Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: cvWzTTUpxwKCjJBJzTEedgb+2x45xHEctnsmM9wd7Ww=
Subject key identifier: 47:03:62:CB:C7:6F:C6:FD:F5:E1:EF:B3:DF:1C:BB:26:37:B1:17:CC
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 01A0D5A6D7F5DDDD19962E9C4DDB9379387D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 0151
Signing time: Thu 24 Sep 2026 23:01:16 +0000
Manifest this update: Thu 24 Sep 2026 23:01:16 +0000
Manifest next update: Fri 25 Sep 2026 23:01:16 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: TMfWQj4fOnhmmcC4CGW0WTiEsH9CG/dbBjIIwnjFSEY=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d7:f5:dd:dd:19:96:2e:9c:4d:db:93:79:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Sep 24 23:01:16 2026 GMT
Not After : Sep 25 23:01:16 2026 GMT
Subject: CN=470362cbc76fc6fdf5e1efb3df1cbb2637b117cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:67:ba:13:47:09:ca:9c:2c:3b:51:22:03:
3e:e6:92:27:e3:38:b6:f2:49:93:cb:e5:ec:ad:97:
ff:ce:7e:be:5b:1b:35:99:2e:d5:69:8e:b2:9f:5d:
8e:cd:6f:31:4f:5d:72:df:27:81:be:be:0b:7f:25:
54:2e:63:26:04:dc:e3:bf:5e:85:29:2d:ed:75:4a:
a0:f5:c1:35:f8:c8:f5:8e:f8:8b:75:0b:a7:ea:b6:
b4:07:42:d5:68:cc:da:5c:24:e7:4c:25:49:6e:73:
e2:db:e8:e5:f4:7c:d2:cf:f5:bb:d6:a3:3a:5e:67:
71:8f:fc:49:e8:6c:1f:cd:97:14:9f:2b:0d:bb:5c:
ef:d6:7d:e7:91:f8:e1:a1:22:d1:ae:2e:e9:64:19:
68:e9:77:f5:7c:64:ca:c6:82:4f:42:fa:7a:1f:71:
31:97:13:5a:08:91:7a:ac:2f:67:9c:df:b5:85:52:
3f:7e:27:ef:50:4e:ff:c8:98:d6:2c:d5:a5:98:a1:
f0:db:4b:32:08:e9:9f:97:6a:77:84:d8:e0:bd:7f:
07:ec:2d:ec:93:b9:78:47:e5:8a:c9:e8:ff:fe:d2:
14:bf:c8:b5:95:d5:56:44:c7:1c:4a:ff:bf:f7:0c:
73:2d:b7:d6:73:81:06:1c:e3:8c:f6:46:16:fd:85:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:62:CB:C7:6F:C6:FD:F5:E1:EF:B3:DF:1C:BB:26:37:B1:17:CC
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:9c:b6:73:97:02:12:9a:65:fa:51:43:c3:65:93:da:54:
2e:bc:f3:da:88:41:9f:11:c5:54:83:be:0c:68:1d:7b:1b:cd:
00:ee:46:f0:3b:9d:7e:a5:40:2b:3a:5e:e6:4c:ea:d1:35:ad:
e1:06:1a:d9:3e:c4:ac:9b:80:4d:c7:47:2f:25:dd:1c:ac:06:
63:f9:78:ec:8d:74:d6:be:65:0e:22:89:6d:d3:a9:dd:1d:d9:
36:a7:bd:2f:7b:52:08:39:fc:bc:ef:24:27:73:21:8e:79:07:
c9:63:c7:05:91:ef:4a:bc:bd:46:40:4f:54:e4:e4:1e:ff:13:
69:d6:ca:79:04:cc:78:1f:08:b2:19:dc:6e:0a:1f:0c:ea:df:
93:83:3a:3a:ed:93:93:d7:fd:6e:4d:f2:38:de:ac:c6:c2:82:
65:47:a4:9c:f1:fd:d9:cd:25:c2:2e:4b:26:b7:a4:4b:20:b0:
ae:ab:ca:7d:c4:a8:c9:34:89:8d:1b:c0:5b:8d:8f:1a:45:69:
53:54:9e:7c:99:2e:42:f5:70:19:83:75:84:f1:d1:5c:1e:6d:
d2:81:57:a6:f6:a3:8a:5d:e7:56:43:ab:0c:ea:1a:95:f6:a1:
07:5b:50:ae:56:50:40:c3:43:cd:50:7c:1d:23:b9:9f:47:75:
b2:5d:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:56:43 2026 by rpki-client