Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: fK1og5RGg9DEKAh4XD7gQJlKwC//Fw19eZExLuuqivM=
Subject key identifier: 15:A8:74:6B:72:FF:54:EC:2D:3C:9A:05:E8:B9:74:57:2B:8E:AE:F6
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019C985260C7A0203349D09D63F5F0B371E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 03B8
Signing time: Thu 26 Feb 2026 05:01:01 +0000
Manifest this update: Thu 26 Feb 2026 05:01:01 +0000
Manifest next update: Fri 27 Feb 2026 05:01:01 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: jAxsWj5zEGSjDyHTjtTgobQ0jDxYe4qRt2Ceb+Dd/BQ=)
2: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
3: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:52:60:c7:a0:20:33:49:d0:9d:63:f5:f0:b3:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Feb 26 05:01:01 2026 GMT
Not After : Feb 27 05:01:01 2026 GMT
Subject: CN=15a8746b72ff54ec2d3c9a05e8b974572b8eaef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:2e:67:e6:fc:f9:1d:52:a5:80:f3:53:bb:
67:c9:08:ac:7a:4a:4e:e0:4e:23:9d:89:37:e5:3b:
cb:91:36:b0:af:32:f6:e0:39:c9:ac:4a:e7:12:69:
a2:6e:e7:a9:0a:04:4a:0e:d3:f2:4d:2d:1e:e7:9e:
cb:f6:f3:29:3d:86:58:be:1b:15:0a:65:b4:91:c4:
7b:30:4d:a6:5b:26:ef:d4:77:43:8d:11:7b:a5:b7:
2d:fa:6b:c1:aa:59:5c:ec:97:41:b8:36:aa:1a:32:
05:e3:a1:2f:a6:4e:7b:1f:b2:c6:0c:0d:34:1a:d4:
3b:b7:68:a7:6f:c9:9e:4b:03:d2:f4:42:ad:b9:b6:
00:2d:7b:55:31:09:82:7c:8b:ed:8d:10:12:66:70:
6e:36:c7:8d:ed:12:0e:c2:a2:20:cf:79:99:fa:1b:
67:31:38:be:d1:9e:b6:2e:90:ca:46:e9:91:fc:d1:
0b:79:e6:ef:0f:2a:dd:e2:bd:04:b4:84:3f:70:d6:
ed:e0:61:73:be:1a:a5:ce:00:aa:ec:07:52:b7:3c:
de:b1:7d:56:d9:1e:97:bc:7c:75:93:64:14:eb:a0:
f8:0c:7a:03:61:bc:d6:c2:09:f8:45:48:95:95:11:
46:db:68:3b:f3:14:35:73:b6:d2:d9:1b:8c:33:6d:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:74:6B:72:FF:54:EC:2D:3C:9A:05:E8:B9:74:57:2B:8E:AE:F6
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:80:39:d1:0c:30:9f:59:ef:ef:85:5a:49:38:dc:f2:01:
5f:47:88:24:d2:73:1a:a3:34:6e:6f:29:a7:c2:4e:8b:db:eb:
66:0a:30:09:62:ee:86:05:ba:64:c9:4b:4f:b0:89:67:10:f4:
7a:5b:1e:01:2b:07:63:d4:0d:03:17:99:1e:c8:f0:57:ec:cb:
08:a5:52:bb:4c:9b:5b:8d:d5:7c:81:43:95:95:61:f2:1d:34:
a7:c6:9e:da:d4:20:be:cf:8b:05:a5:49:94:ea:a9:c8:ba:bf:
77:0a:aa:59:50:e4:61:1f:36:25:e6:f5:43:e5:04:07:bf:b5:
4c:d5:e0:7c:4e:af:61:4f:e4:2b:35:f1:1b:54:7b:48:a9:50:
73:a3:dc:8c:c4:da:54:3b:ea:83:25:c5:c4:e4:b3:fc:3f:99:
5b:58:f0:01:64:8b:f5:a8:2d:4f:9a:df:80:87:5a:ec:e7:5f:
30:36:0a:65:f5:e9:fb:a0:ff:60:d1:10:f4:ca:fd:f2:0e:72:
91:4b:b7:9f:10:20:e4:e8:82:69:f2:ac:ff:43:48:19:53:16:
57:ec:6c:a1:bd:09:a5:48:d7:dc:ce:1c:27:fe:e2:b4:76:11:
cc:f4:87:6a:1a:04:47:c1:ad:68:ef:2c:78:60:3d:21:79:ae:
ba:20:b6:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyYUmDHoCAzSdCdY/Xws3HkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Zjg3M2NkMzkzOTIwM2M3NzhhOGVhYWYxNjgzZTk0NjRh
YzM0MDAwHhcNMjYwMjI2MDUwMTAxWhcNMjYwMjI3MDUwMTAxWjAzMTEwLwYDVQQD
EygxNWE4NzQ2YjcyZmY1NGVjMmQzYzlhMDVlOGI5NzQ1NzJiOGVhZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54uZ+b8+R1SpYDzU7tnyQisekpO
4E4jnYk35TvLkTawrzL24DnJrErnEmmibuepCgRKDtPyTS0e557L9vMpPYZYvhsV
CmW0kcR7ME2mWybv1HdDjRF7pbct+mvBqllc7JdBuDaqGjIF46Evpk57H7LGDA00
GtQ7t2inb8meSwPS9EKtubYALXtVMQmCfIvtjRASZnBuNseN7RIOwqIgz3mZ+htn
MTi+0Z62LpDKRumR/NELeebvDyrd4r0EtIQ/cNbt4GFzvhqlzgCq7AdStzzesX1W
2R6XvHx1k2QU66D4DHoDYbzWwgn4RUiVlRFG22g78xQ1c7bS2RuMM20RzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWodGty/1TsLTyaBei5dFcrjq72MB8GA1UdIwQY
MBaAFDn4c805OSA8d4qOqvFoPpRkrDQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMt
NGU2NTViNWI2NDI3LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMtNGU2NTViNWI2NDI3
LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEiAOdEM
MJ9Z7++FWkk43PIBX0eIJNJzGqM0bm8pp8JOi9vrZgowCWLuhgW6ZMlLT7CJZxD0
elseASsHY9QNAxeZHsjwV+zLCKVSu0ybW43VfIFDlZVh8h00p8ae2tQgvs+LBaVJ
lOqpyLq/dwqqWVDkYR82Jeb1Q+UEB7+1TNXgfE6vYU/kKzXxG1R7SKlQc6PcjMTa
VDvqgyXFxOSz/D+ZW1jwAWSL9agtT5rfgIda7OdfMDYKZfXp+6D/YNEQ9Mr98g5y
kUu3nxAg5OiCafKs/0NIGVMWV+xsob0JpUjX3M4cJ/7itHYRzPSHahoER8GtaO8s
eGA9IXmuuiC2kQ==
-----END CERTIFICATE-----
Generated at Thu Feb 26 14:15:21 2026 by rpki-client