Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: Y7cAC/fmfyS2PRM0LrW4Cg+gKVTrlFBGBqdGOtKuHRQ=
Subject key identifier: 5B:69:B9:FA:C8:25:6F:8F:0C:F1:46:9B:C3:FC:B3:18:A3:85:F0:13
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019F59D9A1601B566E431220282863EC0BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 0527
Signing time: Mon 13 Jul 2026 05:01:02 +0000
Manifest this update: Mon 13 Jul 2026 05:01:02 +0000
Manifest next update: Tue 14 Jul 2026 05:01:02 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: dbG+rmtlK2EWxqGpUNXjsdQZfbI5QhLc9qXdf5ywpIA=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:d9:a1:60:1b:56:6e:43:12:20:28:28:63:ec:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Jul 13 05:01:02 2026 GMT
Not After : Jul 14 05:01:02 2026 GMT
Subject: CN=5b69b9fac8256f8f0cf1469bc3fcb318a385f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:f0:3b:7b:2d:e7:46:bd:fa:fe:bc:95:b8:
49:80:7a:1d:3f:c1:6d:00:98:b0:7c:22:10:f1:78:
b2:85:a2:af:d7:13:38:29:bb:81:2f:89:ef:1c:cb:
e1:b4:16:64:35:47:b2:d7:2b:44:05:5b:8d:7c:d3:
37:f9:f0:13:99:bb:ed:3d:fc:66:1d:b6:ee:08:58:
14:35:c7:02:08:7b:c1:1d:dd:99:81:6b:40:7f:8b:
e4:f8:8b:7b:af:a7:c0:ce:3c:8a:4e:b2:d4:52:7e:
82:18:ec:ec:e2:e7:53:03:bd:8d:01:8d:05:91:db:
73:0c:58:1a:c1:22:e3:bf:b7:d2:fd:10:a3:fd:78:
3e:34:93:97:0c:42:9d:5e:e9:15:f7:1e:5f:31:c8:
41:7b:a7:cb:84:57:0e:33:f7:a1:3f:26:d3:f5:ee:
1d:41:14:46:88:b2:75:98:3d:21:a6:96:32:58:18:
b6:23:dd:a9:5e:40:ef:94:c5:ba:1a:89:e7:a5:fc:
03:63:e2:c6:91:3c:0e:d0:c2:10:a6:f0:fc:1e:2c:
6b:60:c8:cd:56:26:54:51:dd:30:13:8e:83:cf:8e:
47:3b:81:b0:1a:6f:23:d6:87:b5:af:c4:49:7d:e6:
80:79:f9:11:1a:eb:d7:70:c0:c8:3e:0a:b3:e4:05:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:B9:FA:C8:25:6F:8F:0C:F1:46:9B:C3:FC:B3:18:A3:85:F0:13
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:60:6d:4a:46:0a:21:92:03:d1:db:0a:20:76:7f:72:45:
05:88:22:22:cb:a1:51:09:0d:ec:b5:ce:ad:b1:94:ef:78:bc:
fc:35:56:d8:87:00:37:05:f4:68:1d:34:bd:35:9d:d9:b5:c6:
73:b1:92:ef:05:f8:0c:98:b4:15:02:64:35:6c:7c:04:1e:18:
f2:84:1a:cb:d4:e0:98:c5:5d:b8:cf:6f:ba:2d:92:81:c3:65:
c7:8e:9b:8b:19:76:75:a6:62:cc:14:00:ea:fb:55:b1:7a:25:
7d:8c:2f:1a:ab:cd:9f:0c:6a:35:33:37:36:f3:48:32:ce:48:
0b:e5:f3:d1:2f:c2:8e:0c:4b:2e:08:03:77:e3:3f:68:c6:8c:
79:c6:11:d2:85:9b:8c:21:ca:32:db:93:20:c2:1b:b1:2b:1c:
a6:57:2f:f5:30:28:22:6c:f9:89:b5:05:ac:9d:de:68:d1:85:
56:8d:bd:9b:c1:99:b8:bd:73:89:03:21:3a:64:d9:41:78:98:
f1:25:99:5f:01:dd:1d:ec:81:78:e7:8f:ad:71:b4:91:37:4a:
86:8f:8a:15:7c:e5:f8:73:a4:bd:db:d1:6c:b4:cf:f2:73:14:
c6:a4:5a:98:d6:ae:63:7a:7a:c6:5b:d8:0f:e9:08:bc:74:7c:
12:c4:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:50:04 2026 by rpki-client