Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: PoHsKVkhiIprg04+WZf3wokbnmDWWtE6PL51EGdAG2I=
Subject key identifier: 01:E8:BD:09:2B:99:AC:3D:6B:19:83:E1:C1:1F:A8:92:26:26:C9:21
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019D9D086E3E6C5A7364B3AB18F967B1DA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 043F
Signing time: Fri 17 Apr 2026 20:01:08 +0000
Manifest this update: Fri 17 Apr 2026 20:01:08 +0000
Manifest next update: Sat 18 Apr 2026 20:01:08 +0000
Files and hashes: 1: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: Qw37rZIxsdPJwOApHDA0DIkbE2lLnJ5YX/qT+i2XUJU=)
2: aiiRtiYyMK2pR69dLCHHrDF9gJE.roa (hash: GHDYFSzrpoLIOpX6iS/EkCdY5TaFBOcxhHWzm9AoCPo=)
3: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (hash: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:6e:3e:6c:5a:73:64:b3:ab:18:f9:67:b1:da:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Apr 17 20:01:08 2026 GMT
Not After : Apr 18 20:01:08 2026 GMT
Subject: CN=01e8bd092b99ac3d6b1983e1c11fa8922626c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:27:6f:89:d8:92:87:19:69:8a:dc:b3:eb:
de:34:fa:1e:84:27:98:b7:df:4d:e9:2a:3e:86:cf:
08:22:9a:3f:4a:15:89:82:04:cf:0f:9f:b1:64:cd:
74:72:7a:62:b3:39:d3:39:ad:b2:4f:5f:cd:65:e3:
cb:85:97:90:2b:8f:95:86:73:5a:1a:36:61:34:0f:
82:dd:14:6b:f4:41:d8:84:cd:85:8a:32:97:e0:10:
cf:d7:0b:fc:91:e0:b1:60:80:92:79:32:39:58:27:
e8:0d:b1:13:be:9c:60:c2:97:bd:4b:a2:46:ad:7d:
a7:4c:d2:5e:15:c0:0a:60:1b:21:ae:dd:1f:09:b8:
62:0f:44:3e:43:6c:16:e0:43:0f:67:7a:bf:56:80:
ce:ae:bf:63:e3:47:05:a2:70:97:f5:e3:39:f3:d3:
e4:06:35:29:a6:4c:9a:12:81:9d:bd:2e:42:d8:ee:
c3:e5:19:7d:c3:da:db:83:06:e8:e2:7d:8e:22:a6:
f0:74:04:df:f9:bc:d5:38:e0:00:d2:41:96:12:8d:
2c:dd:f9:d3:1e:7f:15:a1:ad:9f:96:3e:2f:57:ea:
a5:c2:1d:33:06:7d:d0:bc:8c:55:9e:ec:f3:03:26:
b3:74:fa:8c:ea:7d:01:33:87:c1:be:a1:f2:e1:f5:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:BD:09:2B:99:AC:3D:6B:19:83:E1:C1:1F:A8:92:26:26:C9:21
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:61:07:63:fe:b9:1b:e3:7e:2e:98:42:76:57:cb:ed:86:
b8:27:78:ba:87:85:a2:ed:55:1e:f9:aa:64:0c:fe:77:b5:a6:
01:4d:e6:8f:2a:82:d3:13:1f:af:f4:7b:fc:4d:39:30:33:90:
5f:e8:93:c0:c4:ff:74:44:01:04:85:06:4a:8c:2c:76:18:fe:
38:3f:a9:61:f3:72:5e:c1:5f:b2:83:46:99:20:58:18:1d:2d:
4a:a2:df:81:c9:0c:58:77:d3:f2:94:77:1b:71:78:95:72:a9:
de:9a:8b:d4:35:f0:2f:ef:2a:2e:18:de:88:c8:03:05:8e:0a:
e7:15:fa:b0:ce:91:20:40:c0:f8:a3:25:4e:fd:51:a0:c9:88:
89:ec:bd:19:35:4e:36:07:ef:b6:11:1f:99:57:52:c1:95:f6:
bd:10:26:7f:f9:53:9d:5a:6f:bd:2b:64:88:4f:ab:7b:67:48:
d3:31:22:52:4b:b0:c8:20:0d:e5:67:c8:72:d7:aa:9e:96:c5:
09:4b:cf:43:0f:8b:ea:6a:dd:56:6a:4f:a2:3e:e6:d2:8c:ae:
e1:05:70:65:33:f7:1b:18:bd:52:c1:b3:39:fa:00:b0:0a:4b:
1d:ed:aa:4b:80:1d:d8:a7:ce:65:19:87:68:f9:f7:0b:86:8f:
f7:58:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:38:55 2026 by rpki-client