Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: eZlZhel566jUXqp31qcrrlkDYmgnTw8AmVlENvvw7yY=
Subject key identifier: D7:3D:62:71:A5:BF:F6:21:36:8F:1B:BE:79:02:00:33:9B:B6:70:A2
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01A002B8A08CFB99519615695FD92A6930D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1A06
Signing time: Sat 15 Aug 2026 00:00:49 +0000
Manifest this update: Sat 15 Aug 2026 00:00:49 +0000
Manifest next update: Sun 16 Aug 2026 00:00:49 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: p+E2aXh/kkvr11dgT0snoJOTKP+79oAf5Vn3+itj20Q=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:a0:8c:fb:99:51:96:15:69:5f:d9:2a:69:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Aug 15 00:00:49 2026 GMT
Not After : Aug 16 00:00:49 2026 GMT
Subject: CN=d73d6271a5bff621368f1bbe790200339bb670a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:64:af:b7:87:d9:85:45:d0:43:a5:e7:67:
af:c8:ff:01:f3:45:e2:09:a9:42:df:6a:22:97:31:
4f:4b:b9:b9:fb:ac:88:35:2a:34:de:ef:21:23:96:
b9:98:02:ac:d7:77:fb:01:87:ed:5f:84:5f:68:9a:
06:23:f3:fb:89:c6:3d:2f:b2:57:1c:ec:27:7a:25:
0c:2f:ea:ea:ea:75:5b:20:29:ac:e1:87:bb:b2:df:
4c:74:7f:14:d9:20:83:09:2e:ea:79:c8:df:af:93:
70:d9:a0:fd:4b:26:ba:83:14:07:38:17:f6:e6:fc:
41:29:ad:be:3d:0f:68:d2:1c:70:f9:38:5e:67:a7:
67:b7:68:59:5e:61:d9:41:d4:90:4e:c5:10:dd:78:
b0:a2:29:b8:93:e7:f0:6a:7b:3e:eb:1d:48:22:66:
c1:5a:05:70:54:25:ec:4d:a6:ec:fa:cb:25:86:94:
2d:47:96:31:55:8a:71:91:2e:3f:4c:b1:c1:72:d7:
1b:6f:ad:04:30:58:a9:cc:78:17:a7:cf:3f:a7:bb:
12:6f:45:bc:cd:27:c3:69:df:d8:95:af:31:a9:bd:
c7:46:ac:87:75:b1:2c:45:bf:9f:4f:dd:71:3a:76:
7b:0e:13:de:07:77:86:5f:a9:69:f8:af:32:cb:1f:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:62:71:A5:BF:F6:21:36:8F:1B:BE:79:02:00:33:9B:B6:70:A2
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:b6:3a:4f:11:4a:3e:18:8c:48:b5:03:16:b7:4f:18:b2:
62:88:cd:1c:51:3e:a3:a8:fc:4a:e8:9b:e3:4f:e6:32:f6:b6:
23:f0:0d:72:73:16:d6:83:84:77:be:0a:9d:02:40:bd:2d:8a:
e4:7b:36:ba:e0:81:cb:f8:11:2e:29:a2:37:69:cd:0f:d1:34:
a2:a5:6b:70:94:f0:ff:c4:ad:e7:4e:a1:15:20:11:64:5e:cd:
09:c6:1d:15:fc:06:b3:89:46:de:03:62:24:68:17:8e:95:e3:
3c:25:21:75:1b:77:92:5c:4c:e6:76:a6:16:b9:18:cd:22:ed:
0d:0e:bd:e3:be:72:e9:41:b3:02:27:1f:a4:d9:5e:55:14:a9:
6a:8a:11:5f:95:fc:d4:05:c6:b7:f0:f8:ec:11:f9:aa:be:af:
18:35:c5:96:73:39:b8:7b:68:f6:99:bc:14:04:87:69:f1:42:
83:eb:97:87:6f:71:9f:37:3c:fe:0a:36:62:18:bd:58:5c:2d:
cb:c0:5e:5a:cd:10:4e:7f:b6:6b:12:90:04:a9:fb:2b:4e:d2:
82:68:f8:b9:6b:76:5c:db:cf:2a:9e:ef:61:c3:d7:f8:6c:c2:
71:27:49:dc:f2:1c:f1:47:b2:7b:4f:b1:96:2e:99:4a:8b:4e:
82:0b:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:42 2026 by rpki-client