Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: Ha6OqInoPa72Dim7SKhQCkdsuwQnh+nIXbHRfXCiKyQ=
Subject key identifier: A4:72:7B:21:67:2F:07:6D:0A:B5:E7:C3:9C:70:A8:AF:F3:8B:0C:7E
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019D98BDDBF896161301358DF703AF613F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: 0JU2m17SogI41ZeqJNS5gMdbADCfrvdVULIg9AaKSDk=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:db:f8:96:16:13:01:35:8d:f7:03:af:61:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=a4727b21672f076d0ab5e7c39c70a8aff38b0c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:b0:2e:7b:f2:9a:56:00:5b:36:26:4a:dd:
8d:2f:a4:db:f8:31:9d:e1:5f:50:95:ad:7a:47:47:
4a:3d:bd:ae:53:00:40:dd:3d:f1:d2:af:c5:81:9b:
23:1f:f7:a7:ed:56:73:7f:4a:ec:24:c9:2b:ce:c9:
22:4c:6a:c9:14:7f:b3:87:ef:d0:78:79:a6:25:a5:
ba:4e:7a:d4:e0:dd:1e:50:fe:1d:5b:b2:f2:7c:df:
1d:9b:6f:2b:2c:10:e3:3a:af:11:cb:3d:a3:ea:61:
0d:c8:75:f1:73:12:b7:b6:28:9b:af:0c:b4:a5:75:
7b:3c:81:98:0e:15:db:32:6e:f1:10:02:e0:7a:05:
d6:d7:cb:16:81:60:96:8a:ee:0a:44:58:ad:92:f1:
c5:fb:70:a2:d9:b8:1d:a1:a1:a1:b6:7b:53:5b:b5:
58:81:70:f8:65:6e:2f:e6:ef:f5:d7:d1:ee:59:d1:
79:a3:ae:0a:60:6c:da:5b:c7:7b:57:78:52:0d:f5:
cf:84:77:3a:2c:70:f6:ca:38:37:43:81:63:51:8d:
bd:cd:e8:f4:da:18:ff:8c:88:f3:f0:0f:be:93:02:
30:7e:50:26:1c:f3:d3:28:5c:40:27:36:93:6b:65:
c6:d3:25:57:46:f3:1b:45:61:ab:ec:11:40:8b:c9:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:7B:21:67:2F:07:6D:0A:B5:E7:C3:9C:70:A8:AF:F3:8B:0C:7E
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:ea:06:1f:d6:68:99:63:18:8f:0a:c1:6d:9e:4f:86:27:
38:83:fc:f2:36:2c:c9:c6:0c:2a:08:83:ef:3b:ff:77:83:85:
e4:00:8a:87:8b:16:10:26:3b:29:7b:0e:ab:d4:dc:92:84:1f:
46:19:b5:79:1b:79:c6:55:1b:22:b8:7d:f8:94:5d:6f:8d:8a:
f7:a9:b7:b6:a0:20:be:9d:16:3b:f0:4a:1a:20:64:6f:38:69:
6f:f9:7f:c1:da:dd:77:9f:77:c8:7b:3f:c0:56:79:c2:c1:6b:
06:32:9d:9f:e6:40:de:72:a2:f8:3e:b9:aa:78:57:ed:2b:3a:
85:cb:d2:10:08:35:b8:d5:7e:43:1e:28:3a:e5:96:7a:0f:4a:
ba:a0:98:bf:a4:73:9a:67:b5:21:6e:c9:b2:05:f3:0e:91:ce:
05:a5:a2:c3:3f:d1:f5:99:db:2b:95:c3:88:b0:30:05:2d:6c:
f4:f3:d1:9d:3d:9a:f2:b9:8a:f8:c7:f3:b8:76:04:e6:ce:71:
30:5b:c1:76:86:28:d7:7d:b8:36:26:3d:f0:1e:7b:1f:ae:aa:
54:5c:19:46:42:e9:90:41:b0:7b:22:34:1c:07:15:a2:d0:20:
ea:e5:12:e0:38:f1:9f:76:52:12:ae:01:2c:60:c2:29:09:1a:
6b:77:83:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvdv4lhYTATWN9wOvYT9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjYwNDE3MDAwMTEyWhcNMjYwNDE4MDAwMTEyWjAzMTEwLwYDVQQD
EyhhNDcyN2IyMTY3MmYwNzZkMGFiNWU3YzM5YzcwYThhZmYzOGIwYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmqwLnvymlYAWzYmSt2NL6Tb+DGd
4V9Qla16R0dKPb2uUwBA3T3x0q/FgZsjH/en7VZzf0rsJMkrzskiTGrJFH+zh+/Q
eHmmJaW6TnrU4N0eUP4dW7LyfN8dm28rLBDjOq8Ryz2j6mENyHXxcxK3tiibrwy0
pXV7PIGYDhXbMm7xEALgegXW18sWgWCWiu4KRFitkvHF+3Ci2bgdoaGhtntTW7VY
gXD4ZW4v5u/119HuWdF5o64KYGzaW8d7V3hSDfXPhHc6LHD2yjg3Q4FjUY29zej0
2hj/jIjz8A++kwIwflAmHPPTKFxAJzaTa2XG0yVXRvMbRWGr7BFAi8mBmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRyeyFnLwdtCrXnw5xwqK/ziwx+MB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASanqBh/W
aJljGI8KwW2eT4YnOIP88jYsycYMKgiD7zv/d4OF5ACKh4sWECY7KXsOq9TckoQf
Rhm1eRt5xlUbIrh9+JRdb42K96m3tqAgvp0WO/BKGiBkbzhpb/l/wdrdd593yHs/
wFZ5wsFrBjKdn+ZA3nKi+D65qnhX7Ss6hcvSEAg1uNV+Qx4oOuWWeg9KuqCYv6Rz
mme1IW7JsgXzDpHOBaWiwz/R9ZnbK5XDiLAwBS1s9PPRnT2a8rmK+MfzuHYE5s5x
MFvBdoYo1324NiY98B57H66qVFwZRkLpkEGweyI0HAcVotAg6uUS4Djxn3ZSEq4B
LGDCKQkaa3eDWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:43 2026 by rpki-client