Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: 2GamA2LgCZBQ1gYYktWomwERfQfDwbhsh9gkezaswno=
Subject key identifier: CD:FB:38:98:B7:47:DC:BE:C0:9D:59:EA:A0:13:92:50:0C:E4:12:AC
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 019D9A06D36A79B191A6EEFF7B4851D48EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: 4QErYyNxMj17fmmm_V9KhVEYnPs.roa (hash: H4wqYD+7ia6e/4/SeX93ZuX1r2stfSvamQFuWxwWz9g=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: XltSO7zpwMJL/FgpjeeXHzQMO3jGEqfQh1sVT/yC6YU=)
3: ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa (hash: ftNvK4quhd+aCIDNnGQHvGWOv6HTZuEG7taZaiTGHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d3:6a:79:b1:91:a6:ee:ff:7b:48:51:d4:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=cdfb3898b747dcbec09d59eaa01392500ce412ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:42:5e:3a:54:26:fa:b5:97:b0:09:03:2c:
ea:f0:65:a4:34:59:4f:84:70:66:ce:72:fa:d8:ec:
a2:0c:89:ee:d2:89:b3:8b:89:c2:d4:a0:51:3d:a5:
f9:47:06:3e:d3:74:aa:9b:44:59:9e:d6:de:ec:1b:
55:02:a9:ee:01:88:3a:69:ff:63:2f:fb:ce:04:ef:
02:b3:2b:8a:51:1c:09:2b:d8:65:fe:2c:37:53:80:
ed:33:8c:d6:a2:75:c2:8f:6a:27:e9:6e:51:ef:51:
bd:c3:b6:29:e9:c5:37:2b:c6:60:b5:d3:4a:21:69:
47:80:d1:21:e7:99:01:3a:bd:22:2c:35:00:a3:9c:
5b:5f:72:b2:33:9b:c5:7f:63:d3:08:23:6f:d1:82:
f6:e2:d2:ae:11:7d:06:9b:b5:a1:36:c5:af:15:89:
7f:a1:7f:61:4b:94:f3:8f:0a:99:41:81:5f:e2:12:
83:7e:9e:73:45:d0:3f:3a:25:c8:f1:ba:7e:85:31:
a9:89:54:3e:1a:50:e0:ee:b1:5b:e3:d7:ba:68:91:
45:60:8a:52:ef:a3:7a:2b:59:2e:a6:f1:ca:84:c5:
da:d1:92:2f:7c:d6:6c:3c:79:20:41:aa:fc:b6:1b:
c4:89:5c:03:ba:10:9d:48:7b:50:ac:d3:4a:09:8e:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:38:98:B7:47:DC:BE:C0:9D:59:EA:A0:13:92:50:0C:E4:12:AC
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:1e:4e:51:28:d6:24:8b:59:44:ac:07:d3:4f:fe:16:d9:
07:c6:b7:d5:84:3d:a0:cd:cb:46:d6:7a:32:f3:18:8f:f0:79:
5f:c5:b2:13:cd:08:c7:f2:e8:d2:62:b6:b2:c3:5a:57:bf:f1:
c2:33:77:1d:9a:b8:3e:cf:8f:71:50:49:eb:c6:62:b0:90:59:
ca:92:6b:2e:ce:7f:90:65:97:e8:3e:3f:69:e9:5d:15:f5:d6:
4d:9d:86:03:f8:44:29:c4:80:d3:5f:42:5a:ec:2e:7c:14:37:
b3:71:07:8c:18:c9:d2:af:ab:46:84:3c:67:f3:c7:35:ae:39:
61:c8:1a:86:e8:1b:19:72:2c:0b:d5:61:6c:74:ec:69:53:7d:
82:6a:09:4e:48:4f:09:1a:f2:76:c4:95:9b:05:2f:42:0c:26:
de:a0:88:56:0e:e9:95:d8:41:ad:42:27:ad:b1:91:76:0d:c2:
35:50:ea:d8:92:ed:56:b8:f6:e0:3c:d0:e2:5d:8a:b5:9f:8e:
b0:54:b6:c9:9a:db:c8:76:af:d1:90:ff:e5:3b:0d:86:e3:08:
74:8f:3f:11:9c:0f:65:ed:11:e9:cf:2b:ca:58:aa:2c:ee:ad:
8f:13:8f:8a:f2:fb:06:a6:51:3c:18:ca:61:7b:df:8d:07:48:
18:9e:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:06 2026 by rpki-client