Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: ix595lTWWVGdbSzJZwXDtz1pqZPiVlPuuMCFZEUrxCg=
Subject key identifier: F6:32:8D:1E:2D:51:F3:1A:0A:23:86:EB:7D:FE:19:DC:72:4F:52:8D
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 019D2816D0E31FE26EB45D9ACB49BACB9286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: 4QErYyNxMj17fmmm_V9KhVEYnPs.roa (hash: H4wqYD+7ia6e/4/SeX93ZuX1r2stfSvamQFuWxwWz9g=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: iJkp3l3Ji0hQyj62LSZmjsn+1R3tQZHe3FovU/4k/sE=)
3: ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa (hash: ftNvK4quhd+aCIDNnGQHvGWOv6HTZuEG7taZaiTGHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d0:e3:1f:e2:6e:b4:5d:9a:cb:49:ba:cb:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=f6328d1e2d51f31a0a2386eb7dfe19dc724f528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:9c:f1:ff:6c:5e:94:38:64:35:d1:25:95:
76:ca:20:4f:5f:02:75:06:12:31:c9:e4:c9:64:77:
66:0e:eb:28:06:23:29:f4:53:dd:50:81:c0:4a:f9:
da:37:5c:dd:23:97:86:10:5d:ed:a9:f4:97:90:9f:
bd:cb:dd:82:a1:90:2f:01:f6:48:16:ba:d1:24:a6:
69:12:0a:1c:8f:b7:52:e8:5b:4c:4c:de:0a:88:68:
43:42:ef:1b:36:ba:76:43:15:0e:8f:fe:44:11:38:
18:16:09:53:ff:45:b7:0c:01:b8:9c:dc:c6:f9:f4:
5e:fb:53:6d:ef:1e:ed:42:47:1a:66:0c:79:d0:25:
13:e0:ef:54:65:f7:f1:bc:35:03:db:5d:6f:b6:a6:
2f:6b:ed:01:3f:3e:99:7a:5a:a0:bd:e2:d8:c1:7a:
d2:c2:08:b8:84:80:b4:1a:f8:f1:46:3c:48:44:cd:
a2:b9:87:ba:62:33:4a:fa:9f:b1:2c:2b:13:54:86:
09:63:fe:df:e2:00:69:a5:c0:0d:08:11:48:8f:ae:
4b:9e:38:02:87:80:60:09:68:d8:7a:b5:3f:a8:df:
d3:92:87:1b:49:82:cc:c4:a1:c2:5a:45:1c:e3:8f:
8a:dc:c7:02:5a:87:72:55:fc:cd:a0:87:fe:c8:d8:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:8D:1E:2D:51:F3:1A:0A:23:86:EB:7D:FE:19:DC:72:4F:52:8D
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2e:e0:f3:b3:f1:f8:0a:a7:b9:72:29:19:c0:d3:ae:6b:ba:
98:38:e3:f2:ab:55:f1:24:de:22:e0:50:4e:86:1b:20:4e:90:
e5:b1:cc:4c:b3:4b:71:00:24:75:29:78:04:d1:79:4c:62:10:
94:2a:37:e6:04:9b:6d:a7:eb:8b:04:1a:fc:cc:58:dc:7a:9c:
3d:70:b9:6f:7f:8b:c8:51:39:66:c9:f4:58:2e:41:22:c8:c4:
29:dc:ed:8d:c1:79:37:f2:64:f1:ba:e1:23:0c:91:a5:bb:fe:
5a:86:1f:50:e0:a2:a9:60:74:dd:55:b4:06:f3:5f:5e:eb:6a:
70:c0:59:4e:37:63:19:3b:3e:d2:b0:24:aa:a8:3a:49:da:26:
8e:39:18:f6:f3:7d:af:91:bb:58:4b:ee:f6:3a:e6:f0:59:13:
bf:b3:2f:51:91:68:47:38:71:40:03:96:3f:1f:8c:13:1f:b4:
ca:8c:bf:bc:20:1c:6b:9d:7a:0c:00:6d:5a:5a:72:7e:34:cc:
8d:69:5f:03:3d:36:03:aa:f6:62:ad:cb:16:f6:d7:b8:54:d1:
00:53:f9:0d:3a:b4:82:3c:28:63:74:9d:b5:7c:01:ec:be:44:
26:11:b7:1f:78:7a:a2:27:9b:31:89:c7:3e:3d:e2:18:c2:c2:
c9:61:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:40 2026 by rpki-client