Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: eee5goCr5s3d5bibJ/dEVIjaZa+C6g7Zt91adzxrWDA=
Subject key identifier: E2:E4:1B:BC:70:3D:08:8C:7B:31:7C:AB:98:4B:3B:AE:4E:00:59:A2
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 019FA862406B221F63C8788D50D61D13D226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: B5
Signing time: Tue 28 Jul 2026 11:00:39 +0000
Manifest this update: Tue 28 Jul 2026 11:00:39 +0000
Manifest next update: Wed 29 Jul 2026 11:00:39 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: iqqjqmvhEnsx+oDqYUoTcxgKEHA3fAO8Gomh0bGxftA=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:40:6b:22:1f:63:c8:78:8d:50:d6:1d:13:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Jul 28 11:00:39 2026 GMT
Not After : Jul 29 11:00:39 2026 GMT
Subject: CN=e2e41bbc703d088c7b317cab984b3bae4e0059a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:fb:7a:d2:f6:91:34:00:2e:63:54:ea:5a:
a3:1a:18:98:18:e3:2f:5a:06:c1:19:82:63:11:59:
65:12:34:ad:20:b9:96:e0:c8:81:87:83:26:c5:db:
a2:bf:e9:37:c7:34:f4:6b:cf:70:36:e7:8d:5f:4b:
4a:a4:35:0d:d3:45:77:50:a4:e3:1f:8a:d6:5c:be:
ba:ea:af:88:12:d2:1e:f5:53:27:dd:29:a3:74:95:
48:9d:47:5b:3b:6a:b0:34:86:b4:ad:b8:b1:bf:09:
dc:d1:92:9d:00:ca:3f:3b:bc:43:14:6e:0e:8a:01:
cb:25:0a:d8:84:70:1e:fc:3d:e4:fb:b8:c3:53:ee:
9a:c6:fb:a3:bc:a2:68:af:32:1f:b0:54:ce:50:53:
68:89:3d:34:47:90:ba:16:33:0f:56:ea:cd:35:1e:
b7:d5:22:1b:00:d7:c8:ab:a5:4c:ae:6c:15:e1:c5:
a5:e9:b6:b5:50:96:48:30:fc:fc:7a:b2:b7:5b:76:
01:af:3e:11:92:2c:62:58:77:aa:6a:fc:61:a3:ff:
c1:23:ac:51:76:e6:e9:aa:70:1f:74:e4:74:67:b1:
49:54:df:3c:7d:c3:5b:19:e9:64:53:9d:84:ca:11:
4d:c1:9c:1e:be:3b:8c:cd:7c:bb:83:1d:53:f0:7b:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E4:1B:BC:70:3D:08:8C:7B:31:7C:AB:98:4B:3B:AE:4E:00:59:A2
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:18:5f:d6:72:62:0f:79:80:2a:78:6a:02:a1:18:83:12:1e:
54:1a:da:5f:bc:bb:6c:48:c5:04:28:13:52:92:e8:bd:65:cb:
bd:04:06:ec:ed:db:5e:70:73:b1:52:3b:ab:e4:6f:74:04:96:
9e:9f:3a:ee:d3:1b:e1:6b:c2:23:4b:b4:d7:d6:40:89:f8:0a:
e3:48:d9:7b:0f:99:61:bf:24:4a:c8:18:de:6d:35:a0:87:53:
76:f3:73:1f:01:8e:84:59:e7:1e:41:da:6a:6e:be:fd:ad:c9:
df:59:31:82:d3:1f:21:55:58:91:ea:75:4e:c6:af:86:95:4b:
77:e2:ea:19:61:1c:93:1a:a1:a7:2e:96:21:cf:9d:ab:5c:1b:
ec:75:9d:04:53:94:95:00:4a:37:f1:97:aa:26:a9:22:f3:a8:
93:18:c2:d0:75:1d:4c:72:ec:0a:9c:f6:f0:ab:ff:1b:30:77:
b9:a1:3b:46:42:72:97:22:6a:18:ef:99:39:9b:63:70:26:cb:
46:b4:94:8c:bf:87:74:11:dd:f9:16:73:c2:5c:98:fc:8e:f9:
7a:19:e6:a8:0d:6b:05:b4:47:a0:a9:25:6b:85:cd:d9:d8:79:
c2:4b:ee:2d:09:91:a8:98:5f:1b:50:3b:6f:c3:74:a6:8d:11:
a7:de:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:37 2026 by rpki-client