Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: Xg67TsiDqcXHNwy9RcI1UpJNtUhNZzmomFQx8gShLus=
Subject key identifier: 61:8B:1E:88:CA:BB:87:49:DA:50:84:06:DA:D7:FE:49:CC:64:90:92
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 01A043865775BC78AFA8D0B350CD55F84D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 05A0
Signing time: Thu 27 Aug 2026 14:01:12 +0000
Manifest this update: Thu 27 Aug 2026 14:01:12 +0000
Manifest next update: Fri 28 Aug 2026 14:01:12 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: pjaf9jb97/l6W86Obaes2xMzW5UsRWTtqnbMWzKY7cw=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:86:57:75:bc:78:af:a8:d0:b3:50:cd:55:f8:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Aug 27 14:01:12 2026 GMT
Not After : Aug 28 14:01:12 2026 GMT
Subject: CN=618b1e88cabb8749da508406dad7fe49cc649092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:39:ef:a1:d5:86:70:01:cc:25:fe:c1:37:
0e:2a:32:2b:9b:fb:03:a1:7e:0f:ec:d7:15:13:aa:
ab:5a:4f:bd:a3:0d:ab:29:38:7f:57:da:04:f4:e4:
b0:e4:b0:7d:37:f8:a0:7c:6b:66:c8:51:2e:30:f7:
e0:66:44:41:68:de:74:93:2b:59:83:4e:1b:4f:8b:
71:78:70:05:ea:19:23:66:87:04:14:35:8f:89:f1:
4a:69:da:09:58:2a:4e:62:a7:4d:4e:f2:f2:e9:70:
f2:0b:19:6d:8d:18:a7:da:ae:2f:30:00:4e:9d:ed:
89:3a:8e:15:5f:5d:7f:43:2f:df:1e:8d:eb:eb:00:
bb:75:73:eb:e1:80:f0:cd:bc:34:4c:14:8a:21:86:
1b:6d:78:b5:fc:d2:9e:51:3d:8e:40:21:f1:9c:ba:
f2:f6:f6:73:9f:b5:ee:95:3e:12:91:fc:ca:9e:5d:
cf:de:09:b6:a3:c4:86:3d:88:58:b3:28:0e:41:b2:
8e:36:76:0e:b2:70:8c:81:0a:8f:47:23:95:a1:9b:
27:a6:0f:09:f2:4c:4f:c0:a3:cd:c0:92:cf:8d:04:
b6:01:8b:5d:0e:7a:d2:cf:84:52:9e:c6:08:34:67:
29:cd:4c:81:41:0c:a0:f4:e4:c4:07:a1:8e:c2:62:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:1E:88:CA:BB:87:49:DA:50:84:06:DA:D7:FE:49:CC:64:90:92
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cf:27:c2:18:a4:35:6d:cd:91:21:5e:53:77:04:88:92:b1:
78:31:19:9b:be:4e:1e:cd:cd:53:0a:d1:de:c4:1c:83:f7:6e:
bd:66:fa:44:ca:d1:13:10:0d:34:41:31:6f:0a:c8:51:e7:4c:
5e:a5:54:c3:e1:c6:00:e3:ce:8b:00:dc:c5:02:11:fb:1d:2e:
17:3c:42:20:f6:9b:56:26:18:7e:4b:f5:09:75:7d:81:33:6e:
43:6d:20:02:df:cb:df:75:83:61:61:9a:8f:b4:fb:6b:fd:cb:
cc:cd:67:51:97:d8:d5:0c:4d:77:86:07:ce:83:1e:c8:1b:90:
17:47:36:7a:31:96:0e:65:fb:82:4b:de:a5:4e:a2:96:8d:2e:
36:f2:2d:12:8c:ba:56:60:eb:6f:e5:c5:37:ad:bb:4d:56:de:
b6:6d:02:a9:ba:af:28:c7:e0:11:39:4a:11:f2:49:75:01:ca:
f7:9c:fd:53:29:9f:ea:49:6d:aa:01:20:56:4c:24:79:cb:5a:
9f:8e:be:b4:a8:76:18:f1:92:28:58:92:0a:59:df:cc:47:8b:
ea:67:48:9c:b0:7f:17:32:06:10:69:e9:18:fb:ff:cd:0b:3f:
af:44:ad:0b:d6:c4:e6:61:87:b0:47:87:56:4d:fb:90:46:4f:
d9:de:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:02 2026 by rpki-client