Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: 8Tcdf4nVYeya2InNXnYzPV5OMavH6j18zl2GgW3Wb5s=
Subject key identifier: D3:E5:1C:65:8B:D7:C7:ED:E5:46:D1:B0:DD:67:49:81:F7:E7:3B:3B
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019EBF5B3147399FE4A1BE1B7701AD132716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 04D7
Signing time: Sat 13 Jun 2026 05:01:24 +0000
Manifest this update: Sat 13 Jun 2026 05:01:24 +0000
Manifest next update: Sun 14 Jun 2026 05:01:24 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: iLAh7TH7t2oW2SZ8K06OJShuxGImVyWNg7TrjTmXAA8=)
2: XO3NtH2XUUrbu3EZOVQJj7vU_gU.roa (hash: uxHwXjPpL13fWGLwP3WFIzZ1V+yUDv8CRXMBodsfHIc=)
3: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
4: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:31:47:39:9f:e4:a1:be:1b:77:01:ad:13:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Jun 13 05:01:24 2026 GMT
Not After : Jun 14 05:01:24 2026 GMT
Subject: CN=d3e51c658bd7c7ede546d1b0dd674981f7e73b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:17:2d:fc:cb:0b:b4:db:a2:fc:a7:79:0e:
69:36:b8:05:8d:b1:e4:70:c6:e9:68:93:10:9c:d3:
cb:10:32:66:ca:b9:03:9d:dc:58:c8:39:20:b5:af:
5a:91:f1:f9:96:09:13:86:1a:d8:0c:25:a4:7a:89:
9f:6a:72:c7:f6:ca:b1:cc:f0:41:db:2e:91:3a:53:
ff:d7:33:22:18:47:f6:31:84:83:3f:23:7f:00:7a:
d1:95:02:d8:43:73:57:0e:21:6d:a5:b4:f9:f2:ca:
de:1b:7d:23:9e:46:81:1f:00:87:8a:f6:6b:dd:19:
18:09:6e:63:38:e6:b8:b8:00:e3:49:5a:b8:1d:32:
35:74:ae:8b:23:47:b8:80:a5:2c:45:94:6a:4f:e8:
ac:a5:79:ef:aa:dd:d6:d8:5a:11:1e:33:46:57:5e:
90:9c:fa:20:02:24:42:71:54:dc:0b:7c:19:bc:dd:
f8:30:2b:74:74:57:dd:3a:f9:3d:ff:6d:e5:e7:7c:
a7:bf:36:4d:86:9c:6c:c6:d3:a8:8d:6f:71:0f:41:
2b:67:c7:72:bd:a0:41:a5:61:64:25:77:27:fb:26:
ee:f9:5d:40:d8:27:db:42:e5:ed:b0:f7:e6:92:22:
eb:95:a6:33:49:49:ee:ed:58:ed:c7:08:95:f5:59:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:1C:65:8B:D7:C7:ED:E5:46:D1:B0:DD:67:49:81:F7:E7:3B:3B
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:5d:91:7c:ef:8f:86:85:b9:24:cc:fa:7e:79:12:0b:90:
76:4a:a9:1c:94:3b:44:94:6a:ab:33:e8:01:60:59:33:c5:5d:
e1:eb:89:c6:92:4d:b7:4a:03:fe:91:33:99:39:7b:50:39:4f:
9a:1f:a4:c5:1f:e0:05:4a:f8:ca:5b:9d:a4:bb:59:a3:9b:c9:
bc:8d:28:9d:65:a5:30:bc:c4:66:76:d0:04:1a:d4:d4:ca:4c:
96:82:a6:22:75:36:c2:3b:dc:4d:cb:fa:e2:72:32:bb:67:cc:
f0:0d:3e:60:4a:8e:94:75:e0:54:a3:26:05:09:a3:93:ef:6a:
7f:52:3b:a6:a3:ac:3d:6d:77:aa:92:12:3d:60:ad:4d:38:41:
83:48:0f:65:76:74:ed:cf:4c:9f:84:55:9b:ca:ec:98:d3:cf:
9f:3c:8b:03:65:8b:2b:d5:8f:d7:4a:d8:45:0a:1c:38:4e:e2:
93:67:e1:01:9a:d3:47:39:b1:0e:a7:cb:49:84:ab:57:2d:fb:
6d:0b:72:9b:06:6b:85:7a:56:55:c0:43:dc:35:27:f6:87:6c:
8e:70:a7:b2:54:40:d4:a8:09:3d:ea:01:82:21:48:fd:e2:2d:
73:4f:a7:5c:e6:5a:ab:fd:1a:d9:1b:85:d3:ea:b6:03:04:cc:
7f:32:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:17 2026 by rpki-client