Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: 3+Cm9YOcG/FGdWom5s8WOCRyGtKFNfittXdsqaZLTPU=
Subject key identifier: CF:32:5E:1A:3B:C7:7F:F3:B0:C3:8E:8F:9A:5B:71:39:8E:CC:54:C6
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 01A1DC4B0DDE21028880C8C0BF50674C3A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 01D9
Signing time: Sat 14 Nov 2026 23:01:08 +0000
Manifest this update: Sat 14 Nov 2026 23:01:08 +0000
Manifest next update: Sun 15 Nov 2026 23:01:08 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: HsFbEo77dvrhtn5ZCV01eGNiLoaFxYfijBXlYTEGEfU=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:0d:de:21:02:88:80:c8:c0:bf:50:67:4c:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Nov 14 23:01:08 2026 GMT
Not After : Nov 15 23:01:08 2026 GMT
Subject: CN=cf325e1a3bc77ff3b0c38e8f9a5b71398ecc54c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:5d:aa:9c:e8:52:61:0c:48:28:f6:ab:fd:
75:37:99:13:6e:a1:e3:56:f8:38:17:a3:85:bc:f0:
4d:99:2c:dc:99:4c:f7:9c:d1:e5:ef:78:54:05:38:
97:44:b2:62:b0:d7:9c:44:b9:a3:59:32:c4:3f:a0:
01:72:74:ad:25:b0:06:f6:41:ee:8c:3e:e9:ad:12:
36:f8:7b:32:c7:e2:39:9c:fc:d9:a7:69:dc:27:70:
dd:b1:dd:dd:0d:35:e3:f4:ae:ba:c8:48:a3:32:9e:
03:38:ba:e2:da:d9:2a:d3:c6:59:e0:97:3d:3c:e4:
75:f3:20:d7:da:02:b9:3d:46:5a:4c:f7:8e:37:cb:
f0:bb:01:e4:85:fb:31:94:3b:f3:f3:ac:29:f9:8a:
bd:05:c5:7f:5b:02:53:df:bb:41:f1:a4:f6:76:88:
a4:d7:6b:cd:33:c9:d9:a2:cd:78:3c:9c:02:aa:45:
f1:50:4f:c2:bd:51:70:b4:5f:c9:c6:df:82:8d:7a:
06:2b:91:c0:bc:a1:a4:f6:1f:b8:3b:36:c4:84:59:
65:94:8a:48:ae:19:6a:0a:60:8a:c5:21:51:fc:5e:
24:57:41:93:f9:a4:c7:e0:9b:4e:31:49:ab:15:2f:
6a:a7:c4:2d:77:74:9c:64:52:03:2e:fe:bd:2f:3f:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:5E:1A:3B:C7:7F:F3:B0:C3:8E:8F:9A:5B:71:39:8E:CC:54:C6
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:45:f3:5d:a0:9a:6d:e3:f6:73:28:b2:a2:ee:a9:68:40:
7f:9e:5e:57:69:80:51:82:e8:d5:d1:99:16:85:b7:b3:a6:0e:
e3:dc:75:14:b5:4b:d6:48:d8:1f:dc:5c:ca:06:c3:18:7f:17:
67:57:27:e8:f3:5f:fa:90:fe:cc:82:80:a3:f0:d3:53:33:66:
06:cd:9a:1b:ad:97:7e:df:3e:3c:37:8d:55:4d:27:f7:15:5c:
40:8e:65:60:dd:78:b4:eb:e4:da:f8:c7:f7:60:0e:d4:64:2d:
d8:2f:2e:ea:d2:66:3d:9b:c5:f6:5e:75:1a:c9:e6:5a:56:32:
60:4f:81:d7:49:5f:6e:b6:a3:4f:31:da:05:91:d0:c2:dd:8a:
43:b3:e4:3c:44:86:5b:15:64:8c:90:fb:5d:2e:a9:ee:0a:d0:
9b:ef:be:54:67:3b:6f:af:d2:3d:75:01:f6:57:91:0c:d0:0c:
12:a3:ac:ac:b5:b4:a7:ff:db:6f:80:70:a4:a9:3b:87:a5:04:
89:8a:63:67:91:24:01:fc:68:73:04:29:02:49:14:47:92:37:
cb:f5:fa:49:ed:68:38:dc:90:07:9f:3e:61:3f:6f:d9:36:0f:
c7:51:7b:ee:25:36:b1:f7:01:5d:65:0d:21:ee:22:c2:78:5b:
ef:be:c6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcSw3eIQKIgMjAv1BnTDpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTVjYmRmYzY3YjFmNTUwMWJkMjJiYTAzMTk3ODI5MjUz
YzQyNWEwHhcNMjYxMTE0MjMwMTA4WhcNMjYxMTE1MjMwMTA4WjAzMTEwLwYDVQQD
EyhjZjMyNWUxYTNiYzc3ZmYzYjBjMzhlOGY5YTViNzEzOThlY2M1NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaNdqpzoUmEMSCj2q/11N5kTbqHj
Vvg4F6OFvPBNmSzcmUz3nNHl73hUBTiXRLJisNecRLmjWTLEP6ABcnStJbAG9kHu
jD7prRI2+Hsyx+I5nPzZp2ncJ3Ddsd3dDTXj9K66yEijMp4DOLri2tkq08ZZ4Jc9
POR18yDX2gK5PUZaTPeON8vwuwHkhfsxlDvz86wp+Yq9BcV/WwJT37tB8aT2doik
12vNM8nZos14PJwCqkXxUE/CvVFwtF/Jxt+CjXoGK5HAvKGk9h+4OzbEhFlllIpI
rhlqCmCKxSFR/F4kV0GT+aTH4JtOMUmrFS9qp8Qtd3ScZFIDLv69Lz/dZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8yXho7x3/zsMOOj5pbcTmOzFTGMB8GA1UdIwQY
MBaAFDhVy9/Gex9VAb0iugMZeCklPEJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNmMxNzQtY2E3Zi00MzVkLWE5YTEt
ZDc2ZmU5ZGYwY2JiLzEvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNmMxNzQtY2E3Zi00MzVkLWE5YTEtZDc2ZmU5ZGYwY2Ji
LzEvT0ZYTDM4WjdIMVVCdlNLNkF4bDRLU1U4UWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYFF812g
mm3j9nMosqLuqWhAf55eV2mAUYLo1dGZFoW3s6YO49x1FLVL1kjYH9xcygbDGH8X
Z1cn6PNf+pD+zIKAo/DTUzNmBs2aG62Xft8+PDeNVU0n9xVcQI5lYN14tOvk2vjH
92AO1GQt2C8u6tJmPZvF9l51GsnmWlYyYE+B10lfbrajTzHaBZHQwt2KQ7PkPESG
WxVkjJD7XS6p7grQm+++VGc7b6/SPXUB9leRDNAMEqOsrLW0p//bb4BwpKk7h6UE
iYpjZ5EkAfxocwQpAkkUR5I3y/X6Se1oONyQB58+YT9v2TYPx1F77iU2sfcBXWUN
Ie4iwnhb777GKw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:31:05 2026 by rpki-client