Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: vW2p2qVTtbZGWsy/ZHzEjqgTjqbnDAbyVX5mhuxDPJg=
Subject key identifier: 07:0A:7E:04:5E:B4:00:B6:1D:2C:37:FD:82:75:0B:DE:A0:26:60:9F
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 019E20C89D15B013000154E5F2EA54BCBD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 17FC
Signing time: Wed 13 May 2026 10:01:18 +0000
Manifest this update: Wed 13 May 2026 10:01:18 +0000
Manifest next update: Thu 14 May 2026 10:01:18 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: oSvt31reMxVsW7mZO+ho/wljk+3MgxROcdQ+hpvlT2E=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:9d:15:b0:13:00:01:54:e5:f2:ea:54:bc:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: May 13 10:01:18 2026 GMT
Not After : May 14 10:01:18 2026 GMT
Subject: CN=070a7e045eb400b61d2c37fd82750bdea026609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:e4:bc:0b:90:c2:14:5f:ed:2c:76:b1:d1:
6c:d1:69:c5:ab:56:04:cc:b4:fc:6b:28:00:a1:99:
3e:5d:6d:85:37:26:18:27:67:95:20:01:d7:86:53:
34:46:4c:24:6a:f1:c4:62:6e:50:04:21:f1:12:89:
e4:e8:08:31:19:0d:68:fe:c7:2a:1d:ef:74:2e:89:
f6:5c:a5:78:1e:fa:60:fe:d1:0b:2a:f1:e9:45:26:
29:87:dc:a6:b8:bd:15:6f:d9:60:02:63:b0:87:bf:
7d:fc:88:9f:dd:6e:10:20:38:7b:e2:4c:3e:5e:7b:
02:a2:e3:00:6f:d9:f1:e9:8e:06:b8:0c:d5:ab:1b:
fd:3b:2a:93:62:a6:a8:92:76:e1:aa:aa:80:78:8b:
12:e2:2c:72:37:86:63:fb:e4:d8:fd:75:64:37:ec:
12:68:72:83:b2:5b:39:05:68:8b:0c:3a:b0:6e:a3:
4e:45:90:6b:72:cd:09:dc:d1:b9:10:04:31:4b:68:
ed:14:c3:dd:c6:f4:f1:32:21:03:c9:ff:9f:fd:95:
34:e4:b3:d8:9b:78:e1:83:0a:a8:23:c7:d3:05:67:
07:c8:c7:81:e9:a1:ee:d6:a6:67:47:f0:51:10:13:
98:51:70:5a:70:5c:08:d0:40:72:38:d1:f9:d8:b9:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:7E:04:5E:B4:00:B6:1D:2C:37:FD:82:75:0B:DE:A0:26:60:9F
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:bf:1c:ed:c7:7a:d5:b8:3a:d6:44:70:24:12:17:41:f9:
f7:7e:ef:43:ae:c5:ab:b6:5a:e0:b0:7e:53:9f:a1:8c:9d:27:
ed:f9:12:a1:2a:45:fd:e7:68:7f:41:05:a7:eb:11:84:23:94:
43:29:28:db:75:e3:86:23:53:07:bd:7c:16:cc:4f:5a:2d:b9:
68:d8:07:e2:77:ee:70:c5:17:26:0a:3c:12:cf:34:f1:52:d1:
5d:f9:e1:57:dc:f5:bf:16:74:62:a3:d6:20:02:b9:e8:44:ee:
ea:d8:63:fd:87:73:5c:44:34:64:d6:3d:ff:6d:92:7b:37:fd:
f5:af:5e:5f:17:07:e7:bd:aa:62:c7:8e:78:ad:72:a1:54:3f:
89:9a:1c:02:82:e4:d9:a8:cf:85:70:62:14:1e:93:13:7c:98:
bd:11:12:58:ef:d7:ee:fd:86:01:93:08:1a:dd:68:91:cf:cd:
29:12:85:a9:7f:a4:fd:bb:25:31:b9:f3:09:49:09:d0:45:4a:
cf:90:ef:1a:4f:53:09:a4:61:67:74:c3:cf:e0:9b:cb:13:5a:
eb:f2:92:39:f9:a6:c4:dd:0b:d3:d8:bf:d7:f8:76:5b:20:6e:
bc:9a:05:22:a3:df:43:fb:8c:c4:1b:4c:85:6c:fe:10:10:09:
5c:c7:47:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyJ0VsBMAAVTl8upUvL1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0
MTQwOGEwHhcNMjYwNTEzMTAwMTE4WhcNMjYwNTE0MTAwMTE4WjAzMTEwLwYDVQQD
EygwNzBhN2UwNDVlYjQwMGI2MWQyYzM3ZmQ4Mjc1MGJkZWEwMjY2MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHXkvAuQwhRf7Sx2sdFs0WnFq1YE
zLT8aygAoZk+XW2FNyYYJ2eVIAHXhlM0RkwkavHEYm5QBCHxEonk6AgxGQ1o/scq
He90Lon2XKV4Hvpg/tELKvHpRSYph9ymuL0Vb9lgAmOwh799/Iif3W4QIDh74kw+
XnsCouMAb9nx6Y4GuAzVqxv9OyqTYqaoknbhqqqAeIsS4ixyN4Zj++TY/XVkN+wS
aHKDsls5BWiLDDqwbqNORZBrcs0J3NG5EAQxS2jtFMPdxvTxMiEDyf+f/ZU05LPY
m3jhgwqoI8fTBWcHyMeB6aHu1qZnR/BREBOYUXBacFwI0EByONH52LkhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcKfgRetAC2HSw3/YJ1C96gJmCfMB8GA1UdIwQY
MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt
OGRmOGFmMzAwMWJjLzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj
LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2e/HO3H
etW4OtZEcCQSF0H5937vQ67Fq7Za4LB+U5+hjJ0n7fkSoSpF/edof0EFp+sRhCOU
Qyko23XjhiNTB718FsxPWi25aNgH4nfucMUXJgo8Es808VLRXfnhV9z1vxZ0YqPW
IAK56ETu6thj/YdzXEQ0ZNY9/22Sezf99a9eXxcH572qYseOeK1yoVQ/iZocAoLk
2ajPhXBiFB6TE3yYvRESWO/X7v2GAZMIGt1okc/NKRKFqX+k/bslMbnzCUkJ0EVK
z5DvGk9TCaRhZ3TDz+CbyxNa6/KSOfmmxN0L09i/1/h2WyBuvJoFIqPfQ/uMxBtM
hWz+EBAJXMdHag==
-----END CERTIFICATE-----
Generated at Wed May 13 16:00:38 2026 by rpki-client