Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: jGu3Hmm6Jf33hGf5uSKH7wI/Zgns1cuXrZWHfw/g1Oc=
Subject key identifier: DE:C6:B9:11:3A:CD:43:28:5B:DA:6F:39:BD:FD:C7:3F:7E:F6:A0:9D
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 019D3AC18AF309BAA712D58C1395DBEA81F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 18:00:55 +0000
Manifest this update: Sun 29 Mar 2026 18:00:55 +0000
Manifest next update: Mon 30 Mar 2026 18:00:55 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: G8Kunkf1DhAqfBMdzLTOZZEbtDIKxvv9iuhZSWrY/As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:8a:f3:09:ba:a7:12:d5:8c:13:95:db:ea:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Mar 29 18:00:55 2026 GMT
Not After : Mar 30 18:00:55 2026 GMT
Subject: CN=dec6b9113acd43285bda6f39bdfdc73f7ef6a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:cc:51:59:88:b1:7d:93:8a:22:a6:84:79:
3f:82:fb:5e:3f:76:4a:87:b2:11:0f:29:28:33:82:
a2:12:11:0a:1c:1a:de:58:9a:b7:7f:db:d2:69:c9:
71:de:15:7c:9d:b6:79:91:9e:c0:8f:92:31:31:f3:
39:78:6f:21:29:e9:ba:bc:5b:ef:12:9a:af:5c:eb:
03:45:fd:a1:f5:68:b6:79:85:c9:d5:62:b0:a8:3e:
eb:65:62:b0:ca:7c:ed:69:70:ba:72:c3:19:42:e9:
be:6a:c0:b0:c8:5b:09:8e:8e:58:01:96:e6:fa:6d:
e3:15:ce:d2:b9:a0:5c:50:e5:78:39:e5:85:27:da:
1e:b2:e1:63:6e:8e:e3:45:0b:5d:ec:d8:33:a8:16:
64:21:bc:c6:1e:b2:39:74:c5:da:54:f4:5e:74:b9:
96:9e:16:a2:4e:19:cf:7b:93:59:92:3b:ea:52:48:
8d:5b:93:b8:2f:89:be:e5:6f:22:b4:3b:fe:6b:bb:
b1:fd:ee:59:01:ed:87:a7:99:72:44:09:33:4e:16:
2f:7d:95:36:be:90:86:44:52:eb:fb:45:67:95:83:
90:67:0a:7a:6e:b1:5c:75:d1:6c:7d:b2:0d:28:c8:
95:61:b2:7c:e4:98:e3:8c:ad:b1:e1:c7:3e:de:e9:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:B9:11:3A:CD:43:28:5B:DA:6F:39:BD:FD:C7:3F:7E:F6:A0:9D
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:ba:a1:4a:74:20:b6:82:d1:f3:9f:ca:5c:34:0c:fa:2f:
eb:7a:41:ff:c6:61:0d:bd:86:9b:52:f9:bd:9c:d0:a9:1b:2d:
28:4f:eb:16:84:f4:74:61:86:5e:89:7e:c8:04:93:e1:9f:bb:
ea:31:0d:90:7d:59:65:5c:40:9d:53:21:4a:00:92:62:07:54:
7e:79:cf:6a:7d:a8:89:4e:87:0f:10:3e:58:67:e1:bb:e6:43:
77:e2:a7:e9:be:68:f5:db:59:2d:d3:48:6f:59:c3:88:05:ab:
a5:ed:cb:b2:d4:4f:7a:0b:64:d5:7a:ff:b3:06:dd:a2:b6:19:
8f:c3:3c:29:12:ea:b6:ad:67:5a:4b:99:9c:5d:fb:8e:24:4a:
c2:18:b3:24:bd:7e:40:2f:8c:a2:bc:b4:ee:71:3f:af:70:6f:
04:53:bf:3d:4c:1a:0e:07:67:04:8e:91:ea:a9:a4:3f:f6:be:
b6:55:4b:31:ad:10:2a:1c:f7:f6:36:cf:05:ea:fd:2b:bc:92:
1e:91:7e:5c:84:59:80:0a:c3:b0:a6:23:2c:de:54:e1:17:03:
b7:87:a6:0a:ff:e0:3b:bd:01:af:09:49:96:c0:b1:3e:6f:9d:
7b:cb:dc:92:89:f1:a7:8e:9d:b4:30:64:16:02:74:2f:36:08:
bb:82:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:45 2026 by rpki-client