Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: 7xbk1nilvPE7EOL6LloObIMa1svWss5V6nNMpWSV8LI=
Subject key identifier: 36:E8:87:8A:F5:64:7A:56:02:A6:D5:9F:A3:C4:A0:64:A9:34:85:C8
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01A1130554F699F461DFDEA48780FF04DB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1A93
Signing time: Tue 06 Oct 2026 21:01:18 +0000
Manifest this update: Tue 06 Oct 2026 21:01:18 +0000
Manifest next update: Wed 07 Oct 2026 21:01:18 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: nesHeULnLO3mKCqcF4uXJZpeHLgFIedgNchYHFxNGqI=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:54:f6:99:f4:61:df:de:a4:87:80:ff:04:db:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Oct 6 21:01:18 2026 GMT
Not After : Oct 7 21:01:18 2026 GMT
Subject: CN=36e8878af5647a5602a6d59fa3c4a064a93485c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:d6:a9:8d:70:bb:c7:54:f9:06:a9:0d:14:
8b:ad:10:d0:f4:b3:50:f3:fb:8d:2c:e4:d1:56:04:
7f:1d:15:f0:b4:da:00:49:9f:1e:5e:71:41:25:ef:
9e:6c:39:37:dc:03:af:ca:87:be:ca:45:b8:d4:b3:
cb:68:49:6b:b2:5b:86:5c:5e:e3:8b:64:68:fe:2b:
5a:93:87:48:68:a3:67:ca:83:28:3a:70:dd:1c:f6:
02:7c:e8:92:7d:b8:e4:b5:56:e2:77:09:75:73:bc:
20:19:1f:32:06:ae:e8:7f:29:3e:f4:9a:77:d0:89:
92:a7:f3:ea:58:81:71:4e:20:3b:c5:b1:b4:2f:59:
62:6a:30:dd:0a:18:54:40:bd:63:8f:e0:03:c4:2d:
75:23:ab:43:7c:8a:11:20:8d:86:4b:57:14:a1:56:
82:a6:18:73:6e:87:ab:40:72:fb:d6:fc:a3:b9:08:
d2:38:aa:62:55:d1:82:63:fb:c9:e2:66:8a:e5:1d:
9f:4d:37:5a:36:f4:d5:2f:66:9c:93:7f:3b:14:5b:
56:55:49:1a:ce:ee:fb:c9:dd:66:9f:15:9d:2d:3b:
de:d1:4e:dd:f8:5a:52:f2:c0:07:d4:74:75:ef:9d:
bf:6a:22:f7:90:65:24:54:ed:dd:f2:39:1c:85:d5:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:87:8A:F5:64:7A:56:02:A6:D5:9F:A3:C4:A0:64:A9:34:85:C8
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:96:00:22:72:3a:08:be:ab:ce:3f:fd:8d:29:2d:e4:18:63:
3b:8b:02:6b:bc:2a:1e:08:b1:68:17:78:da:f7:c7:fa:d3:9a:
b1:f4:40:f2:47:6b:26:ef:d2:59:34:6f:00:31:08:a1:d7:ce:
d7:89:30:37:c7:42:2a:ce:c0:6b:ff:b6:32:76:6e:08:4e:66:
40:b2:fc:57:4c:1f:82:01:44:01:05:76:7d:16:9b:02:73:05:
51:e8:80:a0:ff:04:48:47:b3:da:d8:78:40:82:d4:05:1c:48:
13:39:f1:7d:c9:2b:b3:d8:ac:51:e2:f3:09:58:66:44:bd:c0:
47:66:88:e3:b5:0c:30:a5:3d:22:d0:4f:45:9b:5e:c3:b5:20:
50:b3:cf:fd:dc:b9:93:c0:54:a3:b8:83:55:a2:87:cd:f1:07:
0c:12:28:35:90:01:56:46:9f:41:2e:dc:1b:21:ac:cb:af:c9:
14:45:54:3d:49:45:dc:b6:e2:92:1f:31:ab:90:87:e2:25:f4:
c6:58:82:6a:82:25:ab:62:f7:dc:4d:5d:69:a9:f9:04:fd:32:
ea:fb:d6:6e:35:cd:30:b9:14:44:e5:2a:9a:92:7c:cd:2d:06:
04:dc:17:89:39:96:2b:d3:f7:dd:bb:3d:87:22:df:90:1b:96:
9b:28:19:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETBVT2mfRh396kh4D/BNsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjYxMDA2MjEwMTE4WhcNMjYxMDA3MjEwMTE4WjAzMTEwLwYDVQQD
EygzNmU4ODc4YWY1NjQ3YTU2MDJhNmQ1OWZhM2M0YTA2NGE5MzQ4NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQrWqY1wu8dU+QapDRSLrRDQ9LNQ
8/uNLOTRVgR/HRXwtNoASZ8eXnFBJe+ebDk33AOvyoe+ykW41LPLaElrsluGXF7j
i2Ro/itak4dIaKNnyoMoOnDdHPYCfOiSfbjktVbidwl1c7wgGR8yBq7ofyk+9Jp3
0ImSp/PqWIFxTiA7xbG0L1liajDdChhUQL1jj+ADxC11I6tDfIoRII2GS1cUoVaC
phhzboerQHL71vyjuQjSOKpiVdGCY/vJ4maK5R2fTTdaNvTVL2ack387FFtWVUka
zu77yd1mnxWdLTve0U7d+FpS8sAH1HR1752/aiL3kGUkVO3d8jkchdVecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDboh4r1ZHpWAqbVn6PEoGSpNIXIMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJYAInI6
CL6rzj/9jSkt5BhjO4sCa7wqHgixaBd42vfH+tOasfRA8kdrJu/SWTRvADEIodfO
14kwN8dCKs7Aa/+2MnZuCE5mQLL8V0wfggFEAQV2fRabAnMFUeiAoP8ESEez2th4
QILUBRxIEznxfckrs9isUeLzCVhmRL3AR2aI47UMMKU9ItBPRZtew7UgULPP/dy5
k8BUo7iDVaKHzfEHDBIoNZABVkafQS7cGyGsy6/JFEVUPUlF3Lbikh8xq5CH4iX0
xliCaoIlq2L33E1daan5BP0y6vvWbjXNMLkUROUqmpJ8zS0GBNwXiTmWK9P33bs9
hyLfkBuWmygZeg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 03:23:07 2026 by rpki-client