Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: qzNOjFHGo+SqJah6SdjLY1rC4EKPXTlSYt95iI+/ong=
Subject key identifier: 64:5F:82:A9:C5:B3:C3:B5:45:97:32:57:88:6D:F8:57:D3:9F:35:A4
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 01A0D983C54B4CFBA468C59F392D089C35F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 0153
Signing time: Fri 25 Sep 2026 17:01:26 +0000
Manifest this update: Fri 25 Sep 2026 17:01:26 +0000
Manifest next update: Sat 26 Sep 2026 17:01:26 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: cuOYIuQw/TPFAv/WFr4FSK8cF8zCoe5K14tdRPsemTw=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:c5:4b:4c:fb:a4:68:c5:9f:39:2d:08:9c:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Sep 25 17:01:26 2026 GMT
Not After : Sep 26 17:01:26 2026 GMT
Subject: CN=645f82a9c5b3c3b545973257886df857d39f35a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:21:fa:4b:6d:cf:72:9e:7a:41:29:18:c4:
2d:d1:cc:e8:06:df:b9:f9:2f:50:df:28:2c:04:3c:
c4:b4:b2:eb:3d:5f:63:69:8e:87:fd:39:50:91:19:
00:60:2a:42:f8:26:4d:67:1f:b0:9a:cb:4b:38:ae:
25:0b:51:8d:e3:d6:9f:79:ad:d6:7d:6b:9e:d4:95:
cd:bb:2f:c7:d8:54:85:94:8c:f9:3c:f7:b9:1d:89:
53:4b:a9:f5:bd:27:be:a9:ef:a6:17:92:52:f4:4d:
af:80:68:2a:04:40:26:95:f5:d1:25:6a:be:2c:2d:
02:a4:76:aa:21:a3:6c:26:1f:50:c3:86:07:51:df:
7b:ce:59:6c:7b:cc:14:d6:31:3e:65:3a:7e:57:00:
44:66:ae:13:6a:76:6e:bb:44:ff:b2:0b:74:73:80:
f3:45:21:aa:b9:65:4d:bd:23:a6:63:58:4b:18:8c:
1d:9a:08:a6:fc:94:e3:d9:fd:5d:f5:ef:32:c5:7c:
73:5e:fc:6a:c7:96:e7:70:94:0b:61:3b:65:30:f7:
20:f5:fb:46:94:86:e7:77:ef:86:b1:84:a3:d2:2d:
9b:8b:f1:0b:da:87:19:d4:c0:cb:18:eb:0e:ae:60:
f3:ca:c7:74:bd:78:dc:92:43:76:f5:b7:af:12:b1:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:82:A9:C5:B3:C3:B5:45:97:32:57:88:6D:F8:57:D3:9F:35:A4
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:4d:f3:47:6c:9d:1b:fb:1f:fd:ee:6c:a2:13:07:6f:48:
0d:81:f7:68:71:2e:5a:26:36:6f:6c:f6:84:6f:91:c4:e3:2f:
c7:25:f4:19:8d:de:f8:7f:88:ce:14:b8:8c:1e:67:9f:46:82:
33:92:2c:e2:3a:22:72:21:81:fe:b1:9b:80:79:9c:6e:f1:06:
fd:b7:a8:5e:2a:51:66:a9:ed:1d:eb:b7:92:7b:6f:75:38:e4:
c0:11:f7:d0:01:9e:51:2f:9b:ed:cf:cc:c8:c3:f7:cb:4f:68:
50:de:b7:b2:67:1c:58:26:df:5f:58:33:73:04:82:78:c4:cb:
74:24:28:ae:8d:aa:23:b8:01:03:cf:b0:65:ac:e3:57:fa:53:
19:b7:c4:50:5b:00:09:c1:ac:ee:fd:01:9a:88:4a:54:f4:e6:
e0:54:32:9c:ca:d3:87:7d:c6:12:cd:99:47:04:33:a0:d5:4e:
48:19:68:c5:99:aa:0f:61:76:72:cc:c0:af:0a:4e:9c:11:eb:
2a:b6:39:1a:8d:a3:09:ff:55:98:90:da:33:fe:b7:5d:72:73:
18:47:bc:6a:1e:ee:60:85:af:82:bc:b1:e7:87:a6:27:ef:4f:
ee:bb:38:6b:8d:a2:ca:81:3b:0b:22:d6:c9:08:cb:2b:cb:fa:
fd:38:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:43:47 2026 by rpki-client