Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: cHMeAh0RRaB1s43bpS9YUyP3azb14jAasZ7Keed8Z8c=
Subject key identifier: D2:4A:47:ED:9F:A2:55:7D:14:A0:77:7A:D6:E5:16:06:1F:16:73:51
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 019EBEB5A436C342BB9629228D2CED21B037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 3C
Signing time: Sat 13 Jun 2026 02:00:35 +0000
Manifest this update: Sat 13 Jun 2026 02:00:35 +0000
Manifest next update: Sun 14 Jun 2026 02:00:35 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: 4+6WYvDEGYepSgGPQf1DTC4Ty6PZfns4QxtiP12F/Vc=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:a4:36:c3:42:bb:96:29:22:8d:2c:ed:21:b0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Jun 13 02:00:35 2026 GMT
Not After : Jun 14 02:00:35 2026 GMT
Subject: CN=d24a47ed9fa2557d14a0777ad6e516061f167351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:13:46:76:9e:d3:83:51:80:6f:e3:fc:e2:
9c:6e:5c:7a:97:d9:dc:2e:aa:ae:27:f3:cf:df:0d:
3a:b9:1c:d6:fc:db:79:0f:3f:ac:5d:bd:e3:9c:d2:
10:9c:4b:5b:60:72:9e:29:31:c9:70:a8:4d:de:ab:
91:a4:e3:08:68:38:d4:cd:66:e1:d2:81:3d:26:13:
30:37:9a:ee:2f:44:f6:22:56:d3:29:40:91:d5:af:
6d:f7:b5:2f:6c:fd:39:0c:64:3e:07:09:2f:74:fa:
d3:97:cb:77:df:b2:d2:bb:15:f8:4c:0d:57:c1:f8:
b0:4d:cf:b5:69:21:0d:0a:dc:14:d5:04:e8:bd:69:
4a:d4:f2:61:22:99:03:3f:67:a1:0c:ce:19:5b:50:
33:42:1f:7a:96:52:80:bc:0e:1d:6c:a5:13:02:61:
00:0a:53:44:43:91:70:1f:de:de:da:71:e6:93:f6:
3e:0c:fb:0e:a9:0f:95:d3:80:c0:f0:ae:75:02:c3:
80:d0:d8:32:52:5c:95:e8:10:46:db:1c:fd:3a:65:
ad:a9:41:63:a3:45:8f:fa:ab:1e:82:e8:93:5b:76:
27:2f:b7:39:47:83:0a:6f:a8:04:cb:25:03:2a:0a:
8b:6e:d2:d1:69:a1:f3:e2:03:42:d7:88:e4:6d:8a:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:47:ED:9F:A2:55:7D:14:A0:77:7A:D6:E5:16:06:1F:16:73:51
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:16:d2:bf:bf:78:1b:e6:c3:c1:ed:f1:04:71:02:02:74:
0a:17:bf:88:cd:7a:20:e7:72:45:37:b0:c4:d5:f6:f1:f0:4c:
a3:d1:a5:28:43:62:91:31:61:c6:bd:0d:e6:29:43:e0:4c:4a:
82:54:7b:37:e6:01:eb:6e:f3:4a:91:98:50:cc:14:1a:0e:ee:
7f:42:f0:3a:e2:36:83:93:5c:d5:58:c4:4e:6c:8d:77:d6:08:
ac:51:7f:fd:f5:6c:5f:de:44:4c:58:65:3a:9f:f0:61:99:80:
b5:fe:f4:c5:c5:3a:51:a8:71:3b:c0:0c:b7:19:76:b0:cb:3d:
ce:e5:31:3d:70:ce:19:45:60:e0:60:03:d4:74:62:6b:ce:88:
08:ac:97:95:9c:7e:82:cc:57:4c:70:6e:34:bd:2e:d0:46:28:
4b:5f:3a:ef:42:02:2f:b5:4a:0b:f1:db:bb:f8:81:c1:2b:e6:
7b:8a:70:d3:b0:72:f0:fe:55:bc:e3:86:71:54:d5:27:46:b2:
b4:0c:1c:03:04:34:cf:94:83:27:07:a4:77:22:31:73:d1:17:
7b:bf:af:70:1b:1a:ca:7e:da:cb:fa:62:af:ba:2f:0a:59:0a:
9e:a9:16:6e:d1:ca:3e:25:b2:f8:5e:6d:07:be:ac:4c:e4:ba:
3b:ec:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:09 2026 by rpki-client