Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: 30LmcoiVameAPXIoOn4D1YmmP94zF4nkltJufkdY3FE=
Subject key identifier: D5:A6:B1:33:0F:C9:C6:B6:73:3F:06:67:A7:3D:2F:50:D5:1B:AB:5B
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019FABD11D80765B765FF0E10B5015F59AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 03:00:36 +0000
Manifest this update: Wed 29 Jul 2026 03:00:36 +0000
Manifest next update: Thu 30 Jul 2026 03:00:36 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: WxDZP4InBJFv5RPd3xXzoCkPgcuFO3Ak66sbWZ0OnoQ=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:1d:80:76:5b:76:5f:f0:e1:0b:50:15:f5:9a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jul 29 03:00:36 2026 GMT
Not After : Jul 30 03:00:36 2026 GMT
Subject: CN=d5a6b1330fc9c6b6733f0667a73d2f50d51bab5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:a6:a5:a5:c3:c7:99:2b:49:74:24:a6:14:
28:ec:c4:80:77:67:d4:9b:a0:c1:19:ee:73:62:6a:
32:a8:5a:64:d6:84:39:a8:9f:0b:40:8c:38:bc:12:
25:9f:91:00:20:f8:c1:49:b3:37:8e:35:48:4f:be:
2b:e3:5b:8a:8e:c6:bb:b6:63:e9:92:a5:85:53:2d:
86:9d:57:78:9f:9d:34:1a:58:b9:08:e9:01:f3:67:
40:1c:5d:43:35:45:0b:d4:12:31:4e:ef:16:7c:1f:
ef:89:84:59:10:b6:5d:db:cf:bd:a1:fc:93:3c:ab:
2d:7a:c6:9f:16:49:a3:b2:29:03:b9:be:2d:56:57:
ee:3b:4c:a3:a5:38:7b:dc:eb:e0:bb:86:6a:1f:4f:
0b:23:8d:fe:e7:74:22:91:50:9f:62:92:c9:a0:7a:
d4:52:5c:40:12:6a:97:97:7b:69:27:01:44:84:6d:
8a:5f:b4:f0:1b:52:66:96:c7:b1:bf:7b:4f:95:0e:
a2:15:bb:7f:c7:ff:73:e2:e8:ff:5f:16:5a:a4:f2:
3c:86:99:3f:96:9e:f5:dc:0f:25:f9:c1:fa:4f:34:
72:99:e3:5a:0b:cf:c8:c6:7f:51:3d:59:eb:99:51:
93:b0:fd:98:ae:e9:42:e9:e2:0d:34:bf:9d:cd:09:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:B1:33:0F:C9:C6:B6:73:3F:06:67:A7:3D:2F:50:D5:1B:AB:5B
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8b:52:ca:3a:91:d9:4b:31:92:01:1e:a6:c2:18:af:3f:31:
ca:e2:a7:31:c6:ef:fb:8a:29:d2:0a:4f:14:6b:63:20:d5:06:
1a:23:50:d3:02:82:ed:f8:b5:a2:8f:54:88:c4:a9:de:92:bf:
38:1a:25:c7:2f:e3:d7:cd:a5:40:74:bb:38:ac:5f:29:69:7b:
95:29:f3:85:6d:8d:96:ba:22:b7:b6:61:0b:cd:d9:1e:ab:f9:
35:b1:d2:11:f3:03:ab:46:f2:71:b2:c7:78:42:b3:83:e6:24:
2b:fd:ed:0a:64:db:15:74:1e:48:a8:9d:ef:4a:4c:f5:77:6d:
6e:3b:6c:e2:db:0d:bb:74:ab:3e:f0:40:f9:4d:37:c6:30:52:
9e:ba:59:73:50:4e:19:bc:27:f6:76:7d:7f:7f:4a:3f:47:78:
2d:57:d5:d1:cd:58:c7:84:92:4f:c1:4a:d4:1e:81:99:15:a0:
19:1d:6a:56:5d:ac:2a:48:ab:ef:4b:e3:0d:6c:ff:17:6a:3e:
81:46:de:cb:69:1e:da:d0:e3:3d:7c:cc:5a:f1:99:e4:79:68:
7d:ed:2c:26:e6:7e:00:8d:dc:5e:9d:4c:2a:6b:b5:c9:29:f4:
fb:0c:08:ba:3d:26:39:6e:a8:ce:90:ea:25:48:9b:e1:31:b4:
4b:0d:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0R2Adlt2X/DhC1AV9ZrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjYwNzI5MDMwMDM2WhcNMjYwNzMwMDMwMDM2WjAzMTEwLwYDVQQD
EyhkNWE2YjEzMzBmYzljNmI2NzMzZjA2NjdhNzNkMmY1MGQ1MWJhYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZampaXDx5krSXQkphQo7MSAd2fU
m6DBGe5zYmoyqFpk1oQ5qJ8LQIw4vBIln5EAIPjBSbM3jjVIT74r41uKjsa7tmPp
kqWFUy2GnVd4n500Gli5COkB82dAHF1DNUUL1BIxTu8WfB/viYRZELZd28+9ofyT
PKstesafFkmjsikDub4tVlfuO0yjpTh73Ovgu4ZqH08LI43+53QikVCfYpLJoHrU
UlxAEmqXl3tpJwFEhG2KX7TwG1Jmlsexv3tPlQ6iFbt/x/9z4uj/XxZapPI8hpk/
lp713A8l+cH6TzRymeNaC8/Ixn9RPVnrmVGTsP2YrulC6eINNL+dzQmSDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWmsTMPyca2cz8GZ6c9L1DVG6tbMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOItSyjqR
2UsxkgEepsIYrz8xyuKnMcbv+4op0gpPFGtjINUGGiNQ0wKC7fi1oo9UiMSp3pK/
OBolxy/j182lQHS7OKxfKWl7lSnzhW2Nlroit7ZhC83ZHqv5NbHSEfMDq0bycbLH
eEKzg+YkK/3tCmTbFXQeSKid70pM9Xdtbjts4tsNu3SrPvBA+U03xjBSnrpZc1BO
Gbwn9nZ9f39KP0d4LVfV0c1Yx4SST8FK1B6BmRWgGR1qVl2sKkir70vjDWz/F2o+
gUbey2ke2tDjPXzMWvGZ5Hlofe0sJuZ+AI3cXp1MKmu1ySn0+wwIuj0mOW6ozpDq
JUib4TG0Sw1zdw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:04 2026 by rpki-client