Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: djcSI4d1+l7m67tSj+fP8jujIx9IHA5gr0HQWK2JQpk=
Subject key identifier: 56:8C:76:7B:AB:F5:9C:98:09:E9:18:D3:B8:C7:30:EF:DA:B1:B5:D4
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019EACE6B8B45821E266FA1FC82273E45115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1955
Signing time: Tue 09 Jun 2026 15:01:02 +0000
Manifest this update: Tue 09 Jun 2026 15:01:02 +0000
Manifest next update: Wed 10 Jun 2026 15:01:02 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: 5YiM0/sIzcXGiTqKnwFNvf8+f9RGKXZkIGAiYoGJW4U=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e6:b8:b4:58:21:e2:66:fa:1f:c8:22:73:e4:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jun 9 15:01:02 2026 GMT
Not After : Jun 10 15:01:02 2026 GMT
Subject: CN=568c767babf59c9809e918d3b8c730efdab1b5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:49:77:a9:3f:78:89:8e:7d:1d:d2:31:95:
a0:a0:a2:2a:93:35:dd:bb:2e:3c:63:b6:96:b0:a9:
ad:c9:78:67:98:98:83:cf:a6:5a:ab:60:6e:b6:be:
4e:30:bf:9c:a1:08:f9:f3:86:6c:f9:47:a8:09:14:
ad:79:51:5c:33:6d:a6:8b:38:70:5c:5f:4a:64:bb:
00:cc:e1:77:62:de:d8:c6:71:8b:5c:98:ae:9b:d8:
23:ef:0a:73:a0:ff:57:55:67:0d:33:0a:65:e3:5e:
b6:8c:11:21:a1:5b:ed:c8:de:f0:5b:5c:83:02:4f:
0c:6c:5a:82:0b:e1:05:85:d3:52:cc:39:20:ef:7f:
58:47:88:65:28:f9:03:9c:ec:7a:44:f8:73:4f:2b:
93:43:b6:d9:7c:70:8e:e5:20:ae:89:bf:fb:c5:51:
59:66:f7:93:8c:e0:78:55:39:ae:b8:e1:4b:5a:00:
8d:b0:37:fd:ef:84:4e:6d:26:3f:ba:32:05:dc:26:
83:4b:de:92:dd:8d:57:4d:e3:e1:1f:a9:20:86:2f:
be:5e:04:e7:39:b8:23:dd:8b:9e:d9:6a:0f:8a:51:
a2:50:ee:66:a3:ad:99:f3:cb:7c:5e:87:e0:3c:95:
78:0c:0b:86:86:e8:91:81:cf:21:7f:44:eb:1f:cf:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:76:7B:AB:F5:9C:98:09:E9:18:D3:B8:C7:30:EF:DA:B1:B5:D4
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:8f:e1:24:11:de:8b:c4:17:9f:32:d9:c8:85:95:95:60:
e8:46:e0:b9:75:e2:44:96:17:52:18:7d:ab:26:dd:d0:dd:34:
d2:37:1b:1a:bd:bd:7f:a4:64:84:0a:e6:1a:22:e3:e7:26:bc:
6d:e3:17:58:5c:e9:59:ea:16:07:1a:e3:03:c5:78:9b:cf:07:
c5:82:83:6b:17:a3:3b:da:41:3b:dc:4a:07:22:51:37:59:39:
15:9d:aa:97:42:58:8e:06:0f:86:5a:fa:e3:38:63:bd:5d:1b:
d5:e2:93:26:d3:e6:4d:ba:27:30:b6:d3:6c:29:49:de:da:db:
c8:87:57:3c:b4:5f:d1:c3:cf:61:95:64:ec:9c:96:f2:6d:5d:
55:36:7f:0b:1c:e5:d8:b8:fb:ca:17:d7:25:43:64:5b:87:95:
51:26:89:4f:53:98:75:8e:d5:d7:06:11:cb:98:25:3e:fe:b9:
72:92:41:ec:2e:67:df:53:bb:92:95:a2:73:68:8f:97:51:48:
0e:52:b6:c8:7c:12:9b:9f:ee:13:7a:f6:33:8a:06:aa:d5:b7:
e5:36:24:e3:0e:ca:51:c2:01:b2:4c:19:07:87:47:3a:38:bc:
6d:6d:e6:2f:1f:78:b5:6c:a4:9f:da:a3:d2:11:bd:09:b5:03:
91:cd:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 22:05:46 2026 by rpki-client