Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: KjcIa0XL0exmIJB4+CAUJG9Y6gQr7V4vDjbXmIzh/wU=
Subject key identifier: 88:97:40:59:1F:09:17:4E:C3:F1:87:3E:EC:94:3B:F6:F8:BD:82:53
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019D26CD01CF4E6C09A89AD5DDB4F41013A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: myAkhUXyHbk2KaaMvy/hPbx+jG3XNsx2tmCfirubhjU=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:cf:4e:6c:09:a8:9a:d5:dd:b4:f4:10:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=889740591f09174ec3f1873eec943bf6f8bd8253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:38:08:8e:1b:ca:2a:75:b5:7c:12:87:d4:
48:df:1b:2a:0c:e4:e1:21:c6:1c:4d:54:ca:16:38:
90:f6:38:a1:56:c4:18:e8:4a:27:7d:e0:d8:8a:0b:
32:66:f1:97:19:d4:1e:50:ba:88:db:12:84:18:36:
ae:a7:61:9b:a5:3c:b9:f4:77:ce:40:5c:66:69:21:
76:01:c7:a6:1d:cc:a2:ef:88:72:87:37:d7:79:4c:
1b:14:3f:5e:ab:92:f7:82:c3:c3:e8:b5:f6:83:b0:
a5:1b:c4:65:0d:a8:ba:2e:00:ad:f9:bc:16:da:76:
03:a7:ae:34:d9:29:78:ef:e2:8d:d5:d3:21:74:9d:
2c:22:28:2a:69:4f:89:36:99:f5:c6:1a:f2:a2:25:
ef:5c:9a:5e:b8:8b:59:4d:d4:d2:10:49:91:5b:c4:
68:77:5b:2b:fb:36:2d:5b:5e:2e:5c:57:6f:5c:2c:
c9:a7:be:66:6a:09:15:6c:fa:dc:8a:e9:2b:47:ad:
d1:46:50:09:d3:21:08:d4:d0:7d:0d:e8:92:69:86:
1a:34:c0:c6:d2:ae:f7:80:e0:0d:47:25:99:d9:8a:
7d:72:d1:f4:21:66:65:e8:74:27:ef:a2:32:b7:74:
ab:7c:54:6f:c9:4e:c9:54:c1:b9:fa:90:fc:d4:05:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:40:59:1F:09:17:4E:C3:F1:87:3E:EC:94:3B:F6:F8:BD:82:53
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:ec:21:c8:9b:c0:ed:cd:bb:c2:5f:be:c5:d7:29:1f:ff:
92:54:48:a9:3e:6d:81:bb:2f:d7:f6:a2:f6:2f:82:2f:b0:02:
1e:aa:67:1b:cf:2a:71:ca:dd:19:fa:ba:8b:a5:2d:36:33:8d:
6f:92:62:df:17:85:8c:09:bf:41:cf:29:2d:50:8b:0d:48:7c:
30:5b:34:84:44:8c:b8:ab:52:9c:1c:ba:cb:63:0e:83:8b:ea:
fb:f2:7d:bb:77:4c:e7:75:f4:07:05:86:ff:05:0b:80:89:32:
8b:27:76:74:8a:5c:d6:16:0c:bb:ac:b1:f7:8f:7e:18:9d:c2:
21:90:d4:b0:ef:63:9a:3c:b8:87:fc:e1:dc:6b:c9:56:b2:42:
e0:98:3d:eb:31:a8:98:08:df:59:46:76:b0:93:25:25:db:84:
8d:2b:15:b3:cf:15:c6:74:5e:52:29:bb:c1:31:dc:1d:df:99:
5b:11:7b:3f:fe:97:e7:b0:10:5b:b7:2c:70:94:aa:34:74:d6:
c5:33:c9:36:ce:9e:2d:3f:90:11:c3:cb:2a:b6:fa:2c:86:e4:
7c:20:48:2a:c4:dc:ed:a3:8a:a2:cf:85:5b:8e:37:94:9f:3f:
50:88:d2:a4:a0:bc:97:ad:ab:cd:c6:94:07:15:68:c2:9a:29:
b7:74:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:26 2026 by rpki-client