Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: gRPu3UMjhFRvQwZ56iut37J8wyvv2eih8lSeUFlZSvg=
Subject key identifier: 31:24:3C:B6:4D:1B:6D:B8:C9:46:30:23:4C:BD:A3:CD:C6:37:7B:6C
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019D382DE15D2CDEB41C6068E24FE4775B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: FZa1y2R01elVX/thA7xiiBPkRNkMJluP66Lc3NGSzn8=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e1:5d:2c:de:b4:1c:60:68:e2:4f:e4:77:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=31243cb64d1b6db8c94630234cbda3cdc6377b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:4b:59:28:fa:19:3b:f1:d8:08:7c:28:10:
6f:7c:2d:ed:67:00:5e:56:12:31:8f:bd:c8:45:d2:
83:40:20:e7:b1:90:97:ad:20:44:ac:3d:df:48:20:
07:05:5c:8b:94:58:0e:7e:fc:83:8c:e6:26:88:d8:
d4:63:0d:de:78:61:15:8a:59:6c:38:68:8c:bd:df:
4b:57:cd:be:09:c1:32:8d:2d:b3:15:d1:3a:6d:49:
20:9f:3e:c5:d7:4d:61:f7:60:d9:e8:75:25:40:9a:
de:8d:28:f3:41:70:b2:8e:88:05:02:99:1b:a3:23:
f4:fb:23:ff:c3:8c:3c:fb:94:f4:7e:8d:10:06:67:
6c:ce:03:d7:fb:c3:17:78:ef:7b:e2:55:6c:4f:c9:
a8:1d:a5:0f:4b:02:31:10:64:cc:8e:c8:59:9b:8a:
2d:5e:03:f8:04:e1:13:92:af:66:13:7a:5a:a6:63:
d9:0e:b0:26:10:d7:cb:09:38:fb:da:0c:66:a7:b5:
36:e1:4b:a2:f4:1a:35:e3:3a:7d:5e:41:44:5d:93:
e0:01:aa:21:86:40:4d:20:91:12:d5:ad:a3:ac:32:
e0:55:8e:78:16:81:4f:6c:be:d4:d2:0d:04:71:f4:
5a:67:1d:c0:4f:ea:49:03:3a:a3:73:97:da:1a:5c:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:3C:B6:4D:1B:6D:B8:C9:46:30:23:4C:BD:A3:CD:C6:37:7B:6C
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:40:cc:a2:c2:c6:50:de:ed:4a:b1:a7:ff:6a:0c:dd:4e:30:
01:b1:39:a9:87:7d:e4:ee:d0:0e:17:fe:bb:e7:6b:f2:84:84:
b9:ee:45:42:4b:b5:cc:d1:ac:3d:5f:30:03:1e:92:22:df:f9:
34:ce:a2:b7:d4:d7:a0:6b:f9:f6:ba:69:07:e6:60:bb:da:e3:
eb:11:2e:48:3a:c8:69:df:ef:bc:f5:b2:a1:96:0a:73:63:da:
e8:db:13:ff:cd:1b:a5:ad:80:e7:9d:38:7b:cd:11:84:f3:a1:
a7:8b:81:8e:f8:b8:a7:2b:41:73:70:b0:1e:ae:06:71:64:e9:
16:f8:ad:bd:0a:64:47:54:3c:99:27:7c:5f:94:58:bc:93:94:
52:c3:bd:ee:d8:8d:2a:7e:42:1b:08:e7:af:05:d2:dc:93:23:
bf:14:37:13:31:2c:a1:10:e2:b6:54:b1:d1:19:cb:4a:85:38:
94:00:a9:38:20:af:37:11:70:9f:7e:32:fe:e8:a8:44:de:14:
75:60:b5:0d:2d:af:bd:51:27:06:83:aa:7f:09:46:15:6c:da:
c3:30:bd:f4:36:a1:94:0c:db:31:79:7d:33:77:c2:bf:e6:5c:
51:33:1d:a1:cc:10:dd:f8:72:63:9c:b8:e8:60:5f:3c:20:90:
9d:47:d0:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LeFdLN60HGBo4k/kd1uDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjYwMzI5MDYwMDI0WhcNMjYwMzMwMDYwMDI0WjAzMTEwLwYDVQQD
EygzMTI0M2NiNjRkMWI2ZGI4Yzk0NjMwMjM0Y2JkYTNjZGM2Mzc3YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyVLWSj6GTvx2Ah8KBBvfC3tZwBe
VhIxj73IRdKDQCDnsZCXrSBErD3fSCAHBVyLlFgOfvyDjOYmiNjUYw3eeGEVills
OGiMvd9LV82+CcEyjS2zFdE6bUkgnz7F101h92DZ6HUlQJrejSjzQXCyjogFApkb
oyP0+yP/w4w8+5T0fo0QBmdszgPX+8MXeO974lVsT8moHaUPSwIxEGTMjshZm4ot
XgP4BOETkq9mE3papmPZDrAmENfLCTj72gxmp7U24Uui9Bo14zp9XkFEXZPgAaoh
hkBNIJES1a2jrDLgVY54FoFPbL7U0g0EcfRaZx3AT+pJAzqjc5faGlwvaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEkPLZNG224yUYwI0y9o83GN3tsMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0DMosLG
UN7tSrGn/2oM3U4wAbE5qYd95O7QDhf+u+dr8oSEue5FQku1zNGsPV8wAx6SIt/5
NM6it9TXoGv59rppB+Zgu9rj6xEuSDrIad/vvPWyoZYKc2Pa6NsT/80bpa2A5504
e80RhPOhp4uBjvi4pytBc3CwHq4GcWTpFvitvQpkR1Q8mSd8X5RYvJOUUsO97tiN
Kn5CGwjnrwXS3JMjvxQ3EzEsoRDitlSx0RnLSoU4lACpOCCvNxFwn34y/uioRN4U
dWC1DS2vvVEnBoOqfwlGFWzawzC99DahlAzbMXl9M3fCv+ZcUTMdocwQ3fhyY5y4
6GBfPCCQnUfQpA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client