Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: qN8PVjXq50btpSWc0ECyXzmUd0cfZzdFceoOkKQRy4U=
Subject key identifier: CE:C4:99:06:29:99:BC:77:C9:A8:76:CD:C7:4F:57:D2:F3:74:CC:9C
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019CABA1C0C48967DD216F5F8A8B646A49CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 03C2
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: MPgj8Y8FIHwhRUAoP6WfAWXsCbqZ6NcGFqBVz2sFMO4=)
2: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
3: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c0:c4:89:67:dd:21:6f:5f:8a:8b:64:6a:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=cec499062999bc77c9a876cdc74f57d2f374cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:80:42:33:25:79:b6:d0:55:6a:ce:08:f2:
7b:0c:1a:ff:3e:84:58:ac:a7:72:22:c3:fb:04:2f:
bc:84:7b:ef:9f:22:42:d0:b3:9e:19:ce:de:34:4d:
d3:52:10:58:0c:b1:42:78:e9:5d:0d:e6:55:b7:c0:
1d:21:29:4d:d2:b4:05:73:50:1b:e3:91:24:3f:20:
e5:3d:70:c9:eb:e2:dd:fd:fe:ae:2b:19:81:61:72:
c8:2c:da:3b:30:f8:7e:20:bd:d4:36:f2:de:41:d3:
40:df:4e:54:79:78:bc:98:1d:fa:7c:10:f4:24:8d:
5d:98:9d:91:5c:fa:4f:7e:2e:89:b6:89:de:28:e7:
b0:ac:0b:43:01:ec:60:e3:29:f8:c3:ff:ff:f8:21:
bb:dc:fe:1d:d4:c4:e7:43:43:c3:9c:ba:44:3e:1d:
57:87:be:23:26:60:54:18:c7:25:dd:88:35:9f:0b:
f7:9e:97:e9:5d:38:38:6d:90:9e:3a:23:12:91:61:
53:75:10:7c:b1:9b:57:43:bb:44:3f:21:19:95:f8:
b7:e1:67:e5:47:0e:32:4b:d2:68:e3:2c:71:89:85:
01:18:7d:2a:31:b3:f3:b1:e0:2f:8b:e8:a5:e7:f8:
52:b7:51:d5:81:3d:ef:bd:54:ef:07:1b:3a:87:06:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:99:06:29:99:BC:77:C9:A8:76:CD:C7:4F:57:D2:F3:74:CC:9C
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:e7:c0:22:dd:38:e7:bc:3b:28:b6:c9:91:c3:24:f3:bd:
f7:7a:80:25:a7:82:61:19:26:17:0a:be:5b:a6:f4:a2:6f:ed:
38:e3:9e:36:3a:69:44:66:89:84:e0:3e:02:54:1c:93:2e:56:
84:50:04:0f:98:29:b4:0c:4f:a0:18:54:f0:4c:8d:7a:cb:cf:
65:5d:80:f5:03:f1:44:54:d9:56:58:e6:f1:59:11:ce:c6:05:
3c:21:cd:10:f4:e8:04:2a:b7:77:9c:95:15:59:19:9c:4f:35:
ad:3c:ac:d4:e6:83:3d:2a:02:ea:df:9b:42:00:4e:e5:61:76:
13:6a:04:13:17:fd:13:64:69:52:ac:3e:3f:14:98:1f:43:18:
34:29:9d:11:42:0a:88:39:dd:bc:34:ca:c4:7f:43:d9:1a:5d:
80:f1:0e:7a:75:06:76:c9:41:ec:08:d4:03:66:c7:d9:3a:6a:
7a:40:78:2a:bd:ef:57:be:65:b9:4d:58:a2:e8:09:b5:36:52:
6b:f7:61:db:a0:d5:33:a1:7e:74:67:d2:e9:15:4b:69:8e:c7:
06:7e:11:52:d1:0e:f1:ba:7d:0d:56:b1:15:82:c1:26:db:32:
d2:fc:5a:3a:07:72:c5:8c:ad:2b:68:bc:f4:c3:9f:0d:cd:f4:
dc:b1:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:23 2026 by rpki-client