Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier: cwTdj1bxRKO4FpTP2IpDNbwCkt6k9OUQk5DW7EEqQfw=
Subject key identifier: B4:4B:9B:0B:9D:7D:1A:D4:46:19:6B:F3:C3:F8:38:3E:2A:94:B5:38
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 019CACEBD2E1CEE5EECFCAA0223240D35175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number: 0D8E
Signing time: Mon 02 Mar 2026 05:01:01 +0000
Manifest this update: Mon 02 Mar 2026 05:01:01 +0000
Manifest next update: Tue 03 Mar 2026 05:01:01 +0000
Files and hashes: 1: Cyn38xr_aKjpDo4P5qrp-xma_-Q.roa (hash: EIt3b7IJ5biIXSp4ZF9k1ni8CNt6QRDhPAAZE5+8sT4=)
2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: hWLfY2REBvPehPrFG5jrB681ZtxApZ0WgJ0OyTbsRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d2:e1:ce:e5:ee:cf:ca:a0:22:32:40:d3:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Mar 2 05:01:01 2026 GMT
Not After : Mar 3 05:01:01 2026 GMT
Subject: CN=b44b9b0b9d7d1ad446196bf3c3f8383e2a94b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:8b:a7:be:0a:6e:3c:02:d7:57:8f:fc:9e:
14:a4:03:e6:5b:47:af:00:e4:43:42:cd:ce:7b:a9:
81:64:5d:17:58:4b:a7:6a:de:a9:8a:e4:b1:ca:78:
78:aa:82:a2:43:99:09:67:be:73:89:f9:ca:48:dc:
60:c1:22:1a:97:b6:52:fe:a1:1c:e1:99:bc:41:f6:
4c:aa:5e:3c:ef:b7:23:16:d8:e3:d0:e6:50:73:d8:
a8:43:20:fc:a7:81:23:8c:ab:aa:1e:d1:fc:43:76:
64:07:d7:8a:d4:9a:82:09:81:c9:d3:52:5b:59:23:
05:0a:31:62:90:90:e7:a7:d4:fb:c6:94:e4:8e:f8:
44:32:17:c0:3b:b3:ea:b2:b5:4f:25:44:46:bf:52:
49:cd:9f:f9:46:da:8c:2f:3f:f2:74:88:f2:a0:c7:
10:09:15:8e:16:88:fc:6f:83:7c:d1:82:0b:b2:8b:
09:05:13:8e:1f:a6:00:19:b9:bb:dd:a2:cc:ec:4b:
26:09:cd:6e:09:a3:f4:16:43:60:a2:76:60:e9:5b:
44:b0:4e:86:a2:6e:5f:49:89:be:9b:16:14:7c:24:
7d:26:02:28:9b:6e:0d:ae:68:c5:b1:74:06:d8:6f:
21:e3:c8:26:a0:5a:13:22:55:41:ce:91:f9:8b:9a:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:9B:0B:9D:7D:1A:D4:46:19:6B:F3:C3:F8:38:3E:2A:94:B5:38
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a7:00:3c:30:1d:71:38:a8:db:6d:12:63:4a:45:91:82:ac:
9c:ad:e4:e7:4e:0b:3d:1c:25:08:8a:6b:c8:02:05:49:e5:3c:
7f:f6:59:14:bb:7d:ea:9c:42:21:18:17:f9:ce:e4:d0:a7:48:
8a:14:13:69:93:e0:38:87:49:37:3c:f7:f1:a7:4e:92:6c:15:
5f:ea:c1:3a:bd:f5:16:80:e1:7f:b1:50:38:97:e4:34:a0:66:
87:b7:0b:7f:56:a9:bd:12:a2:13:2c:9f:d7:fb:84:e1:64:47:
c7:2c:72:5a:72:e3:c3:9a:25:07:12:4b:88:9d:77:ef:f0:a7:
82:ac:72:8c:c7:c0:ce:41:8d:9f:1c:d8:a4:bb:d1:4e:1f:af:
de:7a:b8:88:76:75:6b:09:b5:4b:8c:67:1b:b4:a5:6e:45:d8:
a7:67:84:c7:13:1b:c7:65:e3:51:e6:e9:04:17:0e:5c:b9:cf:
b7:97:e8:e5:63:65:01:d8:b8:2d:aa:4a:16:59:eb:39:d9:bc:
af:de:57:a0:6a:63:ec:70:f9:56:1f:17:a4:be:db:08:4b:6c:
ca:40:88:15:7f:d3:10:04:92:60:bb:8f:b7:0e:68:1b:5d:29:
3e:37:12:bf:2c:23:f6:8c:e2:39:77:4a:b5:87:65:06:93:91:
42:31:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:04 2026 by rpki-client