Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
File: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft (raw, json)
Hash identifier: tjveivt5EGnTilkRKAFRXW4+wFFF+N5frxJBZPo1i2o=
Subject key identifier: C3:62:14:B5:3B:1A:D0:9F:A5:6A:64:54:5D:21:97:CA:59:E2:2C:86
Authority key identifier: 38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
Certificate issuer: /CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Certificate serial: 01A0D3B8D179DE93D82B5DD5668E2C646D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
Manifest number: 0150
Signing time: Thu 24 Sep 2026 14:01:39 +0000
Manifest this update: Thu 24 Sep 2026 14:01:39 +0000
Manifest next update: Fri 25 Sep 2026 14:01:39 +0000
Files and hashes: 1: OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl (hash: dRqthmRZlgCkTXCO99CuyGFjGc5Vu/p2m/jDIIzf9eg=)
2: Z_kHEntOIQqjR21HRSB9RF2Aq7g.roa (hash: s3eLUqgicT63J5zVzD7cknBmxWjUqrgO3NDTUjsw58M=)
3: sb0SxUD3ZFsk6wBgpXXdBIs3yLI.asa (hash: hhdlz6wW0oA01bYHCj+mN8mXe1gLk1XCAzhSTfLNF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:d1:79:de:93:d8:2b:5d:d5:66:8e:2c:64:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3855cbdfc67b1f5501bd22ba03197829253c425a
Validity
Not Before: Sep 24 14:01:39 2026 GMT
Not After : Sep 25 14:01:39 2026 GMT
Subject: CN=c36214b53b1ad09fa56a64545d2197ca59e22c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:3a:78:99:eb:40:cd:58:c9:96:1c:8b:05:
df:0e:52:5d:bf:b7:20:b7:73:c7:8e:c6:ea:2b:d9:
d8:57:77:a2:fe:3d:b3:cc:be:ed:11:ee:ed:8c:ce:
87:2a:ae:89:f6:48:8f:cc:8f:4f:c7:f3:70:ea:d7:
8e:8b:e0:93:52:d5:78:d2:4f:7b:30:9f:c9:d4:ad:
a0:a7:62:2d:2d:2f:d1:9e:f2:75:9b:33:b9:ba:c3:
59:76:56:61:a4:fb:21:84:1c:04:ab:93:c9:ae:76:
11:cc:5a:41:73:ad:c6:75:84:16:65:1f:36:e7:4d:
68:0f:d1:20:4a:4d:6a:50:7a:8e:47:38:0e:2a:72:
9a:40:6c:6f:f8:0c:61:9b:72:08:7d:ae:94:e6:ae:
1a:77:30:74:00:3c:38:0a:16:af:fd:5d:ba:12:af:
f0:40:f7:cd:07:e5:34:fd:51:10:ac:5b:ac:ba:b6:
88:64:4e:bf:a9:60:d1:1d:89:28:2a:ae:c1:7b:0c:
98:d9:70:89:94:a5:90:e9:92:21:9a:cb:be:b1:5f:
32:32:a4:45:15:f6:09:ca:7a:a0:2d:8e:34:35:52:
8c:ce:2e:ca:60:ba:d3:f1:93:4e:62:c7:ee:de:dc:
e0:20:d8:70:c0:be:dc:36:b3:98:3c:cf:1e:2a:c9:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:14:B5:3B:1A:D0:9F:A5:6A:64:54:5D:21:97:CA:59:E2:2C:86
X509v3 Authority Key Identifier:
keyid:38:55:CB:DF:C6:7B:1F:55:01:BD:22:BA:03:19:78:29:25:3C:42:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c6c174-ca7f-435d-a9a1-d76fe9df0cbb/1/OFXL38Z7H1UBvSK6Axl4KSU8Qlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:89:36:72:de:89:5c:1a:4d:bc:c0:22:c2:09:95:97:13:57:
e5:d2:a1:f1:dc:0c:72:85:a3:87:f2:df:68:61:9f:29:61:56:
a8:b2:11:25:76:a5:f2:72:96:20:f5:21:0c:37:93:ac:e7:4a:
94:1a:bb:56:7f:0c:23:57:a1:cc:37:91:09:8e:35:66:0d:59:
a8:14:ea:f5:23:1d:57:5b:4a:41:af:dc:cb:5e:99:66:20:2f:
ca:32:08:78:eb:1e:7f:b4:56:ea:c5:e3:9e:09:e6:b3:e3:0d:
a8:9e:a2:63:12:fc:cd:35:f6:f9:0b:26:33:ef:f7:77:da:8b:
79:26:32:84:66:1e:d7:8b:66:ea:0e:b5:02:09:e6:ab:93:1e:
b6:2e:ac:44:ca:6e:23:06:4e:eb:fa:09:41:df:3e:d9:74:95:
d3:15:2f:ce:cd:37:71:d4:bd:41:4a:9a:29:5f:1e:bc:18:3f:
26:65:f0:55:ab:07:93:38:06:88:f8:59:1a:71:e3:06:db:d3:
35:20:92:88:f0:cd:26:f6:f0:75:e7:c4:09:bc:36:93:41:a0:
b7:c4:9c:62:e5:b9:e4:1d:70:63:4d:c7:a7:80:7f:5a:04:dd:
f2:c3:ba:6f:5e:58:b4:f1:8a:ac:cc:ad:1f:9e:59:e9:02:fc:
c4:32:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:40:53 2026 by rpki-client