Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: BzHMUqrX1NPCRVMUBdtq9DOFWyRMWe51b9bA9o2kqrw=
Subject key identifier: 87:7A:F9:B2:BF:86:BE:69:F3:AB:CC:7F:EF:CD:EA:AF:78:33:51:63
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01A13A800F223F5455BC21D943BDCBC7D97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 1997
Signing time: Wed 14 Oct 2026 13:00:33 +0000
Manifest this update: Wed 14 Oct 2026 13:00:33 +0000
Manifest next update: Thu 15 Oct 2026 13:00:33 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: dUHWWZiYvNf/k7lv4g0m6KnAgrXPjaWNz3tPXJRKQqY=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:80:0f:22:3f:54:55:bc:21:d9:43:bd:cb:c7:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Oct 14 13:00:33 2026 GMT
Not After : Oct 15 13:00:33 2026 GMT
Subject: CN=877af9b2bf86be69f3abcc7fefcdeaaf78335163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:cc:7a:75:b9:46:18:2c:7a:a3:07:9d:24:
59:ce:1a:db:be:25:15:84:0a:f6:82:0e:0f:1c:ad:
4f:65:ce:eb:89:9c:e1:e4:68:5d:e9:c9:f8:dd:a5:
c3:c7:4f:f6:39:da:4a:f7:a3:78:e9:20:d4:c4:9e:
21:44:e2:5b:6c:ac:61:a5:17:bf:11:26:26:9e:1c:
9d:49:8b:86:02:b6:c8:a9:03:38:dc:e9:c1:40:2f:
a7:a4:fb:41:30:83:78:80:ba:0b:fb:29:fe:15:c3:
b9:c9:3a:a3:a9:6b:5a:61:d6:8f:b2:ae:70:e2:f6:
09:16:9f:6b:f5:6a:7e:6d:e1:7c:02:df:3a:46:87:
bd:75:69:43:a8:d6:a5:0b:41:c5:e5:80:8f:01:06:
90:bd:8b:bb:22:db:08:94:86:ad:40:e4:ad:db:86:
4e:a7:ff:49:60:a5:b0:34:e4:89:f7:94:68:a5:82:
c7:1e:0c:8e:ef:f0:d3:46:e6:c4:1e:ea:61:16:4d:
eb:e2:48:92:e6:09:b6:cb:a0:ff:88:0d:9c:37:2e:
60:09:85:8c:79:f0:d2:be:63:db:49:98:29:c5:ed:
87:b5:ac:e9:b9:d1:8f:0a:d0:0c:6b:41:fe:49:53:
cd:71:15:9d:95:5c:e8:8c:17:c4:03:9d:bc:b1:72:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7A:F9:B2:BF:86:BE:69:F3:AB:CC:7F:EF:CD:EA:AF:78:33:51:63
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:bd:78:b5:46:96:fb:9d:e5:6f:92:6e:3b:88:dd:c0:8e:
94:06:f1:8c:c5:58:8d:a6:64:83:97:42:be:60:7e:2c:83:d6:
1e:3d:5a:d1:26:18:44:60:26:c6:be:e2:16:49:e9:48:30:da:
d9:a6:54:66:a1:15:5b:ef:68:0d:b9:f4:63:f5:6b:14:59:5b:
be:25:89:2e:7a:2f:84:99:68:f2:38:e4:7e:af:94:70:c8:6f:
4c:ec:3a:ce:31:1e:10:55:b5:ca:5e:1b:9b:81:87:ab:7a:bb:
f9:ee:52:21:d5:60:d2:cd:72:3c:37:c3:02:fc:17:99:fb:6d:
49:28:e3:eb:b9:73:10:8c:59:3c:9e:7c:30:69:2a:c0:18:5c:
b5:3e:af:02:86:64:ed:c9:05:c9:a8:bb:10:cb:13:61:90:74:
11:e1:45:d9:be:14:21:c2:52:9f:91:d3:d4:9e:fe:ad:3e:6f:
48:24:ba:00:4b:de:70:37:2f:6e:0a:51:54:6c:0f:05:42:86:
5e:28:f8:03:bf:b0:d2:62:ad:cf:f4:bd:69:47:d4:e0:ce:1f:
bb:75:60:7f:02:12:91:0c:06:07:89:0d:38:a3:11:e3:4c:d9:
fc:3f:0c:8c:d8:be:29:e6:34:1a:d9:52:c1:5d:07:9e:4b:82:
a3:03:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:37:32 2026 by rpki-client