Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: AWctxp9tuRr+HzGERjEkhvAxpZ1+CI38LII1Ny6jq+c=
Subject key identifier: 91:AA:2A:84:C4:AF:59:2E:72:15:54:19:B5:95:74:EA:AA:15:C2:DF
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 01A0B6BFBDDDC8E1ED5685CD9F886C3109EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 0141
Signing time: Fri 18 Sep 2026 23:00:14 +0000
Manifest this update: Fri 18 Sep 2026 23:00:14 +0000
Manifest next update: Sat 19 Sep 2026 23:00:14 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: IHtdFudYOJA+diq6aExOp87gWBV5ooErK4AjSAHwyrI=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:bf:bd:dd:c8:e1:ed:56:85:cd:9f:88:6c:31:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Sep 18 23:00:14 2026 GMT
Not After : Sep 19 23:00:14 2026 GMT
Subject: CN=91aa2a84c4af592e72155419b59574eaaa15c2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:17:7b:d1:51:a6:6e:f9:5c:be:df:cd:68:f1:
2c:b5:9f:8a:67:82:be:3f:04:03:06:39:ba:09:80:
4f:44:73:7f:24:cb:84:f0:32:86:6f:15:49:72:fa:
fd:78:c7:77:6c:f7:62:28:dd:a7:ea:99:c2:f0:e9:
fb:40:a6:76:20:88:09:e7:3b:e7:fa:88:99:55:6d:
5b:5f:74:e4:33:37:24:9c:4a:05:d3:35:6c:da:36:
4b:b7:34:da:fb:2b:ff:3d:aa:b1:8e:f8:f8:d4:a3:
40:25:a7:a6:01:6e:04:b9:3d:47:fe:42:86:5b:4e:
06:33:9e:67:6a:bc:65:76:82:9d:79:31:50:77:36:
c7:1d:eb:f0:9d:73:38:c0:bd:31:59:cc:2d:b4:03:
1e:3f:39:aa:92:a1:d6:aa:04:d0:e7:0a:90:a2:49:
8b:85:75:e2:61:65:9c:53:08:38:8e:c9:b0:a0:a4:
0f:62:54:35:0c:ba:75:bd:72:a1:16:7d:46:b5:e5:
dd:aa:4d:b5:18:53:9b:5a:a1:2b:81:07:dd:6d:f6:
de:75:fd:77:f9:db:dd:ef:a1:42:a9:ba:95:23:a5:
14:6e:67:e5:1e:a7:8c:6a:09:36:07:44:bc:cb:2c:
57:d6:61:e7:49:04:44:51:42:96:b1:03:80:67:38:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:2A:84:C4:AF:59:2E:72:15:54:19:B5:95:74:EA:AA:15:C2:DF
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:bc:aa:14:a4:84:89:7d:35:8b:ef:ae:6b:d6:af:f1:f2:
59:bc:fd:d4:a1:f2:b8:d8:d8:81:28:18:ea:20:5e:01:fc:f7:
90:17:bb:be:1a:94:7e:04:ef:30:28:e3:48:73:29:f8:85:5a:
eb:ec:1d:5c:56:0d:ef:67:85:81:34:03:7e:4e:5d:a2:77:de:
06:17:b1:19:dd:d8:13:64:5c:ed:82:be:3c:2c:3f:68:c5:68:
a6:17:6e:66:47:0d:b7:71:26:e6:15:cf:cb:04:09:5f:82:ce:
15:9f:11:cf:7a:05:b3:51:16:08:04:1f:6d:75:be:97:ff:82:
4d:74:e7:42:5c:cf:db:67:ba:8a:69:4d:a0:f4:35:b5:5a:a2:
8a:c3:97:60:59:b5:64:02:24:85:cf:02:17:83:78:f0:44:a1:
63:a2:e8:e2:43:6b:65:d0:30:d1:fd:ac:56:56:6c:00:e4:ee:
d9:17:57:71:56:98:45:62:4a:28:22:ff:e6:3b:95:62:ce:ce:
ef:60:ab:88:72:d7:22:59:f5:58:83:bc:de:e1:fd:d9:bb:f8:
0b:73:2f:d2:3e:06:40:b4:08:ad:22:82:11:db:7b:d1:c4:ee:
32:dd:3c:93:7c:87:16:64:ed:52:ae:cf:9d:b0:38:73:75:db:
e2:73:98:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2v73dyOHtVoXNn4hsMQnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTVjYmRmYzY3YjFmNTUwMWJkMjJiYTAzMTk3ODI5MjUz
YzQyNWEwHhcNMjYwOTE4MjMwMDE0WhcNMjYwOTE5MjMwMDE0WjAzMTEwLwYDVQQD
Eyg5MWFhMmE4NGM0YWY1OTJlNzIxNTU0MTliNTk1NzRlYWFhMTVjMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Rd70VGmbvlcvt/NaPEstZ+KZ4K+
PwQDBjm6CYBPRHN/JMuE8DKGbxVJcvr9eMd3bPdiKN2n6pnC8On7QKZ2IIgJ5zvn
+oiZVW1bX3TkMzcknEoF0zVs2jZLtzTa+yv/Paqxjvj41KNAJaemAW4EuT1H/kKG
W04GM55narxldoKdeTFQdzbHHevwnXM4wL0xWcwttAMePzmqkqHWqgTQ5wqQokmL
hXXiYWWcUwg4jsmwoKQPYlQ1DLp1vXKhFn1GteXdqk21GFObWqErgQfdbfbedf13
+dvd76FCqbqVI6UUbmflHqeMagk2B0S8yyxX1mHnSQREUUKWsQOAZzgiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGqKoTEr1kuchVUGbWVdOqqFcLfMB8GA1UdIwQY
MBaAFDhVy9/Gex9VAb0iugMZeCklPEJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNmMxNzQtY2E3Zi00MzVkLWE5YTEt
ZDc2ZmU5ZGYwY2JiLzEvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNmMxNzQtY2E3Zi00MzVkLWE5YTEtZDc2ZmU5ZGYwY2Ji
LzEvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9+8qhSk
hIl9NYvvrmvWr/HyWbz91KHyuNjYgSgY6iBeAfz3kBe7vhqUfgTvMCjjSHMp+IVa
6+wdXFYN72eFgTQDfk5donfeBhexGd3YE2Rc7YK+PCw/aMVophduZkcNt3Em5hXP
ywQJX4LOFZ8Rz3oFs1EWCAQfbXW+l/+CTXTnQlzP22e6imlNoPQ1tVqiisOXYFm1
ZAIkhc8CF4N48EShY6Lo4kNrZdAw0f2sVlZsAOTu2RdXcVaYRWJKKCL/5juVYs7O
72CriHLXIln1WIO83uH92bv4C3Mv0j4GQLQIrSKCEdt70cTuMt08k3yHFmTtUq7P
nbA4c3Xb4nOYFw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:57:06 2026 by rpki-client