Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: m3PTZt/pAB/NQW69N1Z5qs4UKTromXKGcCOQPaw2aNg=
Subject key identifier: F7:70:54:1A:16:B8:AC:CC:01:27:96:34:A8:EE:50:79:99:9F:52:80
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 01A0D64B8869E1956912BA99351CE26451DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 05EC
Signing time: Fri 25 Sep 2026 02:01:09 +0000
Manifest this update: Fri 25 Sep 2026 02:01:09 +0000
Manifest next update: Sat 26 Sep 2026 02:01:09 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: YR7UIpXCIXTZI5ZoCwIZv00jtZPYwSlO+yZ2bAdbFU8=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:88:69:e1:95:69:12:ba:99:35:1c:e2:64:51:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Sep 25 02:01:09 2026 GMT
Not After : Sep 26 02:01:09 2026 GMT
Subject: CN=f770541a16b8accc01279634a8ee5079999f5280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:fe:94:54:ba:c3:67:00:33:fb:53:33:63:
c1:e5:e9:bc:9f:5e:6b:43:14:d8:2f:72:92:a7:d9:
2e:6a:18:d1:e5:6b:d8:b0:af:e5:06:8a:59:cb:2a:
b0:b9:d2:0d:6f:13:b9:07:8d:23:91:4a:43:81:26:
15:e1:85:de:cf:07:85:e8:88:8b:3a:c1:cf:8d:4e:
33:dd:bc:45:d6:11:cd:ba:4f:ba:ea:56:a9:47:e7:
c4:54:e0:ce:44:79:88:8a:ad:7f:fd:63:95:bb:a2:
3e:41:d2:f7:53:15:66:08:d5:c0:2c:02:f5:e8:9f:
74:4b:8d:70:2d:86:be:a2:07:da:3c:29:eb:f4:29:
a0:f1:4e:ae:f4:72:7d:16:39:e8:84:1a:97:48:03:
8d:e4:9f:e5:90:64:90:64:a8:fc:04:49:fe:bf:ec:
0e:47:fc:bc:5d:29:c7:29:b2:00:67:cc:d8:98:76:
aa:87:68:e7:0d:1c:7e:7c:36:b5:7c:65:c6:77:0d:
2c:b6:df:92:4a:d4:a9:6c:8e:37:80:67:a3:53:99:
0e:09:64:07:d0:0e:8e:90:25:c3:b4:22:be:58:ff:
33:af:5b:4a:a5:88:a7:8f:17:d0:c0:82:d4:c0:7c:
ac:05:d3:17:50:df:96:cb:81:57:ba:a5:25:7c:46:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:54:1A:16:B8:AC:CC:01:27:96:34:A8:EE:50:79:99:9F:52:80
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:c1:36:91:f0:05:40:3e:32:4d:7f:ab:94:b4:bf:14:16:
e4:34:a1:8e:fd:8a:6b:af:06:b4:7a:6f:0c:2f:bd:55:f0:8c:
98:7a:98:e4:71:ef:d5:c8:b5:98:7d:40:98:a5:c0:6a:f4:8f:
c4:1b:d4:ba:8f:09:90:6d:73:4f:65:c3:9a:f2:da:ea:27:dc:
36:0c:c1:ce:10:ca:ef:fa:d3:47:73:c9:af:19:df:12:93:db:
61:4e:d6:82:de:a8:19:e7:80:b0:cb:41:25:8d:74:a0:d8:fc:
93:84:60:18:00:67:38:ec:33:7d:6e:c7:e4:ce:0d:11:d7:39:
1b:e2:e6:36:0e:61:1d:88:01:05:a5:72:24:7c:79:59:e9:d6:
d1:c6:99:97:62:e2:e9:e9:dc:c6:41:a9:59:b1:73:8a:8d:f3:
f8:31:cb:53:9c:fc:0d:b6:c7:41:32:94:c7:04:7d:83:64:d5:
1c:6b:0a:7f:ff:bc:92:eb:ad:ae:13:6b:bc:50:dd:46:b2:92:
dc:d6:0f:61:8a:e7:1a:08:ac:78:7c:a2:76:b9:9e:82:27:d1:
36:46:e0:5a:44:5c:fd:2b:1f:a2:ea:c6:66:0e:5f:7a:f5:5b:
aa:db:72:d1:08:0b:fb:bc:12:bf:a8:e0:a3:b5:e6:76:3a:b4:
89:35:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:51:41 2026 by rpki-client