Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
File: OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft (raw, json)
Hash identifier: Wz+VH0VQCCNbOUe+/i9j1+rUxKEKt2FlKec0zlAxnqM=
Subject key identifier: 43:5F:ED:67:42:3C:67:55:05:9E:44:A2:FE:BE:1B:C1:F5:29:21:4C
Authority key identifier: 39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
Certificate issuer: /CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Certificate serial: 01A0C44502C8F90E64A3A4614D81C32B4334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
Manifest number: 0182
Signing time: Mon 21 Sep 2026 14:00:51 +0000
Manifest this update: Mon 21 Sep 2026 14:00:51 +0000
Manifest next update: Tue 22 Sep 2026 14:00:51 +0000
Files and hashes: 1: OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl (hash: s0ltBk6Dq7VoQI9L93n8i0CMx5qqqrtIpHX0cedSnQw=)
2: c0Vk60kJ7ueTPIokv7qGtH3eTTQ.roa (hash: O+dHMuQMe/fBcOZ5bxLhWVDzmIw1sCX/tFC/j0yj2qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:02:c8:f9:0e:64:a3:a4:61:4d:81:c3:2b:43:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Validity
Not Before: Sep 21 14:00:51 2026 GMT
Not After : Sep 22 14:00:51 2026 GMT
Subject: CN=435fed67423c6755059e44a2febe1bc1f529214c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:e4:49:a9:11:20:27:66:bd:9e:81:d5:1e:
17:85:e5:cd:10:f8:bd:36:a3:f2:e1:89:26:01:32:
6f:4d:b8:48:f5:7a:79:08:9b:22:a3:26:01:7b:76:
a6:3e:7e:dc:00:42:d2:30:6e:26:98:17:a0:01:1a:
c1:9d:be:10:cc:1e:6c:56:ce:aa:6e:e2:b2:78:2b:
49:d3:f9:0d:92:3f:1e:6a:d6:ef:fa:e9:d5:be:a0:
f8:b7:4a:79:e6:39:f0:d7:83:5a:8c:db:00:53:39:
b6:15:28:8c:85:f6:55:0f:e3:fc:94:e4:70:f1:ca:
ab:c8:3f:e3:6c:11:04:31:c1:04:ce:3f:a9:9f:39:
29:65:a9:68:c9:79:e9:01:d4:c1:da:79:cf:c2:9c:
ba:84:d0:47:75:30:0d:82:49:8d:1c:90:c6:26:15:
70:d9:9c:fe:56:9e:80:70:e5:40:72:47:f3:44:1b:
34:31:c5:57:cb:0a:ea:6a:6b:89:e9:7e:65:0c:c5:
63:b5:cf:1c:9f:40:31:13:ee:ad:d9:be:ef:f9:fb:
e5:74:1c:04:55:23:64:b2:39:fd:71:9a:43:70:36:
57:6b:61:f0:ef:98:4b:62:6a:6d:d7:bd:b8:a1:99:
fc:aa:73:1b:c9:fb:8f:e6:a4:db:9d:a8:0d:ea:fd:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:ED:67:42:3C:67:55:05:9E:44:A2:FE:BE:1B:C1:F5:29:21:4C
X509v3 Authority Key Identifier:
keyid:39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:82:7f:75:f3:7e:07:0e:6c:f4:9b:f9:6e:39:e0:2a:e6:
ad:48:95:a3:3b:ed:a0:76:52:18:95:e3:d6:16:f7:15:79:16:
da:b9:96:bb:6a:80:58:e5:e1:2a:48:42:02:b8:a6:36:58:13:
3e:06:fa:3b:a6:42:42:ed:a4:3d:92:13:05:60:69:3b:b4:a2:
6f:3d:17:62:fb:a7:d2:21:26:7a:3b:ae:f4:0f:95:96:a1:eb:
d2:cf:c9:20:16:eb:87:90:8a:6f:38:92:00:61:86:65:91:37:
f6:3c:d8:fa:74:5b:b9:7c:a1:16:eb:3e:9b:ae:0c:9a:d0:ca:
54:e8:38:f6:54:6f:b4:7a:7a:80:a6:1d:0f:f0:bd:ab:04:7e:
51:ef:ee:97:a8:8e:c4:3f:e8:25:8a:e0:5d:17:e9:ec:73:31:
9d:0b:9c:82:25:a7:48:a6:66:e9:ec:7d:29:bb:6c:05:7c:ad:
30:24:38:07:11:0c:40:64:ea:d1:50:45:ab:b5:6f:30:f3:0f:
d1:b1:dc:e1:4f:cb:d8:36:1c:c1:01:ff:d0:cd:bf:52:9b:15:
92:92:d1:ee:81:ef:c9:6d:9f:b3:72:38:9a:99:fb:5d:25:34:
a6:5b:2f:15:96:eb:4a:55:86:06:e9:86:60:c5:89:0a:1d:de:
77:7e:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:51:53 2026 by rpki-client