Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: Y5Ipih/s8tU9De1lJqfek/CCtVP0LrPtYNO+nYJ0a0k=
Subject key identifier: 7A:82:26:D5:EC:A2:7B:70:86:0F:E9:3C:A8:F9:46:6D:8E:83:2E:F8
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019E1FEC685AAC96365B0B1E1378B4B9743F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 06:00:47 +0000
Manifest this update: Wed 13 May 2026 06:00:47 +0000
Manifest next update: Thu 14 May 2026 06:00:47 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: cUwjD6Qu3Qwass2iolzgv4nWWJvV4izZOehB17KdpXY=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:68:5a:ac:96:36:5b:0b:1e:13:78:b4:b9:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: May 13 06:00:47 2026 GMT
Not After : May 14 06:00:47 2026 GMT
Subject: CN=7a8226d5eca27b70860fe93ca8f9466d8e832ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:6c:ba:22:70:2b:ba:60:f5:e8:b5:3a:b4:
f7:dc:57:82:94:ea:80:af:8d:ad:be:3b:2e:ea:a8:
98:55:d7:72:87:b6:bf:f9:be:b0:27:0b:2a:24:e1:
80:26:cf:1d:6b:93:cb:58:4e:07:48:64:93:84:92:
86:40:5d:25:11:1e:4e:9e:43:74:13:eb:ca:f7:c3:
32:a1:ce:48:51:9b:47:f4:0c:92:a3:49:ca:15:0e:
c5:aa:ac:19:b2:78:53:d9:a7:96:d0:d9:a7:23:a4:
f3:0f:b3:da:9c:25:aa:96:96:b7:0f:36:bf:4a:3a:
53:8e:94:2c:8e:a7:33:53:05:f5:69:b0:4b:ec:d8:
5c:6c:fe:58:ec:71:3a:a8:2d:46:01:d0:3d:b5:ee:
41:78:78:06:32:a0:64:ba:d7:45:d1:c6:7b:e3:d8:
04:30:be:9c:6a:aa:a0:f7:1d:9c:78:3e:37:5a:4b:
3d:d7:22:3a:b5:e8:f8:4b:63:c7:00:a7:f5:99:64:
4a:bc:52:9a:a9:93:1d:8a:41:de:d7:03:07:14:b2:
50:55:a7:60:9c:74:69:b4:7e:47:1c:24:f8:d7:5f:
de:e8:3b:97:96:f5:61:bc:3e:ca:42:be:91:52:8b:
ef:de:0f:9a:b4:c0:6d:93:b5:db:54:2a:34:be:24:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:26:D5:EC:A2:7B:70:86:0F:E9:3C:A8:F9:46:6D:8E:83:2E:F8
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:01:5b:7b:9f:3e:94:50:1c:8e:9f:0f:76:36:b4:40:32:d2:
7f:ae:9b:e8:50:48:0f:02:ae:01:d8:c2:87:6e:f8:a0:2e:5b:
c4:b0:24:b8:5c:80:52:32:97:69:4c:2b:ba:5a:a9:c7:dd:58:
f7:86:7e:b2:10:47:75:62:23:4a:64:d2:84:9d:c3:4c:61:a7:
01:5a:03:2b:9d:38:54:80:e8:f1:46:62:af:90:5c:63:c6:0b:
ca:b5:ff:69:f7:66:9b:c1:b6:87:cf:53:6c:ed:39:08:e8:4a:
f1:75:bf:9f:47:3e:c7:04:52:76:9a:fb:d3:22:17:b6:74:c7:
b9:b4:4f:c5:55:8f:23:39:da:af:08:fe:83:68:48:08:09:7e:
35:7d:8b:f3:8f:77:f9:0e:47:6c:9b:ad:da:af:8d:42:48:5a:
d9:af:7f:d8:1c:73:24:22:36:58:6b:fa:8a:0b:e2:be:f8:d4:
e4:ef:90:ee:9a:53:62:48:88:8b:88:17:d4:ca:6c:f3:d4:0d:
b5:1c:34:0c:65:57:80:4a:e0:9e:8f:ca:2f:18:36:5b:3a:0b:
d1:17:04:50:4f:83:f5:c3:47:d8:2b:a7:9b:cb:f3:85:43:8e:
78:10:87:b6:08:0e:22:06:49:3b:3e:7d:04:e8:d6:7e:20:84:
18:03:f5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7GharJY2WwseE3i0uXQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjYwNTEzMDYwMDQ3WhcNMjYwNTE0MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg3YTgyMjZkNWVjYTI3YjcwODYwZmU5M2NhOGY5NDY2ZDhlODMyZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpsuiJwK7pg9ei1OrT33FeClOqA
r42tvjsu6qiYVddyh7a/+b6wJwsqJOGAJs8da5PLWE4HSGSThJKGQF0lER5OnkN0
E+vK98Myoc5IUZtH9AySo0nKFQ7FqqwZsnhT2aeW0NmnI6TzD7PanCWqlpa3Dza/
SjpTjpQsjqczUwX1abBL7NhcbP5Y7HE6qC1GAdA9te5BeHgGMqBkutdF0cZ749gE
ML6caqqg9x2ceD43Wks91yI6tej4S2PHAKf1mWRKvFKaqZMdikHe1wMHFLJQVadg
nHRptH5HHCT411/e6DuXlvVhvD7KQr6RUovv3g+atMBtk7XbVCo0viRVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqCJtXsontwhg/pPKj5Rm2Ogy74MB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAFbe58+
lFAcjp8Pdja0QDLSf66b6FBIDwKuAdjCh274oC5bxLAkuFyAUjKXaUwrulqpx91Y
94Z+shBHdWIjSmTShJ3DTGGnAVoDK504VIDo8UZir5BcY8YLyrX/afdmm8G2h89T
bO05COhK8XW/n0c+xwRSdpr70yIXtnTHubRPxVWPIznarwj+g2hICAl+NX2L8493
+Q5HbJut2q+NQkha2a9/2BxzJCI2WGv6igvivvjU5O+Q7ppTYkiIi4gX1Mps89QN
tRw0DGVXgErgno/KLxg2WzoL0RcEUE+D9cNH2Cunm8vzhUOOeBCHtggOIgZJOz59
BOjWfiCEGAP1iw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:42:44 2026 by rpki-client