Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: ibRyLaXm3s4umGh+tAURpeAZPQhnw157UOTkDchRLEU=
Subject key identifier: FD:8C:3D:CD:F6:74:60:78:4F:02:7F:A6:99:51:F7:80:43:CC:76:03
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 019F8F471F248BECB7C69893B4EEBFF612E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: A8
Signing time: Thu 23 Jul 2026 14:00:30 +0000
Manifest this update: Thu 23 Jul 2026 14:00:30 +0000
Manifest next update: Fri 24 Jul 2026 14:00:30 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: HavvFCKeOlUH9ma9oV8CRsUbbkkJAHANThV4PY9Fqwo=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:1f:24:8b:ec:b7:c6:98:93:b4:ee:bf:f6:12:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Jul 23 14:00:30 2026 GMT
Not After : Jul 24 14:00:30 2026 GMT
Subject: CN=fd8c3dcdf67460784f027fa69951f78043cc7603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:58:c4:e0:5d:14:e2:8d:3c:12:80:cd:dd:
b1:fc:4c:79:45:fd:56:d5:31:d1:7b:17:cf:83:05:
aa:26:d1:9c:39:a3:91:50:1c:77:56:85:1f:83:83:
0e:bc:c7:a2:df:a9:cd:5c:6a:4f:1f:6d:c6:a2:e6:
d7:e2:8a:a4:5f:c0:8c:38:e8:56:e1:25:39:08:1b:
94:94:0e:6e:e9:93:d7:82:f9:47:6d:cd:28:1a:f7:
ec:8a:ee:da:2d:56:d2:e7:1f:38:79:a3:4b:d7:69:
23:ae:29:20:09:42:db:d3:26:5c:f8:35:22:b3:c6:
7b:44:04:96:f8:fa:e0:81:0d:c1:09:2b:96:c2:c9:
d3:fe:29:8b:e4:c7:a3:26:3d:40:c5:09:92:10:2e:
43:58:4a:25:e8:97:d1:0c:2b:b1:e3:61:d0:df:04:
ca:76:5f:05:b8:1d:5e:ae:bc:fd:20:88:26:e0:5d:
3e:88:8d:2a:e9:1c:8d:3e:47:52:1e:ab:fb:56:f1:
fc:e4:17:49:22:6b:d0:a6:e9:6f:fb:24:ad:f4:05:
ae:26:64:98:53:23:e8:2d:c7:6c:fe:1d:fc:7f:a3:
e8:63:77:93:25:db:cf:dc:fe:ae:56:c2:47:83:48:
ee:24:e1:35:3b:fc:7d:d7:6b:9a:e0:e4:82:30:b8:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:3D:CD:F6:74:60:78:4F:02:7F:A6:99:51:F7:80:43:CC:76:03
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:0b:8d:99:05:53:7d:7e:df:33:c9:e7:ff:1c:80:b6:da:
b6:2b:15:a2:12:f1:37:f3:c4:7b:51:82:cf:d3:31:dc:40:59:
e6:84:32:28:d0:c7:cf:fa:35:af:77:fe:0b:2b:5c:ca:d0:b6:
db:34:a2:59:79:b1:1b:f2:d8:57:4e:ec:41:0a:22:ec:11:05:
5f:7d:5f:9e:fc:e3:b1:8b:9a:09:b5:65:36:23:dc:40:68:86:
19:85:10:9a:c4:75:b2:f3:ae:59:27:33:d7:3d:d5:ce:27:33:
85:b9:83:cb:03:6f:c5:18:f6:f1:7c:e9:d3:8b:24:61:bb:49:
f3:0e:2c:32:d2:3c:c7:de:ef:b2:07:c0:d6:fd:d5:71:8e:3b:
28:c4:c4:44:90:24:bd:19:e0:49:44:9e:b9:69:29:3f:94:d9:
a2:8d:7e:7f:30:83:fd:54:58:62:ad:20:3d:70:37:79:ae:c4:
9f:27:6d:6c:f4:e1:1b:8d:f2:07:25:d5:53:14:45:43:7c:6d:
2a:b9:9d:30:dc:2c:f1:0c:09:56:41:ed:f1:f0:c3:43:59:42:
10:8c:b8:94:9c:6d:09:17:69:4f:e8:3f:b9:2a:55:6f:b3:ec:
9d:20:13:9b:10:fd:a4:6c:24:6e:a1:bb:e7:75:62:97:68:6a:
b8:c8:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:58 2026 by rpki-client