Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: sVM4Btjx9mPxCBg1/PXP3T3/BLDlU327Ux0L5szXiT0=
Subject key identifier: 0C:71:BF:00:25:5A:72:6E:88:F8:F6:37:37:D9:CE:73:AE:85:CE:75
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01A06DCBB1602879A7C5514E6209F979741B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 192D
Signing time: Fri 04 Sep 2026 19:01:00 +0000
Manifest this update: Fri 04 Sep 2026 19:01:00 +0000
Manifest next update: Sat 05 Sep 2026 19:01:00 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: ho6C4nyuOSz+3NhPtuKDcOfGqlVjq5ztDYRdbCkCBxg=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:b1:60:28:79:a7:c5:51:4e:62:09:f9:79:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Sep 4 19:01:00 2026 GMT
Not After : Sep 5 19:01:00 2026 GMT
Subject: CN=0c71bf00255a726e88f8f63737d9ce73ae85ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:6b:03:7b:11:5c:42:1d:90:99:a7:45:59:
46:28:b2:0d:7e:19:d2:2a:3b:87:bb:3a:2e:83:c5:
71:6f:2d:03:a8:3a:2d:72:e8:c6:6c:51:f9:a8:8a:
e9:66:b4:42:c1:06:d6:09:5a:8b:19:62:d0:c3:dc:
fb:7c:9f:db:19:d9:3d:b1:7a:c3:8d:30:a0:16:3c:
a4:cd:53:1a:6b:4b:6f:c8:77:86:64:78:28:52:f8:
de:41:fa:ea:5e:89:d8:46:0e:1f:5b:3a:94:11:c6:
41:03:c7:7f:0a:72:2c:de:c4:06:fe:3e:06:f1:fa:
af:21:1e:af:fe:9d:4b:11:f4:e6:fe:83:2e:ed:47:
7f:33:69:33:19:ce:3e:43:9b:fe:da:89:54:a6:e3:
1a:71:39:b6:be:54:5e:ea:c8:97:82:20:26:50:62:
f9:30:f9:c4:93:e7:00:b4:4d:bc:9d:bf:43:1c:b6:
08:7e:b3:39:ba:d6:08:32:28:fa:98:4b:58:3f:02:
09:29:77:58:42:eb:ce:bc:e7:fb:91:d0:fa:0b:32:
b3:95:ba:62:84:7a:82:36:e4:41:cb:23:72:cc:b1:
01:d8:a7:d7:03:13:c7:bf:d8:c8:67:49:93:9a:17:
81:d2:21:ff:67:f8:76:d7:d0:7d:3f:4c:98:ee:80:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:71:BF:00:25:5A:72:6E:88:F8:F6:37:37:D9:CE:73:AE:85:CE:75
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:70:08:f2:bf:65:82:eb:67:50:9a:b9:93:b5:3b:f9:57:61:
c5:19:ed:a1:65:5c:b2:55:df:d7:68:19:cd:90:00:3b:79:b6:
58:fb:0c:1f:a0:dd:a5:1e:7c:bf:86:98:7f:27:20:2c:56:12:
bd:11:3a:ed:20:08:cc:d8:0e:16:7e:ee:26:82:b7:6a:ed:c7:
67:24:17:41:88:93:77:61:b4:10:f0:02:5c:30:5e:27:29:c5:
05:8e:19:bb:0a:9c:ff:34:42:0e:64:59:fc:85:5d:09:2d:28:
d2:c8:6c:84:a6:38:22:3d:4b:f3:4c:30:01:18:0a:4f:37:7d:
e3:69:42:4f:2c:55:3f:50:b3:31:7d:ca:68:6e:23:2d:59:81:
55:fc:de:ae:09:58:a2:46:67:86:2b:86:0d:7e:cc:61:f8:28:
ed:90:1d:80:1b:f7:97:1f:78:73:ac:8a:fc:a7:ed:fa:b7:24:
b6:c4:12:76:86:d3:88:8b:35:0a:86:bd:6f:a5:d9:cb:58:11:
22:05:5d:92:5d:c9:51:dc:84:97:b3:54:af:33:b2:61:a2:f8:
16:7e:ea:91:f4:27:67:42:76:d4:b0:82:19:66:9e:b3:d0:84:
a9:7c:43:45:4d:c4:17:5d:41:e3:2b:c5:2a:06:87:74:e7:81:
e3:52:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:47 2026 by rpki-client