4868050043bd05a909873974e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:99:a1:8a:9f:d2:a7:12:3a:9b:87:64:5f:
c5:1a:ac:f2:a8:f9:bc:53:98:3f:1b:b0:23:75:fb:
a8:1b:62:a6:50:8a:b2:da:b9:5b:a7:9b:1e:b6:25:
02:49:88:1a:77:ce:47:03:50:44:52:2a:55:bc:5c:
6e:c2:6f:49:f2:77:fa:7e:e7:5e:f2:1b:5b:f2:35:
a6:7f:9b:74:76:a4:15:e3:15:c4:dc:ff:e8:e9:15:
50:08:db:1e:59:c7:23:34:58:c0:6f:20:2c:32:e8:
fb:64:38:d6:4a:a8:01:55:26:5c:05:6c:87:88:8d:
a4:f2:d3:8a:0f:cb:f8:7e:2a:54:f2:be:60:ed:6e:
7e:15:ce:f3:f3:2e:43:3e:ea:69:71:79:38:73:e3:
c9:e2:b6:1c:df:8a:08:b7:84:ab:bd:cc:70:a2:73:
80:24:43:e6:4e:7e:26:af:b6:4f:6e:43:df:45:2c:
30:b0:0f:0a:4a:d0:2d:67:62:9b:70:a2:47:f4:e6:
8c:2c:cd:7d:12:1f:e8:b4:0f:cd:0a:15:ef:78:69:
9e:e1:ec:1c:0f:0f:c8:c4:00:ed:fb:33:f4:86:9f:
e1:2a:c3:e8:57:9d:97:c8:90:e5:38:ca:58:2b:af:
7b:db:1d:9d:13:65:84:3a:7f:32:7a:14:bb:cb:2a:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:3A:72:F3:1B:FE:48:68:05:00:43:BD:05:A9:09:87:39:74:E2
X509v3 Authority Key Identifier:
keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:39:2d:d6:8e:22:cb:11:4e:2e:e3:30:98:e1:99:66:60:
f9:a2:a6:f3:de:1d:1e:7f:b9:ee:d5:27:21:c2:cc:5d:dc:60:
84:e2:e6:3a:48:81:2a:ba:5a:cc:85:13:f1:d8:b0:5f:b9:34:
40:a8:20:ce:c1:9e:04:28:d0:d0:60:12:ee:9f:d4:58:0d:69:
1a:74:fd:a2:78:7e:ae:f0:0f:5a:f1:5f:a1:c9:87:18:d7:1a:
32:be:33:43:e3:6d:37:38:ca:2f:e0:d5:8b:d2:e2:7d:28:81:
0d:bf:c0:4d:af:a3:25:62:6f:55:7e:ad:73:98:07:91:d1:8b:
c1:cd:0a:f4:7b:f6:8d:ff:7d:f1:f9:e1:25:5a:03:7a:09:0a:
51:92:79:8f:8b:aa:4f:38:68:2d:28:5e:2d:5e:48:a8:b8:e4:
a7:3a:7d:39:17:fb:42:73:42:de:f8:a2:d1:6e:e7:2f:7b:83:
23:38:22:98:50:d3:91:8b:1e:16:8f:c1:c9:e5:40:6a:ee:ae:
7c:1c:d4:01:24:38:3d:86:51:4e:6f:e2:e7:11:48:ad:cd:78:
34:89:79:ce:b8:58:cc:05:38:30:f6:65:84:d5:63:de:c1:9f:
91:1e:4c:03:f0:bc:bf:5d:e4:af:76:6d:9c:b6:df:c3:96:a6:
84:6c:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:29 2026 by rpki-client