Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: defPswnhHgrGGktGHbKRgWNVO+NajTX3UPgpuJ30AWg=
Subject key identifier: 7E:7B:9C:F2:CD:4D:57:A5:CC:5C:5E:4C:74:C7:2D:81:26:FA:9A:16
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019F91DA4B6A9480D7284F0E07920B99D7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 0544
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: mhJs52zV1s9WAckAHIvq6pS0ku+rThm0zbgeEYrb3n8=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4b:6a:94:80:d7:28:4f:0e:07:92:0b:99:d7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=7e7b9cf2cd4d57a5cc5c5e4c74c72d8126fa9a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:e4:e1:dc:0d:05:2c:fd:38:3e:0d:bf:57:
82:6f:62:81:25:23:46:1b:34:c1:d9:a7:e3:99:65:
70:41:16:9f:f1:3d:ac:de:87:a0:d9:92:f0:8e:d3:
64:5e:22:23:ab:22:fb:f3:45:c1:cb:b0:39:2e:10:
74:ae:e3:87:4c:1a:5e:38:26:dd:52:ce:e3:22:55:
6f:b3:5d:fa:40:1d:ff:29:86:43:0a:c5:33:d4:04:
7e:67:d0:78:f0:13:3b:4a:fa:04:98:dc:ba:f0:0f:
c1:97:08:bd:a3:cf:13:5e:10:24:06:54:de:e4:e7:
d4:b4:75:f0:53:ce:dd:f3:fe:5c:46:d7:4e:3b:a8:
bd:82:a2:fc:53:82:94:e8:bf:e4:96:85:86:37:d7:
3c:8d:77:a6:05:43:26:39:04:69:99:c7:f3:39:55:
f6:81:0a:1f:c2:0d:83:20:2e:6b:b4:f3:ce:f2:29:
66:fd:05:7f:cd:70:d4:1f:b3:62:30:1c:03:4b:f1:
ed:74:1b:2c:62:b6:5f:ca:ce:3a:88:2f:ad:a8:c8:
2e:6b:e9:40:73:11:08:a9:ef:07:e9:b2:f3:23:50:
13:3f:3e:51:97:a1:f3:fb:15:80:40:f6:da:e5:40:
2a:8e:be:2b:e2:e0:cd:0e:b8:4e:59:b7:2c:73:8b:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:9C:F2:CD:4D:57:A5:CC:5C:5E:4C:74:C7:2D:81:26:FA:9A:16
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:ab:2a:30:b7:c7:da:0c:5f:e6:75:ea:51:43:79:1d:d2:
d9:a1:47:cc:17:29:7e:55:f5:06:f8:11:1c:2c:3f:ac:f9:82:
5e:7e:f0:37:57:86:8a:23:db:a9:ba:40:40:e0:c4:e6:a9:f1:
cc:32:a9:66:4e:35:8d:b1:3c:1e:08:7c:66:d8:7b:cf:c3:37:
9b:ee:da:7e:5b:af:1a:b3:3f:c6:81:30:c3:b7:73:95:8b:d5:
dc:0d:76:5b:0b:37:7e:e6:44:97:ff:07:43:8d:61:99:f9:de:
48:4f:30:60:34:a7:e5:33:b3:51:f9:97:ba:e7:5c:5c:05:2c:
cc:42:f4:78:22:f0:f5:84:ad:0c:9e:4a:4d:f9:b5:77:d2:99:
a7:c7:6a:8a:15:46:2d:4e:fc:b7:97:0a:58:e7:e3:55:1c:7c:
e1:1c:ec:d7:a9:0d:62:5d:ec:bd:a7:a0:98:cd:60:5a:b5:1b:
a7:87:6f:08:e4:ac:48:73:0a:fe:71:d8:5b:eb:d7:77:9d:3e:
72:f3:73:ec:a0:42:1d:e9:e9:57:66:1c:58:ab:a4:6f:3d:a2:
b8:46:82:76:43:1b:df:72:81:4c:99:eb:ca:b2:9c:e9:d1:a9:
78:de:fc:cd:4a:0e:29:89:53:1f:83:a6:28:31:c1:85:41:da:
9b:34:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:06 2026 by rpki-client