Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: BxpEycvWJfqDtRfDiwMYb7uujc9Kyq77keDn9rqupZc=
Subject key identifier: 2B:C9:D1:BB:09:A7:D9:52:F7:B0:FF:1D:8A:E9:3C:63:16:D6:B2:FD
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 01A13E94FB928441C3697F41BAD7FEE7141E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 0622
Signing time: Thu 15 Oct 2026 08:01:53 +0000
Manifest this update: Thu 15 Oct 2026 08:01:53 +0000
Manifest next update: Fri 16 Oct 2026 08:01:53 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: 94YSdNfDnz+KCoc9dujleNz5MUBXCIr/KQ0Dbw7N+g8=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:fb:92:84:41:c3:69:7f:41:ba:d7:fe:e7:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Oct 15 08:01:53 2026 GMT
Not After : Oct 16 08:01:53 2026 GMT
Subject: CN=2bc9d1bb09a7d952f7b0ff1d8ae93c6316d6b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:a5:6b:d9:3a:47:c8:27:6f:97:17:10:ea:
79:d0:c6:f7:ca:76:52:df:78:ca:a7:92:f2:5d:60:
83:87:c7:59:22:a6:da:2b:83:fb:07:43:75:02:7d:
15:11:99:75:38:19:8a:dc:15:73:61:e1:60:ea:f3:
e9:bb:e3:8b:dd:93:84:9b:57:aa:b6:57:f5:e7:c8:
ba:0e:63:4c:8b:0e:56:8b:fe:f3:e7:32:d5:59:bc:
64:bd:cc:d0:74:0e:09:01:5a:c3:44:f1:a6:1e:fe:
01:63:14:f0:ce:1d:de:97:50:95:bb:4b:fc:3a:89:
3a:3e:32:99:95:72:de:ff:21:f8:df:aa:75:76:c5:
49:7e:99:ac:4f:43:b4:b7:4d:72:9f:45:b4:78:b9:
11:cf:f9:07:60:d6:09:41:a2:9a:cb:ae:88:9e:30:
83:8f:7b:47:b8:79:d8:37:7e:b5:31:51:2a:17:5a:
ca:4e:f0:9c:b1:8c:e1:f5:fe:5c:8d:af:07:ca:17:
87:6b:cc:9d:70:40:c9:a5:be:a1:bb:a9:e7:c6:d7:
05:a7:62:9b:56:30:f6:31:93:e2:9d:38:4d:c2:70:
c8:e1:aa:63:a9:39:2a:17:67:39:9a:7a:fd:d2:05:
72:96:b6:cc:df:ad:f9:d6:12:ac:70:2c:79:4f:27:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:D1:BB:09:A7:D9:52:F7:B0:FF:1D:8A:E9:3C:63:16:D6:B2:FD
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:22:56:a8:39:71:82:68:dc:7f:ed:9a:00:69:88:82:7f:
36:94:0a:0f:5d:a5:4f:d9:45:26:5f:fc:5b:ea:57:c8:de:a1:
ab:0a:07:80:a9:d0:02:b5:9a:50:40:49:d6:4b:d9:f3:80:57:
ea:0c:91:4b:ed:79:08:cf:70:df:02:87:28:c1:f5:73:f4:d6:
d5:99:ed:b3:a5:90:94:32:db:8e:b6:35:10:97:ad:5e:c6:e2:
76:01:25:50:cf:33:00:77:f1:13:f5:ec:e0:95:7b:44:4a:ba:
4d:dc:94:36:df:67:81:e0:5c:2d:8d:90:49:18:78:9d:88:f7:
ae:26:26:9c:9d:db:d8:e1:0e:ee:40:79:f0:31:22:a3:d8:32:
ce:da:8a:74:01:f4:4e:99:8d:f4:75:ab:db:62:8a:78:a4:b5:
de:4f:be:60:74:59:fb:23:22:11:fa:77:6d:1b:e9:70:7b:f4:
56:be:c3:5e:fc:6d:27:ed:04:82:4d:ad:45:1f:cb:83:ba:4f:
ac:a9:df:d3:2c:6d:18:01:66:e7:53:69:1b:56:8f:3b:fb:bc:
ae:67:1d:36:dc:af:0a:80:39:8a:86:b9:a3:50:66:02:61:9f:
02:52:24:c5:aa:c8:66:6e:a1:d3:49:c8:82:c5:1e:f5:22:a8:
b3:a7:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:56 2026 by rpki-client