Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: yAnZEpsqhIb3CiXaNf2FkFWr5wXWb8KkPpZMkQoXz1Y=
Subject key identifier: BF:2B:A9:17:98:D1:E4:AB:B5:30:7A:6D:ED:44:20:6C:A6:A3:FA:54
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01A0E2BD6E1F847373229006434134B59F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 12:01:00 +0000
Manifest this update: Sun 27 Sep 2026 12:01:00 +0000
Manifest next update: Mon 28 Sep 2026 12:01:00 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: 1ke3x9DHJTm0xIa0soed9RKrKrPb9KYNtcS1ig+H++Q=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:6e:1f:84:73:73:22:90:06:43:41:34:b5:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Sep 27 12:01:00 2026 GMT
Not After : Sep 28 12:01:00 2026 GMT
Subject: CN=bf2ba91798d1e4abb5307a6ded44206ca6a3fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:af:4f:28:d3:42:67:a3:30:47:b1:05:93:
92:9d:f4:14:45:1c:83:b6:c9:e2:a8:18:f2:5d:eb:
81:cc:00:a4:b3:55:33:37:a4:b5:35:da:c4:80:fd:
a9:2c:7e:08:8e:b3:57:52:7e:a6:91:e2:d8:40:83:
fa:1d:2d:47:16:08:4d:ae:ec:d5:65:20:52:7b:cc:
95:36:27:cc:c6:a6:9e:46:0b:d8:a6:dd:ea:7f:55:
e2:83:af:28:a8:17:6c:de:bc:5b:a1:8b:e8:4e:00:
e6:29:9e:1e:08:63:5e:a5:5e:dd:3e:10:5e:cc:12:
4d:33:e7:16:a0:e9:38:b3:00:9c:65:43:5e:05:df:
c0:e1:09:f5:bc:df:ca:e9:27:5c:d1:b8:ca:60:ed:
c5:b1:8a:93:2b:4d:87:5d:46:69:5a:22:02:e6:41:
b8:1e:6c:77:4e:e2:05:47:ed:69:79:92:70:4e:58:
9d:f9:b8:bb:6d:14:14:25:68:ee:d2:01:ce:67:50:
46:64:1f:f8:49:67:aa:f3:ae:99:06:bc:22:ba:f2:
be:cd:71:86:d4:e8:20:08:cc:5c:b3:a1:e2:cd:73:
84:1d:fd:76:85:df:d4:ca:cb:66:79:3f:86:a1:9e:
2b:d0:b2:48:1e:65:94:e5:a1:76:ac:28:8e:37:44:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:A9:17:98:D1:E4:AB:B5:30:7A:6D:ED:44:20:6C:A6:A3:FA:54
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:7d:f1:4f:37:24:e6:b9:59:f0:11:bc:ca:1f:3e:6f:9d:
0f:2c:64:a4:2c:b8:67:c7:c0:28:25:4d:b9:6b:23:f4:33:8d:
a9:b8:6f:4f:10:4e:55:73:74:e1:cd:a4:66:b8:6a:83:f3:76:
c5:26:5d:9e:1e:22:c4:63:2c:93:18:b3:4e:82:4c:ef:6f:08:
90:9e:f9:af:ce:bf:c9:bf:f4:eb:f2:15:9c:be:fa:b3:ff:83:
9a:82:ed:8f:0d:7b:8f:33:8d:8f:03:e8:c7:b9:a7:33:95:08:
2a:70:1a:e9:d8:29:40:04:ab:79:d5:b3:a2:e4:5c:87:00:49:
5c:79:79:8e:c0:d2:c5:24:7a:48:be:19:bd:e6:73:69:3b:40:
48:f0:65:37:86:9a:db:b3:14:db:e6:fd:b6:d2:3a:52:6e:26:
08:63:0e:71:bd:13:c3:f4:8d:03:c0:f8:f6:ca:99:83:7f:b9:
92:f5:92:9f:ad:6c:31:12:6d:fa:82:f1:c1:47:30:c2:e3:e2:
9b:6f:47:68:d2:3d:ab:1c:55:de:a5:43:5d:bf:bd:a4:79:55:
4d:4a:c9:07:2c:cb:cf:76:92:d5:60:3f:85:2d:0e:c0:81:be:
42:9e:41:53:be:8f:ef:20:c1:2a:0e:7d:21:47:8a:d1:9c:02:
32:c7:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:57 2026 by rpki-client