Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: HYoGunRHSbmlXxc419zynN4A9Uxk52CBeBi0b18Eq9s=
Subject key identifier: 52:B4:AC:D2:DA:C6:7A:DA:90:92:B6:D4:80:81:28:8C:16:27:3F:76
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 019EB8EA28BA9F07F831ECE44B2713C5DCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 39
Signing time: Thu 11 Jun 2026 23:00:14 +0000
Manifest this update: Thu 11 Jun 2026 23:00:14 +0000
Manifest next update: Fri 12 Jun 2026 23:00:14 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: wenhiDAAL7Jnakdf4yWthAI32nGVAIlrg86YCJibbEo=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:28:ba:9f:07:f8:31:ec:e4:4b:27:13:c5:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Jun 11 23:00:14 2026 GMT
Not After : Jun 12 23:00:14 2026 GMT
Subject: CN=52b4acd2dac67ada9092b6d48081288c16273f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:68:3c:45:89:f6:55:01:4f:06:83:06:b7:
56:59:87:97:03:99:8c:bd:89:4a:95:7a:39:6e:26:
af:eb:d0:aa:92:39:59:0f:4c:0b:aa:9f:f2:5c:9b:
b2:9c:ee:24:36:8a:c6:65:48:50:37:17:e7:a9:fd:
ab:b7:3c:aa:20:89:e8:f5:56:13:6c:1f:40:42:ee:
37:8d:f0:2f:b5:3d:3a:e7:45:06:ff:a9:8d:00:41:
9d:aa:87:63:73:0e:df:ae:5f:b7:01:5e:f0:74:03:
90:46:64:75:ef:fb:c6:30:7f:ff:01:b8:d1:d9:f5:
fe:92:8b:1e:28:de:ac:f0:6a:1d:1b:58:25:04:3e:
63:22:55:55:86:bf:43:f5:d6:6e:26:90:60:14:ce:
98:bd:9c:28:ff:c1:e5:aa:c8:50:ce:6e:66:df:90:
f3:ba:1c:8a:5f:55:af:28:2f:67:51:b5:6a:0f:6e:
29:96:a6:49:45:71:5b:80:bf:bb:94:72:d4:ba:0e:
e4:bf:d5:23:af:27:6a:9f:47:64:c4:d4:a3:74:da:
22:20:be:a1:da:03:d5:3e:a4:ed:ec:6c:37:ae:33:
3e:c2:8c:d5:53:0a:04:a6:8c:42:52:49:e2:56:48:
12:0b:a2:23:45:8b:c6:79:f5:d1:39:86:b1:66:b1:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:AC:D2:DA:C6:7A:DA:90:92:B6:D4:80:81:28:8C:16:27:3F:76
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:21:64:2e:74:eb:26:1b:0f:cc:d5:00:a1:ba:91:ab:21:
68:83:3e:f9:c3:ae:4d:d6:81:3b:e2:cf:96:0d:a5:64:e8:74:
d2:84:55:88:ae:4d:89:2f:33:0e:e1:54:14:25:fc:8c:39:dc:
14:c2:b6:77:4b:40:85:36:df:5c:af:00:ca:04:f3:3e:39:a3:
2c:7d:3e:ec:30:6f:f3:7f:20:a6:9b:43:70:44:a8:d8:c2:b2:
c6:05:28:4e:b1:e1:39:52:50:da:48:89:09:95:a4:96:c6:09:
1b:ee:44:91:3a:3a:68:5b:bf:fb:f7:7a:aa:f4:ae:40:7e:e2:
2c:f0:ba:10:00:5f:c0:20:86:3d:4f:b1:8e:02:b4:99:a7:f9:
c3:e9:dc:ee:59:f7:1d:6a:b9:b1:6e:a3:1a:14:2f:15:30:f2:
5c:7a:42:47:a6:83:71:09:0a:62:13:70:18:78:32:a3:05:a3:
b4:87:db:e0:63:68:4b:89:b2:2f:f6:13:d9:fd:9c:38:3d:dc:
4b:f4:41:7e:9c:cd:fb:5a:bb:e5:c8:71:c8:4e:d5:c5:f0:76:
35:59:26:60:40:da:f2:ec:86:4d:a9:27:eb:16:5c:fb:8c:c5:
1e:f6:a1:e2:84:ba:42:85:dd:9c:ea:76:bb:78:ce:02:2c:57:
71:9b:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:38 2026 by rpki-client