Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: Uiu+CMN3smncbkqJXLk462CmSR4yGiVgzTjtmu18iDw=
Subject key identifier: 04:BE:95:18:A6:5F:88:47:0E:C5:A5:25:29:23:44:3F:60:F1:6C:D4
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01A1084A56C049F2E3A15413687416596D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 197D
Signing time: Sun 04 Oct 2026 19:00:51 +0000
Manifest this update: Sun 04 Oct 2026 19:00:51 +0000
Manifest next update: Mon 05 Oct 2026 19:00:51 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: FT/CXaivplDhcRGnmz6XvlG7zjPdWugPY47m497TvGc=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:56:c0:49:f2:e3:a1:54:13:68:74:16:59:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Oct 4 19:00:51 2026 GMT
Not After : Oct 5 19:00:51 2026 GMT
Subject: CN=04be9518a65f88470ec5a5252923443f60f16cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:a1:3c:62:46:70:90:fe:91:17:dc:b9:f0:
9c:c3:20:b8:e6:e3:25:a0:f1:72:1a:25:38:f1:56:
78:a0:b2:4d:2b:19:1e:7c:3e:6f:be:35:5d:37:63:
e4:71:22:7a:00:38:5a:a0:5f:40:80:a4:65:e8:a9:
7f:29:2d:90:28:f0:e5:53:dd:f1:bb:f4:ea:b8:0e:
4c:bb:5d:74:bf:65:50:4d:cd:94:61:27:c7:9c:6f:
76:1e:ff:c6:93:48:29:ea:3d:0f:2a:97:18:ad:57:
6e:76:c9:a5:62:b2:60:41:a0:f8:e9:48:8b:14:a0:
e0:28:21:6a:26:0b:3b:1a:90:01:ae:01:b4:3e:4e:
46:49:5d:e1:08:c9:d3:2b:85:1d:0d:21:ce:30:e2:
51:c5:c2:d8:68:5f:df:d6:94:c2:a1:45:b8:4f:69:
5a:fa:6c:86:ca:63:03:dd:ea:46:35:8e:14:15:b4:
08:95:c1:bf:c6:3a:c4:09:f5:a7:60:16:34:3b:86:
60:da:fb:69:89:a9:71:f3:4a:91:c6:93:e7:6d:82:
f0:42:aa:c5:61:f8:ef:b8:56:75:4f:d5:d7:90:bc:
e1:df:05:3e:3b:b3:2c:b6:03:41:1e:bf:72:b9:b9:
25:68:b8:b2:a7:20:4a:d3:4a:54:36:e2:4a:02:8b:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:95:18:A6:5F:88:47:0E:C5:A5:25:29:23:44:3F:60:F1:6C:D4
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a6:3f:f6:fa:47:e2:8f:68:76:e0:2c:e5:b1:99:e9:97:ad:
0a:ce:25:c8:72:fd:87:72:3f:f4:95:dc:5b:79:fb:a0:87:59:
0a:92:be:8f:aa:39:15:28:af:4f:50:30:f7:1a:64:64:6f:66:
ac:b2:03:d0:3f:db:54:85:1e:64:d7:15:95:d1:c7:56:ba:5f:
eb:93:72:4f:ee:02:31:1d:15:43:7e:88:a6:60:8c:7d:12:4b:
0b:2c:c1:c8:70:54:76:ab:aa:90:ac:b6:e5:42:ae:d6:ae:d5:
dd:41:85:b8:38:b7:c0:81:d9:ff:fa:8b:a5:42:08:c1:01:11:
1e:72:7b:d0:33:27:57:55:de:32:5c:77:3d:5e:98:e9:b6:49:
83:fd:0f:60:39:a9:57:8f:2d:ce:0a:d5:36:ef:05:30:85:d9:
94:e9:9d:be:2d:38:7b:9a:05:ab:c2:71:f6:e2:82:42:7d:5a:
c6:fa:c8:f5:9c:8d:40:e9:77:54:9b:3c:2e:5e:37:a3:54:60:
80:24:ba:43:28:9b:a0:ea:75:d9:f7:60:e0:21:61:b4:47:eb:
c8:f9:ad:8c:1d:8b:3b:1a:ac:cb:be:f0:ff:5b:eb:d1:0e:03:
2f:be:28:80:aa:b5:0d:60:3b:4c:9f:10:0a:0f:97:ca:20:63:
4a:fc:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:01 2026 by rpki-client