Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier: CNm3QC4UBWTkD4bUxGT03Ixh1z4TZX1mXKGHyjaiueY=
Subject key identifier: 4C:96:00:4B:B1:BC:10:B0:58:42:00:97:70:57:7A:14:B4:FF:63:0B
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial: 019CAA2148C87DC057810B131D6EBBE588CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number: 10F2
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: uxzCe/kxRLFascU/iCiar9k8jtAVZTDq0ccSSoDQsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:48:c8:7d:c0:57:81:0b:13:1d:6e:bb:e5:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=4c96004bb1bc10b05842009770577a14b4ff630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:9a:6a:87:2d:29:56:9a:72:e9:6b:bf:59:
1d:d9:4b:7d:e4:bf:49:50:85:bb:79:3e:ad:c3:19:
20:57:df:f4:30:53:6f:01:ff:3e:81:3b:a6:c2:17:
2c:21:82:ba:6a:12:da:11:42:9b:55:8d:8a:8c:ce:
33:52:2e:22:94:0c:bb:65:ec:5c:3d:5d:9b:42:24:
52:8f:61:01:2f:f1:3b:0e:a9:0f:ee:8f:c1:04:f8:
b9:e0:7d:da:0b:3b:bd:1c:be:19:77:03:9a:c5:b5:
6d:6e:c7:9a:a8:e5:49:74:56:d2:16:57:79:f9:2f:
c8:e9:bc:14:93:0e:d1:fe:3b:ca:46:a3:47:64:8e:
8c:39:d2:0c:e2:e0:5e:fa:1e:74:ac:fc:91:e9:22:
43:5f:50:49:1f:22:a7:3b:ca:3a:5d:2d:c0:8a:17:
33:71:b8:ef:d9:9e:f8:2a:48:7f:1c:e1:0a:ca:db:
5c:67:ec:77:85:29:25:97:a0:68:17:a6:f2:93:e4:
69:06:73:fa:6f:97:a4:49:e2:e2:09:c0:02:10:54:
a9:d4:4f:77:95:b4:40:53:19:95:85:fa:43:a5:56:
b2:a4:90:3d:00:9e:b5:69:4c:84:a2:94:8c:dc:28:
a2:6c:1c:f8:82:5a:9d:18:8e:c2:63:e3:87:3b:4c:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:00:4B:B1:BC:10:B0:58:42:00:97:70:57:7A:14:B4:FF:63:0B
X509v3 Authority Key Identifier:
keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ee:c9:0a:b9:a0:c3:b7:cf:cd:b8:f5:d0:be:b1:52:a0:4f:
8d:1d:5d:e8:58:9d:e4:30:53:fb:03:b3:30:94:7c:9f:2f:c2:
00:8a:9f:51:06:2b:84:a1:d9:d9:82:1b:b4:26:df:6f:16:a0:
a4:8a:5d:c7:33:96:ca:97:af:cc:45:a6:b5:e1:c4:2f:25:16:
90:5f:6a:67:11:82:68:e4:a5:26:81:c5:ed:a6:1f:09:5d:f0:
cf:43:4d:37:94:84:a1:d7:ed:ac:b2:a8:a6:3e:25:49:7b:1c:
9d:c2:34:85:14:06:59:de:f1:10:4b:79:b8:44:10:f3:b5:3b:
a9:3e:d0:4b:41:6d:a2:5d:f2:2b:4a:a1:a2:c3:e0:90:48:79:
9e:dc:d2:7b:7b:ea:b4:d4:dd:b4:12:ca:fd:8e:34:aa:02:02:
0c:32:af:67:c5:cb:b5:27:d1:1a:50:85:3f:58:0d:a3:4b:21:
ff:39:f5:33:45:a7:03:67:a5:5d:77:e9:ce:f2:29:f3:99:09:
b4:bc:84:89:fc:29:16:a1:c3:83:b1:54:06:73:b6:52:d7:af:
8d:90:7f:50:33:25:d2:b2:23:81:50:09:7e:42:bc:4a:36:99:
29:b7:19:6b:e3:61:16:96:6e:2a:a3:7b:c8:1a:a8:4a:6b:98:
11:9f:9e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUjIfcBXgQsTHW675YjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm
ZDRhZWMwHhcNMjYwMzAxMTYwMDMzWhcNMjYwMzAyMTYwMDMzWjAzMTEwLwYDVQQD
Eyg0Yzk2MDA0YmIxYmMxMGIwNTg0MjAwOTc3MDU3N2ExNGI0ZmY2MzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbKaaoctKVaaculrv1kd2Ut95L9J
UIW7eT6twxkgV9/0MFNvAf8+gTumwhcsIYK6ahLaEUKbVY2KjM4zUi4ilAy7Zexc
PV2bQiRSj2EBL/E7DqkP7o/BBPi54H3aCzu9HL4ZdwOaxbVtbseaqOVJdFbSFld5
+S/I6bwUkw7R/jvKRqNHZI6MOdIM4uBe+h50rPyR6SJDX1BJHyKnO8o6XS3Aihcz
cbjv2Z74Kkh/HOEKyttcZ+x3hSkll6BoF6byk+RpBnP6b5ekSeLiCcACEFSp1E93
lbRAUxmVhfpDpVaypJA9AJ61aUyEopSM3CiibBz4glqdGI7CY+OHO0w0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyWAEuxvBCwWEIAl3BXehS0/2MLMB8GA1UdIwQY
MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct
Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx
LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe7JCrmg
w7fPzbj10L6xUqBPjR1d6Fid5DBT+wOzMJR8ny/CAIqfUQYrhKHZ2YIbtCbfbxag
pIpdxzOWypevzEWmteHELyUWkF9qZxGCaOSlJoHF7aYfCV3wz0NNN5SEodftrLKo
pj4lSXscncI0hRQGWd7xEEt5uEQQ87U7qT7QS0Ftol3yK0qhosPgkEh5ntzSe3vq
tNTdtBLK/Y40qgICDDKvZ8XLtSfRGlCFP1gNo0sh/zn1M0WnA2elXXfpzvIp85kJ
tLyEifwpFqHDg7FUBnO2UtevjZB/UDMl0rIjgVAJfkK8SjaZKbcZa+NhFpZuKqN7
yBqoSmuYEZ+exw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:48 2026 by rpki-client