Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
File: OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft (raw, json)
Hash identifier: MIgDg9pbxlkDa9SUAgYtwWO7P3dlMjVuTG0uP7lGsnM=
Subject key identifier: 88:79:19:9D:6D:00:FB:D0:28:C7:A6:75:0B:5F:88:5B:35:81:04:92
Authority key identifier: 39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
Certificate issuer: /CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Certificate serial: 019F5369AB528E0B75B9E8FEAFC629637A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
Manifest number: C3
Signing time: Sat 11 Jul 2026 23:01:01 +0000
Manifest this update: Sat 11 Jul 2026 23:01:01 +0000
Manifest next update: Sun 12 Jul 2026 23:01:01 +0000
Files and hashes: 1: OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl (hash: yOMZ4IigWstF4OFiCdTpj6Wd/OxzruN4eHSu1cAnI44=)
2: c0Vk60kJ7ueTPIokv7qGtH3eTTQ.roa (hash: O+dHMuQMe/fBcOZ5bxLhWVDzmIw1sCX/tFC/j0yj2qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:53:69:ab:52:8e:0b:75:b9:e8:fe:af:c6:29:63:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Validity
Not Before: Jul 11 23:01:01 2026 GMT
Not After : Jul 12 23:01:01 2026 GMT
Subject: CN=8879199d6d00fbd028c7a6750b5f885b35810492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:3d:e9:da:68:cd:a3:7b:b0:dc:7e:ae:9a:
b2:e6:b0:77:99:4c:f6:ae:15:80:ad:36:41:f5:42:
2c:01:9a:10:15:37:93:52:f8:cc:58:55:20:8f:1a:
5f:be:65:aa:26:1a:c0:e2:ea:e5:53:b8:02:18:1a:
e2:1f:5e:e1:d4:ed:63:ea:69:25:5c:22:25:0a:76:
68:5a:c6:15:8e:39:88:f2:13:39:cc:9d:9a:37:d6:
ad:f9:81:eb:72:89:4a:f5:7f:e5:82:05:94:20:8a:
e6:30:f1:4c:f3:f0:e5:0b:ea:90:0d:35:0c:a9:8e:
f7:15:46:ee:de:66:11:81:bf:d1:7d:64:1b:20:cf:
aa:46:11:1c:60:c4:e0:c2:f6:a9:d1:b3:4e:2f:a7:
43:cb:c1:0e:f0:dc:b6:4f:8b:e9:24:0d:2f:e8:df:
81:e7:e9:66:18:f4:f1:b6:7c:a9:8d:51:7d:4d:23:
10:10:59:f3:f0:d2:6e:cf:1c:3d:7c:17:29:55:17:
f3:07:10:85:f7:bd:e6:6a:40:f3:fb:ef:14:44:23:
f7:3d:26:20:10:b8:b2:fb:a8:5f:07:68:9d:0b:10:
23:f7:62:fd:2e:3e:c9:94:4e:5a:58:c5:3d:8c:bf:
df:a3:d5:08:37:29:0c:de:20:03:c4:65:6c:31:77:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:19:9D:6D:00:FB:D0:28:C7:A6:75:0B:5F:88:5B:35:81:04:92
X509v3 Authority Key Identifier:
keyid:39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ad:22:96:a2:46:da:66:28:f5:85:b8:65:5d:f5:e6:82:12:
26:9b:2b:e9:c5:34:61:9e:30:da:0a:ae:f6:a3:b2:e0:12:75:
11:e8:1e:21:56:5a:7d:e0:22:bf:57:37:9e:a8:71:97:c8:a1:
b2:72:8d:de:d2:f5:5c:b9:17:29:5f:f8:08:3b:78:a7:cf:45:
a7:41:73:82:4c:cd:40:1c:8e:be:95:60:44:d3:36:b1:ac:b1:
b6:88:59:eb:1e:68:ee:2e:09:bf:61:7c:ba:43:19:ed:e3:45:
01:2e:b6:5d:b0:13:93:a3:0b:2d:0c:a0:df:cf:f1:b4:19:e1:
cc:eb:94:d3:28:a2:2e:3a:5e:64:d9:f7:38:c8:fc:e2:5b:cb:
a7:32:86:17:2e:c7:c2:b8:73:1f:2f:9f:04:c3:5a:86:e5:1c:
80:1d:cd:ee:8c:2a:8e:09:50:a4:79:53:8a:b9:67:0c:8d:2c:
de:de:50:97:b7:da:f6:df:3f:50:09:46:ac:f3:ba:2f:a1:ea:
1e:5c:5d:af:96:1d:ac:1d:6f:f6:e5:ab:aa:27:b3:57:4b:70:
e2:66:ec:fe:73:48:5e:f9:b1:29:c6:d1:4c:4f:84:55:c2:54:
c5:0e:a7:db:40:98:d1:da:0b:78:be:e5:94:59:4f:ae:aa:89:
82:f6:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 09:05:15 2026 by rpki-client