Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier: mlQtjpWIY+FNcAW7yEscWO7EmpmWCisahyBcN+VJwkM=
Subject key identifier: A5:39:2F:19:27:79:13:21:64:D4:C6:45:80:08:29:7F:67:14:56:A5
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 019D98863D74A1598AA646F47FED890F3F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number: 0E08
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: Cyn38xr_aKjpDo4P5qrp-xma_-Q.roa (hash: EIt3b7IJ5biIXSp4ZF9k1ni8CNt6QRDhPAAZE5+8sT4=)
2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: iP+Pzk9f5/a6tbeS3NLtDe3+WxFrHtGDjYpC0scG6mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3d:74:a1:59:8a:a6:46:f4:7f:ed:89:0f:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=a5392f192779132164d4c6458008297f671456a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:bb:86:1b:03:59:79:cf:f2:cd:bf:54:49:
d4:57:79:9c:0c:69:29:50:ff:ac:5a:5f:2e:94:12:
0e:1d:0b:79:03:b9:fc:bd:39:06:88:0b:8e:9a:a4:
40:b5:0e:08:6b:9a:68:2e:b7:e8:d9:51:8b:a9:0f:
92:65:19:d8:4f:de:a6:eb:96:8b:25:5a:94:c5:fc:
a8:45:11:69:7f:d1:60:45:a8:79:6c:11:d3:e9:ea:
b6:ba:e8:44:16:b5:80:0c:13:54:fe:cb:28:38:29:
85:4d:d0:b3:70:7e:1a:cb:59:a0:e6:ba:5a:92:fb:
6e:3b:d9:57:f4:8b:3d:c2:fc:5b:3c:2f:d1:53:98:
80:8a:a7:90:d3:f9:73:f0:c6:90:4f:87:37:b4:bd:
53:77:4b:f3:97:b2:74:3c:32:bf:d2:15:89:29:6a:
61:37:c9:6d:5a:51:a1:a2:c8:66:51:71:3b:3b:f4:
10:95:74:1b:0e:bc:3f:bd:02:b1:26:77:be:37:9e:
9f:a6:d5:53:56:77:b1:96:db:b7:45:41:71:3c:1b:
08:09:21:a1:34:f5:00:25:75:dd:a1:54:65:28:fe:
79:49:91:82:3e:99:32:b1:16:0a:f6:a4:e8:96:26:
53:c3:31:7e:fe:6c:bb:48:f9:02:37:63:3e:96:6b:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:2F:19:27:79:13:21:64:D4:C6:45:80:08:29:7F:67:14:56:A5
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:ee:1d:6e:16:a0:2a:b8:fd:74:c9:cf:1a:bf:93:8b:4c:
e5:f7:e8:1a:0b:26:2c:1a:06:3c:8d:87:03:c1:4d:9a:9b:57:
1a:d0:df:a6:df:a0:70:5d:c0:49:af:3f:a4:38:cd:5e:9c:00:
ec:3f:13:56:ae:d7:88:0d:15:db:7f:e6:70:b9:de:65:1d:f6:
e7:a3:7c:02:75:56:94:0c:c7:8e:05:b4:42:82:2c:a4:12:f4:
a2:c6:43:47:e8:d7:b1:bd:d7:c3:ae:af:19:26:61:f6:f2:fe:
a2:58:7a:0d:cf:be:a2:6c:76:3f:1d:61:6d:2a:59:94:c0:24:
f6:b4:07:a6:76:13:87:32:e1:97:31:40:97:f4:6c:14:be:61:
c3:25:10:30:05:66:87:16:fd:d7:4c:50:7c:bf:d4:ab:07:34:
dc:c7:48:cb:50:eb:65:0c:0d:f9:89:97:ef:38:0d:46:33:69:
68:89:ea:cc:24:97:a2:7b:c5:fa:51:55:75:16:03:2a:b3:a1:
91:d8:99:9a:b5:c8:5f:5c:03:72:48:dd:ae:bc:4e:ac:d3:b2:
5b:c3:ea:67:37:ce:13:4a:b9:53:7c:4f:58:8b:e6:a4:f0:38:
7e:84:8a:13:5f:25:81:ae:8b:10:1d:0b:08:ad:6a:8f:fc:da:
cf:cd:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:41 2026 by rpki-client