Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: MfeRGPZefSYH0Dfw3RMz+51rzaDv2GGXh3m0TW+m3+E=
Subject key identifier: B8:81:A2:CC:F8:D3:AA:B5:4A:77:2C:85:C1:02:15:3E:95:7F:72:AB
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019D984FEE8138E8F624867865A4384166A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 1559
Signing time: Thu 16 Apr 2026 22:01:08 +0000
Manifest this update: Thu 16 Apr 2026 22:01:08 +0000
Manifest next update: Fri 17 Apr 2026 22:01:08 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: ei2MimY2pM5GTO8YhUeaTPZYce7vOEOQ1TbZ3Q2nuRA=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ee:81:38:e8:f6:24:86:78:65:a4:38:41:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Apr 16 22:01:08 2026 GMT
Not After : Apr 17 22:01:08 2026 GMT
Subject: CN=b881a2ccf8d3aab54a772c85c102153e957f72ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:a7:6f:11:eb:e1:ba:f8:b3:16:4d:43:fb:
67:fc:60:5c:de:63:69:dd:40:04:ad:72:52:05:07:
69:d5:23:67:d2:6b:9e:54:d7:6d:63:ad:f0:a2:b2:
6a:2f:9d:22:ec:a3:c9:5e:cf:49:f1:9c:33:f2:ea:
72:77:db:4a:cf:b5:6b:f6:38:e7:17:62:2a:51:89:
11:7a:63:d5:aa:52:72:6b:92:69:7e:fc:2b:ec:86:
87:fc:d5:9e:ca:0a:7a:34:f6:44:7d:02:01:02:80:
4f:3a:69:8e:2c:3b:36:5e:a7:51:12:f8:22:71:f5:
f7:fc:3b:48:e9:41:53:82:90:8d:ef:01:3f:f0:40:
50:3f:f6:4d:0a:62:ed:f1:2e:a7:30:c0:29:b9:30:
f4:44:bd:0c:16:e1:01:5c:c1:fd:18:f6:2b:ab:08:
f2:5e:a2:bf:29:27:44:6f:7b:20:12:11:ed:92:98:
08:f9:7b:4d:24:db:6d:ab:3a:9c:1c:c5:60:2b:8e:
20:4c:f8:2b:68:72:2e:68:87:16:f5:5f:67:03:a9:
72:cd:4f:29:24:f8:6b:e2:63:0d:fb:f9:bc:bf:6f:
1f:bc:83:57:9d:d6:d5:31:e7:b9:18:4c:9f:ce:14:
f7:5d:73:eb:5b:3f:12:c1:fb:2d:3c:79:59:6a:36:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:A2:CC:F8:D3:AA:B5:4A:77:2C:85:C1:02:15:3E:95:7F:72:AB
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:7a:a8:a4:37:f9:85:54:f7:18:dd:d0:9c:72:33:c1:76:
ca:be:43:c6:18:15:3b:bd:54:e2:05:6f:22:57:ff:72:e0:38:
1d:d8:74:d1:c9:65:46:bc:ea:a8:47:0b:f3:1b:5f:09:2f:60:
ca:11:0b:e4:5c:7e:0f:c0:ed:09:39:dd:5e:ba:61:63:6e:a0:
20:11:ca:6d:ea:73:7b:f4:25:a9:25:de:06:cf:0d:fa:3c:fb:
c0:6e:06:82:17:92:c7:16:3f:1f:b8:5b:62:9a:ad:fc:71:62:
e2:77:88:b8:3a:18:d8:8d:24:f5:43:43:e6:f2:32:78:72:4b:
f6:94:a1:f9:2a:b0:dc:a1:27:e8:af:bc:e0:4d:89:b4:b4:d2:
6f:0c:6b:07:e9:ac:75:20:aa:29:1b:fd:b2:7e:5c:c9:03:ce:
ce:1d:2e:8b:22:45:9c:5c:94:f7:ea:67:9b:0d:ed:67:32:a0:
cb:28:8c:b9:ed:f9:6a:f8:33:1b:ed:d6:4f:a4:c2:ff:fc:ee:
4e:ca:6e:9e:77:c8:f0:4d:cd:65:4e:a0:e3:e6:d8:eb:d7:d0:
4c:f5:2b:d8:81:bf:d7:6f:0e:80:61:77:64:e7:34:af:50:e0:
26:b0:a5:80:25:4b:18:fc:72:36:9a:32:12:75:3c:93:d7:20:
11:0f:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:27 2026 by rpki-client