Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: kS011cxDBh0wa8P3HgGJLyd1miUn7pZ6SD24HexKZTQ=
Subject key identifier: 1A:74:F7:A9:05:74:34:CF:3D:07:CD:B6:85:00:F4:E5:83:DD:D0:3F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01A0E0CF82754097017EC7DB75C83F956C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 03:01:30 +0000
Manifest this update: Sun 27 Sep 2026 03:01:30 +0000
Manifest next update: Mon 28 Sep 2026 03:01:30 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: C0L/T+ksilRhxtPP9qHoR0HHkfoaqvFEPUefvzyKBWQ=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:82:75:40:97:01:7e:c7:db:75:c8:3f:95:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Sep 27 03:01:30 2026 GMT
Not After : Sep 28 03:01:30 2026 GMT
Subject: CN=1a74f7a9057434cf3d07cdb68500f4e583ddd03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:a6:4a:b6:05:7d:02:5d:60:78:8d:74:5b:
18:43:f3:45:f9:71:e8:85:78:f9:41:39:cd:00:73:
96:99:24:12:50:45:68:5f:af:12:3e:ff:82:61:5d:
bc:56:59:7b:ad:69:d5:c9:18:fd:27:d4:7e:68:ed:
4b:41:ad:90:22:0b:b8:e6:b7:fa:8c:05:a6:3a:3b:
09:60:8f:ac:ae:69:a1:2e:b1:1b:37:51:b5:9a:cc:
16:22:7c:6e:78:80:66:a8:b5:53:f1:f1:12:e1:21:
db:27:fd:c7:cb:79:04:fc:cf:08:3a:a0:e5:cd:44:
4e:fd:2e:e1:5f:13:a8:ae:61:ea:82:99:2d:b9:62:
63:e0:85:6f:31:da:d1:e0:cd:82:57:b3:39:ff:f4:
97:20:f7:84:6c:59:2c:81:ec:46:a5:1d:f8:89:c6:
4a:a8:40:28:41:8b:4d:ba:9f:64:f3:79:43:33:be:
4b:2e:87:8c:3a:47:c3:c0:eb:a3:c6:4d:24:3c:3f:
15:2b:30:7c:93:5c:bd:5f:68:14:fe:ca:c5:4b:46:
0f:a4:19:a1:bc:4b:31:6a:59:b8:47:aa:9d:76:65:
c7:3a:4e:58:f7:80:61:bd:c2:01:41:76:7f:3f:0d:
e5:24:1c:68:12:02:11:29:cb:31:b6:5d:09:d9:9f:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:F7:A9:05:74:34:CF:3D:07:CD:B6:85:00:F4:E5:83:DD:D0:3F
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:d4:d3:e0:3f:c4:37:9e:4a:cf:5c:b9:e0:ca:be:32:cd:
32:5e:60:89:f7:60:af:b4:86:18:18:cc:c1:67:ef:eb:c9:20:
6f:10:91:e7:ef:b5:1a:4b:92:8d:dd:12:c1:cd:4f:49:ce:7a:
2d:c8:99:de:04:1d:8e:de:03:c8:0e:9c:ed:ba:bf:ef:4e:e1:
1b:cb:e1:4e:dd:5a:a5:ea:66:94:e1:c6:19:4d:a2:68:a1:2a:
24:47:c8:a8:6c:13:80:2e:06:35:ae:c5:b0:56:f2:9d:77:b9:
f6:c3:c3:9b:c7:23:49:91:bb:82:e0:a5:d5:fe:f3:61:86:0f:
8f:11:3c:ec:80:e2:96:a1:81:fa:c0:8b:29:93:77:7d:96:a2:
07:0a:d1:70:5d:60:46:ac:97:98:72:d7:9e:52:8c:3e:d8:d7:
84:23:fa:34:76:86:31:f5:81:fb:87:4a:97:59:93:7d:73:72:
aa:99:e8:d0:1e:6e:9e:6f:42:cf:3c:5f:62:4f:be:25:22:f7:
46:6c:8e:99:dd:68:67:cd:2c:71:65:a0:1f:b2:e3:da:d1:94:
58:5d:cc:47:d4:b3:3a:a8:18:6d:2d:4a:d5:3b:f6:4b:87:40:
df:1c:6a:c0:76:b0:b7:2f:60:22:24:1a:73:68:40:46:36:04:
c5:a5:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:25:28 2026 by rpki-client