Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: CKBGIQSaN4TBJDYcVxA90mYWqbq+9/TcLLHE2jzN+4Y=
Subject key identifier: 53:98:DB:2C:21:F2:7A:8E:3D:58:BA:99:EF:D7:B4:7E:B8:C6:24:84
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 019D2D738292D021BFF7359D8C173C4BAEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 177E
Signing time: Fri 27 Mar 2026 04:00:37 +0000
Manifest this update: Fri 27 Mar 2026 04:00:37 +0000
Manifest next update: Sat 28 Mar 2026 04:00:37 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: QJz63r5ZiU59q4A4ROAhPQxCA4J4mNYCqDDeSBTp5ak=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:73:82:92:d0:21:bf:f7:35:9d:8c:17:3c:4b:ae:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Mar 27 04:00:37 2026 GMT
Not After : Mar 28 04:00:37 2026 GMT
Subject: CN=5398db2c21f27a8e3d58ba99efd7b47eb8c62484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:9f:6c:c6:8d:7b:9f:9d:72:b4:af:df:c7:
a7:a4:9a:c9:22:59:f5:4f:e4:b2:d9:97:06:a4:c2:
ac:45:4d:06:81:88:88:9c:6c:cd:9c:2a:c3:db:14:
cb:ee:5d:d9:df:ee:7c:9b:86:75:50:01:84:5d:51:
a0:20:5d:7e:72:05:88:c0:47:2e:e8:b9:f7:c0:f0:
16:0b:8c:65:22:cd:20:d5:99:e4:3f:21:31:df:ff:
36:58:bf:13:47:e1:d7:8d:2b:99:f5:66:62:d5:6d:
9d:cc:61:d8:53:4e:9d:92:3c:6a:1a:ce:45:c0:d9:
7f:82:57:41:b9:54:3e:8f:8d:3d:f8:73:92:cd:07:
c1:ec:aa:12:ce:bb:8d:f4:ec:5f:99:0c:e9:d2:cf:
71:f0:bf:63:6e:8c:7f:18:2f:a9:0b:5c:18:90:02:
3b:69:52:3a:6f:4a:80:ca:25:6a:c6:0e:67:97:4f:
59:80:49:40:52:8f:63:70:b2:eb:13:22:81:95:12:
74:36:f6:ad:96:38:cb:dc:68:81:cf:eb:d6:04:67:
e5:4b:50:95:15:79:84:58:cd:13:42:e6:c5:88:dd:
c1:9d:6e:8b:ab:72:c3:5e:d9:86:be:c2:06:39:55:
29:e0:6e:8f:c5:45:5a:2a:21:fd:fe:70:b8:21:b2:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:DB:2C:21:F2:7A:8E:3D:58:BA:99:EF:D7:B4:7E:B8:C6:24:84
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:e2:fb:b7:20:eb:bc:42:e3:2c:88:a8:23:a1:18:c3:2a:
3b:de:1d:35:44:2e:f1:b8:07:ab:05:b7:7f:4b:8a:25:49:50:
f7:5a:5a:5f:81:08:48:c9:86:c2:6a:0a:80:74:c8:6b:81:b7:
be:77:c7:c7:cf:27:67:08:77:94:d3:14:57:17:bc:d5:36:9f:
3e:b1:5a:f7:12:94:7e:ad:f0:35:25:43:fc:86:10:db:d9:f0:
a0:4f:37:43:3e:b8:3d:6a:dd:a5:d8:7e:f0:6f:9e:8c:a4:fe:
92:64:1e:47:bf:9c:2d:79:33:a7:82:bd:ad:73:be:5d:53:c5:
8b:1c:e8:ab:26:42:8b:f5:1b:72:f7:c0:ea:b4:1d:98:1d:c1:
66:51:0a:9c:b8:65:ce:e8:57:fd:2f:dc:c0:2e:3b:5e:2f:b2:
2c:8a:ac:e7:65:c4:27:af:6a:ff:80:c1:cf:f4:ea:26:4c:5a:
c7:d7:4c:65:a6:db:1c:e3:aa:80:3a:d9:b8:ed:fd:cd:a6:c9:
ea:64:af:cb:8a:fd:17:d9:31:88:81:f9:52:0b:40:a6:a1:74:
88:80:c6:98:84:4b:50:f6:0b:ed:3f:04:ba:0c:f2:79:cc:4b:
e7:dd:1d:11:9e:f1:0e:89:b8:38:16:6d:4e:9a:47:43:f8:01:
e1:36:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:12 2026 by rpki-client