Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: kSAqgvKSfmWCFdVPBluttNxdZtOkYaL/JkcYmGuoeac=
Subject key identifier: DC:FF:EB:94:AA:F7:76:05:41:D7:22:68:66:DF:8D:4F:CC:57:0E:E7
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019CAB3467DA051895FEE0E6F4EFE20DC82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 21:01:04 +0000
Manifest this update: Sun 01 Mar 2026 21:01:04 +0000
Manifest next update: Mon 02 Mar 2026 21:01:04 +0000
Files and hashes: 1: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (hash: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I=)
2: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: uhO5pOvjSHq9ydAd7MLwaSvMQ+63DIT+W579hR+Rh5o=)
3: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (hash: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:67:da:05:18:95:fe:e0:e6:f4:ef:e2:0d:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Mar 1 21:01:04 2026 GMT
Not After : Mar 2 21:01:04 2026 GMT
Subject: CN=dcffeb94aaf7760541d7226866df8d4fcc570ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:55:53:5f:f0:15:c2:53:12:08:87:4e:2d:
7e:b1:56:14:c8:42:ac:3e:d2:c1:04:66:22:50:7a:
e1:af:e0:2e:20:60:85:b8:cf:77:a5:47:9c:d2:24:
49:4f:f3:5f:ab:7f:f4:e1:cb:52:8d:40:89:f5:50:
96:c7:a0:d2:4e:27:6c:32:c0:7b:64:0b:ad:56:67:
f6:bf:90:4a:a4:3d:3b:05:d1:c6:ff:9b:5e:50:38:
25:56:b8:7c:06:76:3d:6c:d9:b8:2e:e9:bb:de:c5:
dd:59:eb:c2:04:98:2a:b8:c3:36:c5:0b:c3:5b:46:
b7:6c:eb:6a:ac:76:f0:ff:9a:02:14:28:11:f5:a7:
3d:ed:b7:01:f6:90:da:b0:66:d4:e2:cf:4e:b7:3f:
52:22:74:71:41:0a:86:ab:e9:b6:93:b4:6b:80:ee:
a2:cc:37:97:7c:f8:75:a7:92:b5:bd:9f:fb:3e:91:
b1:ac:c1:7d:f0:1e:f6:17:17:f2:b6:8d:25:24:d7:
de:4e:58:6e:21:c1:0e:af:14:11:0d:e6:3d:47:a9:
c0:57:4f:ef:1b:4f:fd:63:0d:10:98:8c:e8:f3:f1:
ef:61:7d:c9:63:21:83:bb:72:c9:bb:ad:b4:62:91:
01:c3:00:5a:6e:09:15:fe:04:40:a8:03:d6:18:0b:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FF:EB:94:AA:F7:76:05:41:D7:22:68:66:DF:8D:4F:CC:57:0E:E7
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:74:76:bb:2d:a7:19:ff:01:23:13:1c:0c:10:9c:0e:21:
7e:e1:16:2f:8d:fc:8f:30:2b:46:d2:5d:71:c6:a9:7f:c4:16:
7b:2b:1b:ae:d3:3f:00:a7:6d:2f:dc:b2:ec:c5:a8:9e:56:50:
7b:6c:9a:25:0f:67:32:fb:11:66:8a:55:f7:cd:d2:a5:9b:b6:
8b:fb:1b:fa:63:44:51:b3:f6:88:db:22:f7:eb:bb:44:08:12:
05:53:20:1c:0b:8f:e4:fc:23:d6:c1:0b:99:65:10:a8:74:99:
58:cf:07:04:ec:db:6f:0a:59:8b:2a:7f:db:09:db:34:0c:99:
91:3c:51:d5:29:32:0e:fa:6d:cf:94:a4:78:94:1b:16:50:b1:
c5:a7:a5:c7:c5:05:95:d1:66:97:d0:b7:0a:a9:a4:03:74:90:
9b:7f:eb:17:f4:27:9a:3a:2a:fd:10:69:db:eb:db:30:60:2c:
cd:c0:83:f2:7c:d1:d9:a5:02:ee:18:a9:b3:1e:01:12:04:18:
0e:f7:ff:cb:76:ea:d3:6c:34:4a:b2:61:e4:80:f8:5a:1d:fe:
66:7e:f5:c0:a6:0d:c3:74:67:ea:50:18:9f:36:5a:3f:56:1d:
02:74:f5:d7:c5:cc:31:4d:df:23:aa:40:96:4b:47:58:35:11:
e8:c2:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:03 2026 by rpki-client