Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: 8jgtYOmb91osacbfAOSV/Ys6ZqtitoLaEOXF81X1FnQ=
Subject key identifier: 0E:A4:5C:3D:D1:A3:CD:A7:BD:80:0A:91:69:EA:66:69:DE:46:BD:48
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 01A1DCF0703C5A01566A75962FAFC53D7B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 0674
Signing time: Sun 15 Nov 2026 02:01:47 +0000
Manifest this update: Sun 15 Nov 2026 02:01:47 +0000
Manifest next update: Mon 16 Nov 2026 02:01:47 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: +M7WMWmfPJXsqtsy3rOv5u1VVB4KDIF/+mLWTVCYyuU=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:70:3c:5a:01:56:6a:75:96:2f:af:c5:3d:7b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Nov 15 02:01:47 2026 GMT
Not After : Nov 16 02:01:47 2026 GMT
Subject: CN=0ea45c3dd1a3cda7bd800a9169ea6669de46bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:01:7a:94:fb:8d:40:8b:30:c8:43:b4:c0:
24:98:ed:fb:25:dd:09:d0:a8:76:3f:12:d9:bf:0a:
ce:17:17:e4:f5:ff:36:e6:11:ab:fc:df:de:4b:4f:
74:e2:c5:0b:b3:e7:9f:0f:44:2a:d6:f2:fb:09:c9:
86:9d:9d:50:e5:7f:e0:15:70:35:5a:e7:4e:d9:1d:
fa:91:a0:44:a8:3a:42:06:cf:70:b3:7c:ac:52:16:
b8:b6:5f:50:0b:be:8a:e8:12:d8:78:1a:cd:b0:c9:
4f:52:7f:c2:3c:9c:a8:f6:b0:33:35:91:65:48:56:
cd:3e:e2:9a:8a:be:11:68:ab:e3:76:b3:75:3b:00:
f3:26:bd:74:0e:21:a1:d3:b4:dc:ba:a3:d5:44:ce:
22:b3:43:df:cf:f5:23:b7:70:00:9e:00:25:69:3f:
64:32:0b:05:1d:c5:d3:fb:9a:84:c8:48:a5:f3:ff:
3e:38:65:cb:0a:f0:cf:cc:17:24:1b:23:34:de:8b:
ff:25:ed:35:4e:fd:0f:79:f6:c0:4b:86:ca:d2:35:
53:a8:88:5e:58:1b:b8:70:cc:c7:13:f8:dc:b8:c8:
1f:62:0a:01:01:28:9f:33:72:eb:89:a7:3f:12:0d:
10:2f:ba:5c:ce:f8:71:fa:14:32:51:63:6e:b8:38:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:5C:3D:D1:A3:CD:A7:BD:80:0A:91:69:EA:66:69:DE:46:BD:48
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:8d:44:b4:d5:06:39:6c:4a:29:fa:a5:90:7b:df:ee:71:
dd:55:92:1d:79:9c:d3:62:57:58:00:5f:78:aa:f4:04:e3:06:
db:01:73:c8:79:57:4c:4f:10:7c:85:9e:d1:37:7d:19:4e:50:
5a:e1:2e:38:56:14:8a:87:71:6b:33:51:89:ff:11:a4:6d:85:
c7:a9:a7:bb:a2:67:7f:59:2f:19:ab:89:b8:84:c5:8e:12:f6:
3d:c1:99:5c:45:cd:d4:31:3f:6d:18:6b:96:21:06:63:e0:3e:
9e:aa:9a:5b:f2:37:93:33:ff:ab:80:d6:ee:ac:02:7e:87:e2:
e1:42:a7:59:d7:ef:1d:33:5f:4d:59:1e:86:ad:30:89:de:fc:
bf:cc:ab:9b:34:a1:63:f7:76:0b:d5:3f:90:ed:5c:e2:4a:58:
3f:2d:d7:a2:82:4e:e1:7a:94:19:a9:ab:a7:89:3b:fc:f7:3c:
b6:bb:a9:87:78:d5:92:8c:54:85:17:a9:8e:f3:73:b7:2b:2d:
0d:65:f0:87:79:fc:62:02:7e:9c:21:03:18:1d:46:91:e6:9e:
f2:d4:22:55:7d:eb:3e:e9:d5:bb:90:2f:f2:f0:a4:80:5e:8d:
9d:a5:03:91:e7:7d:6e:39:2e:d3:c0:2f:ff:27:65:b9:09:bd:
5d:b5:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:37 2026 by rpki-client