Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
File: OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft (raw, json)
Hash identifier: FHr39iqRqzkrHJR9W5tonuLcJZuh++1L7F3VzcLP8Cs=
Subject key identifier: AE:67:0F:5D:AA:90:4E:6C:4A:BA:BF:07:38:F7:82:1A:88:AB:FF:CB
Authority key identifier: 39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
Certificate issuer: /CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Certificate serial: 019E1E6C2D3A7EF7FC62D3C7CF10EB639636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
Manifest number: 23
Signing time: Tue 12 May 2026 23:01:06 +0000
Manifest this update: Tue 12 May 2026 23:01:06 +0000
Manifest next update: Wed 13 May 2026 23:01:06 +0000
Files and hashes: 1: OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl (hash: xhMobSYOFjpIBRGzuCf8mVP3o3Y54wPZcm9hHeX2Vus=)
2: c0Vk60kJ7ueTPIokv7qGtH3eTTQ.roa (hash: O+dHMuQMe/fBcOZ5bxLhWVDzmIw1sCX/tFC/j0yj2qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:2d:3a:7e:f7:fc:62:d3:c7:cf:10:eb:63:96:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Validity
Not Before: May 12 23:01:06 2026 GMT
Not After : May 13 23:01:06 2026 GMT
Subject: CN=ae670f5daa904e6c4ababf0738f7821a88abffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:70:36:d7:51:3a:6a:c8:d8:12:ff:5f:13:
b2:57:10:dd:29:2b:a5:f9:88:77:87:04:ab:33:e4:
a1:da:c1:56:c0:c4:4c:85:9e:38:e0:dd:49:0f:73:
a8:ee:e0:9a:14:02:40:f0:49:0f:3c:d2:7a:51:67:
35:eb:1e:bd:22:9c:a2:75:66:ac:bb:57:71:d7:0b:
02:3b:74:c6:b7:8a:0f:a6:80:75:2f:19:bd:76:1a:
25:83:91:46:0e:ed:94:d9:71:6f:09:23:29:a3:75:
dd:98:0b:5d:d0:4f:1c:9a:ac:35:35:f5:2d:18:66:
85:59:fb:15:87:23:6b:89:3f:81:4d:57:3b:a8:e5:
3b:cd:fd:ab:90:b8:52:22:4a:05:b9:2f:d8:07:f8:
90:b3:e1:1d:b8:6a:bd:d0:f6:cd:3a:57:28:57:87:
b9:7c:73:fe:ec:45:6c:7a:15:05:28:0f:68:bb:2a:
b3:d1:03:a3:87:da:73:0e:e7:57:8b:8a:f2:fc:ad:
eb:f3:21:85:9b:f2:18:40:6f:12:68:0d:c2:c2:80:
24:58:c0:5a:43:24:fe:ac:11:2e:29:fb:cb:a2:10:
0f:df:b3:7d:2c:f4:9e:90:f9:16:88:a1:8a:9c:5a:
68:5a:31:49:27:c4:17:2e:b3:7c:f4:c0:69:89:e3:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:67:0F:5D:AA:90:4E:6C:4A:BA:BF:07:38:F7:82:1A:88:AB:FF:CB
X509v3 Authority Key Identifier:
keyid:39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:83:cf:6e:e8:03:57:c3:5a:af:0c:64:a2:94:0c:e3:6b:
5b:83:c8:ce:a8:8f:80:b2:8e:2a:54:db:78:7b:35:3c:1c:a0:
b1:66:a8:18:b0:83:ef:de:c4:ed:51:a4:20:be:7e:42:1e:3a:
4c:2c:d7:f5:98:7f:3b:64:1a:7a:c6:6c:98:bb:45:47:e9:1e:
47:bc:33:5b:08:66:d5:ab:70:6c:1b:92:a8:af:ad:40:e1:0e:
f6:39:cb:91:27:06:21:a5:ec:0c:a9:ec:7c:b5:a6:8b:17:57:
af:c4:25:27:98:85:c9:c0:ce:94:3b:69:9d:dc:3e:b6:32:8f:
db:3f:b5:46:65:b7:20:dd:bc:dd:27:ed:b4:1b:7b:1d:49:27:
a0:1e:49:31:89:f1:ee:c5:9b:ac:5c:f7:a3:f0:8e:86:90:b5:
c8:4f:9e:3f:e3:3b:8b:f4:82:6e:7b:c4:71:da:b1:a0:c5:3d:
56:65:d7:79:fd:b4:99:6c:5f:a6:60:6a:18:34:2c:a6:cd:1b:
5e:ad:b2:1e:e4:f7:70:56:4d:95:98:89:13:da:b6:85:af:f9:
05:bb:e1:ff:6f:6d:61:c5:7f:48:98:6f:bf:07:e9:40:21:fe:
38:cf:14:a5:23:ac:a9:d6:01:ca:ce:55:b6:bc:90:d4:55:1d:
3a:e2:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:32 2026 by rpki-client