Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: gkNDrYVVOFAy7wb55rUlLYSfiiapTEyzBzAtARcECsE=
Subject key identifier: A5:6D:71:3D:A7:DA:20:AB:80:90:1E:3C:06:48:61:A9:50:55:B4:B9
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01A1800669AA8FEE68A75D5D40CA0FF8D500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 19BB
Signing time: Wed 28 Oct 2026 01:01:06 +0000
Manifest this update: Wed 28 Oct 2026 01:01:06 +0000
Manifest next update: Thu 29 Oct 2026 01:01:06 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: IeZQ0ptxi6UroUOw+eud3yGbC4sT+Hm0NpcmjaN7DBA=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:69:aa:8f:ee:68:a7:5d:5d:40:ca:0f:f8:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Oct 28 01:01:06 2026 GMT
Not After : Oct 29 01:01:06 2026 GMT
Subject: CN=a56d713da7da20ab80901e3c064861a95055b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:d1:92:17:b7:ed:e7:eb:51:9a:4f:db:c2:
a0:be:ba:52:5a:84:82:09:7f:44:9e:68:4f:88:e5:
4b:eb:cd:c5:1c:5e:eb:ea:4b:ba:16:9d:b6:23:03:
6e:78:ef:46:2f:57:68:78:7c:14:de:85:f9:78:87:
8a:1c:b6:5d:b1:7f:db:b7:f5:aa:d4:4f:ff:86:87:
0e:00:c5:4b:0d:f0:15:7f:b9:0a:45:a7:83:1c:54:
2a:e6:ce:7b:ca:08:37:60:db:67:ee:cb:6f:41:f2:
8f:5c:47:d3:d7:5d:6a:29:58:af:e4:f2:3c:5c:ef:
69:96:6a:af:98:e3:7c:77:5e:8f:68:f3:20:e5:b0:
c7:cb:88:ae:9c:cf:a4:dd:f1:2d:22:ab:3c:79:c1:
a7:1c:09:e6:33:46:be:a1:74:50:c7:65:8c:14:b9:
0e:e2:80:f2:84:32:d2:96:51:cd:58:eb:49:07:7f:
0e:33:f3:98:db:77:68:ad:e4:ce:9b:f2:5d:0e:93:
d6:da:08:ab:e5:68:00:1d:60:5e:d6:3c:3d:65:8d:
b9:f0:cb:fc:3a:f2:da:81:cd:b2:f4:8d:39:d6:db:
bc:6e:50:12:7d:97:96:cd:19:26:0b:49:70:8a:e2:
cd:a7:70:5c:4a:89:0a:23:53:d6:e1:79:7a:f7:5b:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:71:3D:A7:DA:20:AB:80:90:1E:3C:06:48:61:A9:50:55:B4:B9
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:a3:e7:de:af:33:9d:11:11:b4:1b:27:7c:d0:95:b9:2d:
17:26:76:b7:08:b9:50:18:f0:fa:bf:9a:24:13:a7:b7:47:cb:
40:4d:b4:00:2f:22:5a:03:72:8b:f3:08:78:d3:e1:9d:84:bd:
ea:43:30:b3:4d:b4:68:fb:e7:7b:c2:a3:15:6c:47:3c:6b:75:
d8:13:3b:71:77:01:76:86:5b:e8:e2:e0:91:cf:04:8d:fe:50:
85:ef:31:aa:28:ad:ae:43:46:9d:84:e0:cc:55:43:4f:b8:29:
05:aa:e3:49:ff:89:36:df:b0:44:bd:fa:11:1b:b3:c8:7c:14:
bf:f5:99:bf:34:3b:8b:c5:3f:9e:af:20:8d:ac:fe:bb:e5:a9:
36:a1:72:7b:d2:bf:3d:db:ee:a8:04:e6:db:29:7e:9f:75:30:
72:99:5a:ef:41:46:99:a7:f4:64:5a:a3:cb:a3:4b:09:fa:20:
bb:2d:af:8d:95:67:d4:cb:ad:d2:fd:e7:f5:d5:3a:4a:af:46:
cb:57:3d:97:14:58:19:00:b0:e9:1c:ef:c7:b6:de:fd:6d:0e:
cb:21:d5:66:c2:6a:3a:8b:a4:d7:65:80:b6:b1:d1:29:2e:ef:
54:7e:05:74:dc:43:dd:38:85:59:03:32:35:ea:bf:91:6a:98:
4b:41:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:53:52 2026 by rpki-client