Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: /YCQWJ8GgCjylTyzhWBN0kUhSiFdh9lonYi2xj9g+ag=
Subject key identifier: E3:00:9C:8B:B3:AB:D8:6C:3A:4B:7A:CC:33:21:E0:87:FC:C6:5B:37
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 019CABD96F66F63DFE7383EFAB9D406A5816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 14E3
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: nvqVW/6j3FfWLJDF8qdnq6WiZLJ4rx8HAfDLQEH5JmU=)
2: yx9kD1LZqyaIsOvaZePm4Qmu_lc.roa (hash: mBiEmcBw4gmmOpAdt+VnRKLKQFDXrLV0M/SqI72yrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6f:66:f6:3d:fe:73:83:ef:ab:9d:40:6a:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=e3009c8bb3abd86c3a4b7acc3321e087fcc65b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:be:f2:2f:c1:de:b1:1a:b0:29:e9:57:12:
70:56:93:73:1e:c7:56:1c:03:96:7d:ce:13:df:32:
40:4a:3c:ca:08:53:44:08:f9:7c:f6:b3:ed:25:69:
40:c2:8b:20:18:de:d7:5d:e1:66:fc:77:14:f6:38:
08:45:a3:41:6f:17:d8:1e:f4:72:b8:99:bb:2a:1d:
d4:39:13:5b:a5:42:3a:63:68:5f:ee:79:30:89:7d:
f8:fe:1d:e2:f2:89:be:c2:d4:37:28:29:48:76:1d:
fa:8f:3e:9d:e1:72:74:41:a2:dc:90:78:da:e0:d2:
5a:99:93:84:68:10:b8:8c:c9:02:1f:80:10:2f:69:
15:e4:38:ff:3d:6d:52:91:ec:f2:92:1d:4f:df:88:
c7:b1:ea:db:55:ef:37:c2:d4:1d:4b:2b:4a:3a:97:
62:dc:a9:9a:35:e6:05:5e:d2:3c:bb:05:62:3e:6a:
e0:72:4e:57:68:a3:ae:6c:42:80:e8:c0:09:b1:6b:
c4:3b:0d:3a:1e:22:7a:1c:29:18:d0:f5:a8:73:1d:
29:93:00:a1:9f:66:3c:ea:5e:74:da:e9:81:10:67:
31:c7:42:fb:46:20:61:c5:47:4b:4b:46:f4:10:15:
33:14:c7:5a:f3:ce:d0:d0:00:0c:93:b0:5e:e0:05:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:9C:8B:B3:AB:D8:6C:3A:4B:7A:CC:33:21:E0:87:FC:C6:5B:37
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d5:e3:6a:99:8e:23:96:64:ea:00:01:62:59:e8:d5:f3:39:
19:ea:0a:7b:4f:30:51:aa:96:e2:5f:6a:0c:69:f1:74:d8:7a:
5c:0a:0d:24:e9:20:6c:28:f3:c2:17:e1:89:cd:e8:f0:54:ac:
ad:0c:d1:18:d4:41:e0:cc:b9:2a:e9:99:3b:4b:5c:73:29:a6:
9c:55:2c:cb:6a:7a:19:c2:37:d9:79:3c:fd:4c:d0:80:eb:d8:
9a:15:e3:b1:10:2f:79:43:ea:71:8f:11:39:cc:a0:43:95:e3:
1a:99:48:d9:54:02:67:79:6c:db:eb:b0:85:42:cd:fb:ce:02:
8b:e7:2c:01:e4:54:37:3c:01:0c:fc:83:2f:fc:89:f7:d4:cd:
d3:3b:61:e5:ca:3e:4f:4a:6f:96:94:e2:94:29:d9:1f:38:ee:
14:a5:ab:c1:57:0c:31:53:f8:f4:a6:b6:8e:5c:be:13:0c:ca:
fe:a2:7e:93:70:bb:2e:59:84:da:02:aa:59:9b:4a:e4:ec:6b:
13:6b:0a:86:cd:98:db:81:30:d8:70:56:94:c0:05:6a:36:d2:
52:8d:68:40:64:5e:78:b7:a9:bb:6b:df:56:b1:04:53:b8:c8:
a0:2a:45:bf:a0:01:2c:b6:fc:d6:bb:77:3f:69:7a:b5:91:c9:
4a:3c:c7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2W9m9j3+c4Pvq51AalgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTNhZjUwMTQ0OTliMmZiNWNkMmMxZTY4YTI0ZmY4MjU2
ZDBkMGQwHhcNMjYwMzAyMDAwMTE5WhcNMjYwMzAzMDAwMTE5WjAzMTEwLwYDVQQD
EyhlMzAwOWM4YmIzYWJkODZjM2E0YjdhY2MzMzIxZTA4N2ZjYzY1YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofS+8i/B3rEasCnpVxJwVpNzHsdW
HAOWfc4T3zJASjzKCFNECPl89rPtJWlAwosgGN7XXeFm/HcU9jgIRaNBbxfYHvRy
uJm7Kh3UORNbpUI6Y2hf7nkwiX34/h3i8om+wtQ3KClIdh36jz6d4XJ0QaLckHja
4NJamZOEaBC4jMkCH4AQL2kV5Dj/PW1Skezykh1P34jHserbVe83wtQdSytKOpdi
3KmaNeYFXtI8uwViPmrgck5XaKOubEKA6MAJsWvEOw06HiJ6HCkY0PWocx0pkwCh
n2Y86l502umBEGcxx0L7RiBhxUdLS0b0EBUzFMda887Q0AAMk7Be4AUqJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMAnIuzq9hsOkt6zDMh4If8xls3MB8GA1UdIwQY
MBaAFDhTr1AUSZsvtc0sHmiiT/glbQ0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5Zjgt
ZGNiNTZhY2I3NzdmLzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5ZjgtZGNiNTZhY2I3Nzdm
LzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdXjapmO
I5Zk6gABYlno1fM5GeoKe08wUaqW4l9qDGnxdNh6XAoNJOkgbCjzwhfhic3o8FSs
rQzRGNRB4My5KumZO0tccymmnFUsy2p6GcI32Xk8/UzQgOvYmhXjsRAveUPqcY8R
OcygQ5XjGplI2VQCZ3ls2+uwhULN+84Ci+csAeRUNzwBDPyDL/yJ99TN0zth5co+
T0pvlpTilCnZHzjuFKWrwVcMMVP49Ka2jly+EwzK/qJ+k3C7LlmE2gKqWZtK5Oxr
E2sKhs2Y24Ew2HBWlMAFajbSUo1oQGReeLepu2vfVrEEU7jIoCpFv6ABLLb81rt3
P2l6tZHJSjzHVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:48 2026 by rpki-client