Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: CV9Ouj6TCykfHkUALsnzfVWcZSZA3BSJ3FRUZdrBzPI=
Subject key identifier: 4F:4C:8D:75:8E:8E:E7:1E:D6:D5:5C:C2:19:46:E6:D7:94:DA:40:5F
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 019D2961AFCC0D84C3364FC5AC99965C37B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 1524
Signing time: Thu 26 Mar 2026 09:02:40 +0000
Manifest this update: Thu 26 Mar 2026 09:02:40 +0000
Manifest next update: Fri 27 Mar 2026 09:02:40 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: rcdVyQtPy7rY/gU1lVBgJzYURZKJJ1JyQAiyaa9HwJE=)
2: yx9kD1LZqyaIsOvaZePm4Qmu_lc.roa (hash: mBiEmcBw4gmmOpAdt+VnRKLKQFDXrLV0M/SqI72yrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:af:cc:0d:84:c3:36:4f:c5:ac:99:96:5c:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Mar 26 09:02:40 2026 GMT
Not After : Mar 27 09:02:40 2026 GMT
Subject: CN=4f4c8d758e8ee71ed6d55cc21946e6d794da405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:ad:31:7f:95:fa:4c:3a:ca:de:80:35:eb:
ca:2c:e2:06:24:ce:b4:ff:bd:54:9c:58:ea:39:7e:
76:5c:92:41:e1:40:05:fe:68:9c:ea:15:a9:6c:7d:
97:38:66:f4:79:d3:89:64:e2:16:b4:76:57:d8:3e:
c6:2b:d2:77:a3:a5:d0:1c:d0:00:6a:da:fb:71:00:
cd:8f:df:3c:21:0c:10:bb:82:c0:ae:34:4b:db:f9:
c2:ab:61:e0:00:43:50:39:a1:34:3d:4a:94:61:32:
4e:c9:92:38:00:10:28:ce:35:e0:0f:eb:5d:a9:61:
da:21:0c:a4:12:97:72:11:d2:7a:44:be:ee:54:0a:
e2:a7:08:a1:09:93:d7:2e:e8:1a:13:2d:1f:d2:a0:
27:e2:c7:a8:c2:8c:73:a8:c5:7f:b7:32:c3:3d:a0:
32:d3:a9:1e:5d:cc:96:b8:15:e3:1f:53:1f:b0:f3:
61:fc:ff:22:30:c2:86:64:f2:cd:51:ea:6b:da:44:
1f:f6:8b:a6:b7:63:b1:4b:af:1c:3d:1b:51:c7:04:
d5:f4:08:01:cb:6c:2e:f0:b5:84:23:95:e6:f3:b1:
5f:93:91:81:fa:82:c7:07:8f:e7:64:91:23:bf:ae:
2a:36:43:5c:53:a0:11:c8:aa:0c:5d:b2:5d:7b:16:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:8D:75:8E:8E:E7:1E:D6:D5:5C:C2:19:46:E6:D7:94:DA:40:5F
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:ae:a8:49:06:21:70:8d:b8:b2:94:26:df:db:a7:fe:46:
ca:a0:d3:c5:33:4d:04:f1:12:58:fe:3b:7f:65:30:c1:88:49:
bb:40:d1:9d:fa:76:5e:25:cd:b6:e9:f5:4b:13:ce:17:e3:06:
0a:df:80:66:66:38:e3:b1:f0:59:4c:f7:8a:c6:e9:b1:e7:c6:
6d:9d:d5:32:20:a4:08:30:8f:08:67:5f:03:a1:92:ba:e6:31:
30:7d:ea:71:0f:64:5f:8b:69:67:54:c2:31:51:1d:44:09:7f:
85:dd:5b:2a:bd:9d:8d:d0:1a:9f:92:39:cd:39:7e:1e:f5:04:
dd:38:09:a8:56:24:60:f4:20:65:0e:84:21:0f:03:6b:66:08:
27:16:cd:7b:28:a8:5f:b9:ef:a0:5c:4e:3d:60:b9:d1:1e:f9:
12:25:9f:fa:bd:4f:1f:44:0e:fb:4c:d8:61:ce:7c:a7:26:10:
bb:90:79:a9:6a:39:bd:4e:62:b2:df:34:c9:e1:b8:52:39:dc:
ce:0c:69:20:98:eb:e5:e0:b3:48:8f:1b:39:1c:85:31:89:60:
fe:3e:e1:4f:80:c5:8f:d7:69:bc:c5:0f:66:55:43:eb:36:dd:
60:e2:c2:d0:ce:d7:c5:b5:d1:6c:71:9f:2c:ac:e6:8f:9b:f1:
0e:2e:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:13 2026 by rpki-client