Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: QonlexpTga/1gOzzocJcIJiKKed+YF/xFTyfm8Ev3Rg=
Subject key identifier: 5A:DF:0E:DA:5B:C3:75:29:EC:0C:F5:3A:B2:5A:4B:FF:55:64:CA:2D
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 019D99621F78F60B2CBF046C40D1C6195E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 155E
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: GolQryt9/28SuZFPu98ZGnCHpezinJOLVCojYYAcmH0=)
2: yx9kD1LZqyaIsOvaZePm4Qmu_lc.roa (hash: mBiEmcBw4gmmOpAdt+VnRKLKQFDXrLV0M/SqI72yrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1f:78:f6:0b:2c:bf:04:6c:40:d1:c6:19:5e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=5adf0eda5bc37529ec0cf53ab25a4bff5564ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:7a:28:2f:a3:81:d4:de:20:7b:94:c2:ad:
a0:0d:47:c1:d3:d0:ca:40:0a:e0:50:2c:33:13:e4:
0d:95:57:b7:b4:c0:26:25:55:46:77:76:93:94:04:
69:f0:0c:98:7c:46:0e:7d:0c:93:3e:64:f2:5e:d4:
36:a8:56:61:91:19:81:2b:da:7c:a0:09:51:21:71:
c5:ef:b6:3e:f1:ac:30:5c:c4:4e:50:96:ff:45:ca:
d3:ec:af:54:ee:35:b5:dc:a5:9f:ec:ef:9c:06:c1:
68:21:24:57:51:ed:0a:0d:89:ea:56:19:81:03:24:
59:e9:b1:3e:26:36:cc:93:ab:ee:51:8b:38:09:41:
2a:ad:6e:eb:93:c0:23:c8:11:d5:a5:e7:b2:b7:ca:
c2:71:8b:d4:af:9b:f7:1f:a5:f6:da:e5:11:9a:cb:
67:13:d9:69:64:c5:5e:2a:51:bb:a5:e5:46:3b:78:
d1:f6:3d:59:37:49:6c:cd:15:76:6c:f0:dc:27:d8:
91:b3:e3:80:b0:ae:18:7e:f7:f0:19:43:20:85:25:
e5:a4:a7:ae:8e:76:17:31:89:60:d9:a5:2c:74:14:
10:a2:b3:41:71:1f:d7:e9:6e:87:a5:1c:f6:c2:29:
01:81:f4:dd:18:38:84:10:d8:c6:18:46:55:1e:53:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:0E:DA:5B:C3:75:29:EC:0C:F5:3A:B2:5A:4B:FF:55:64:CA:2D
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:00:0b:20:92:21:1a:e7:a2:e8:47:e8:6c:a1:88:2e:6a:
57:52:fb:6a:7a:a4:d9:71:ed:09:1a:1d:7d:12:ed:fa:ef:13:
83:a3:64:ff:15:39:f4:9d:53:03:93:fc:d0:48:95:d3:e0:94:
24:f2:bb:ca:ae:66:6b:92:dc:1c:bf:29:bb:38:5c:0f:0c:96:
35:b5:f5:fd:2f:b7:85:88:fb:81:f7:18:c0:8b:9a:78:30:20:
c6:30:62:59:e5:8f:9e:01:19:24:32:b1:17:19:25:90:76:24:
9d:12:cc:3e:c8:d2:00:c3:64:af:42:ae:bd:d7:f2:93:00:bf:
2f:28:40:0e:bf:04:3e:47:4c:71:a5:0b:ca:0e:7d:06:40:c3:
11:dc:a1:37:1b:e9:93:8c:d5:f2:31:61:5d:93:ac:dc:33:52:
0e:3a:bf:88:10:6c:72:7d:17:79:74:ee:93:7a:48:6b:96:de:
30:25:7b:b5:b5:f4:38:87:e5:1f:71:f5:0e:88:23:a3:8c:3d:
d0:62:d0:4a:f2:e9:7b:41:09:d5:ae:30:41:78:96:b7:41:cf:
cd:97:77:be:bc:d1:86:8f:31:d8:0e:5d:08:47:35:a5:1f:07:
9d:e4:1d:80:57:0c:bd:67:3a:24:e5:97:3b:a9:db:6e:85:67:
c7:d3:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:53 2026 by rpki-client