Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: YoUQ7BPXX9LTJpa23gPGxp9STV4yPF3ooIfwCL9t+bQ=
Subject key identifier: 3B:67:9B:CC:2E:E0:9B:08:43:E4:55:F7:72:D6:21:9F:BA:EA:87:CD
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 019F939264D4E54CC8995E1B9AF21E065714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 18BC
Signing time: Fri 24 Jul 2026 10:01:12 +0000
Manifest this update: Fri 24 Jul 2026 10:01:12 +0000
Manifest next update: Sat 25 Jul 2026 10:01:12 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: EbmuHl/gWyGAvft0OAfEh4vecU1zHDtEYqGm/5qie2s=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:64:d4:e5:4c:c8:99:5e:1b:9a:f2:1e:06:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jul 24 10:01:12 2026 GMT
Not After : Jul 25 10:01:12 2026 GMT
Subject: CN=3b679bcc2ee09b0843e455f772d6219fbaea87cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:db:10:74:79:c4:31:fd:fe:d3:ee:c8:4f:
d9:10:c3:72:f4:ae:d4:93:41:60:9f:85:f1:21:23:
24:8e:99:4b:f2:90:6e:bb:bd:8c:3e:ad:05:0e:23:
80:13:83:01:37:15:2e:f5:96:a6:bd:f5:cf:59:29:
91:7f:ca:3f:5d:23:ff:ac:33:01:0b:c2:70:4f:c9:
89:ad:7b:23:e8:3b:38:7d:a3:41:fc:64:55:3f:40:
ae:98:33:fc:cd:87:26:c9:4e:73:ad:e7:dc:ef:ab:
4b:0d:ef:fd:1b:cc:22:64:b4:92:92:21:37:ff:70:
8f:c5:11:da:9f:ac:f8:91:4d:34:8c:7b:d1:7a:1c:
c0:d7:79:6e:eb:6f:4d:ac:34:c2:e0:17:87:cb:f5:
ae:6c:22:ea:84:f5:d8:f5:d0:de:93:57:dc:6d:6f:
d5:65:86:b5:b4:ea:88:e4:a8:0f:4e:b3:77:5d:64:
16:fb:3a:b9:1b:26:fd:ca:be:4f:cd:ed:ed:d9:82:
02:0d:d8:41:8b:13:b9:45:b3:f8:f5:94:c7:60:c1:
28:77:43:83:73:e3:ca:83:dc:35:be:5c:81:65:46:
a7:25:dd:6f:df:74:d5:1e:4e:af:a5:02:57:5a:ed:
ed:db:49:99:92:00:2e:37:6f:10:1e:01:1d:64:5a:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:9B:CC:2E:E0:9B:08:43:E4:55:F7:72:D6:21:9F:BA:EA:87:CD
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:cc:cc:fb:a4:11:d1:81:02:86:d7:14:5a:15:6d:36:1f:
26:4e:03:c3:b5:24:34:db:30:82:81:25:38:83:ee:9d:33:0e:
b3:fe:ab:18:7d:f9:d2:4b:ad:76:94:7b:1c:f0:99:48:b4:15:
bf:09:42:a7:f3:66:eb:fe:97:a5:3e:6b:86:80:75:6d:46:75:
fc:64:73:89:97:48:fb:da:f9:37:d8:64:88:74:eb:2f:7d:8c:
f2:37:11:7d:14:66:59:87:4f:a5:10:85:75:81:74:33:3d:ff:
a6:78:73:84:9e:e5:5c:78:b3:87:fd:e2:82:2b:b5:19:17:9b:
f5:59:b5:df:a2:bc:75:d0:8b:77:be:e8:78:2c:11:ca:56:13:
6e:ba:04:57:63:a5:ec:3a:af:51:8c:b3:ce:cc:28:a7:8b:8d:
eb:f2:66:ed:ee:e1:ac:f7:99:ec:06:a1:04:8d:e6:49:be:f1:
ac:42:a1:20:3f:cf:57:d2:52:55:7c:64:73:df:79:a2:0d:9d:
8b:fc:d8:85:8a:66:b2:7b:40:8f:5e:8d:52:e1:29:d4:09:02:
c1:26:c2:55:6c:c6:45:ce:8f:71:bf:8d:bb:84:ab:8e:61:82:
15:88:f8:0d:0b:85:d8:85:c3:e1:1c:df:9f:db:02:d2:81:d5:
52:7f:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:37 2026 by rpki-client