Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: lwcCX9J6dmtqiJquKnB4tmLsrZGMS5v7iAgava3Iblc=
Subject key identifier: 41:C4:AC:23:7A:92:77:50:F6:09:84:B5:81:E4:DA:C3:63:15:F5:15
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019CAAC6DE62C08AE8F031904E29A7A122A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 14DE
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: qHrZXPFuHbWgz6xqs2l0b9QJjpDWqTcOSew4IHtEubA=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:de:62:c0:8a:e8:f0:31:90:4e:29:a7:a1:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=41c4ac237a927750f60984b581e4dac36315f515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:64:68:93:62:56:f7:0e:3d:d0:43:e5:cd:
8d:bc:a2:ae:14:9a:51:7b:da:9e:6d:e0:e9:01:17:
91:a5:0b:29:0f:b6:e6:33:d4:a3:ab:17:15:6a:b0:
9b:98:61:eb:57:b4:ed:71:fc:72:0e:db:19:8a:8f:
2b:c6:b5:f9:77:16:f3:7e:37:3e:73:1e:38:9f:e3:
69:86:8c:fe:f5:95:0f:d5:fa:f3:35:c5:6f:18:c2:
ca:fc:45:cf:65:a5:da:0a:87:06:5f:86:ad:ca:21:
f1:a2:76:ca:33:ea:5b:15:2a:f4:4d:bd:b2:45:80:
36:61:c2:ef:bf:39:58:de:fd:70:e5:7d:d6:7e:95:
53:91:48:50:05:3b:98:2b:8b:50:c8:d2:56:89:96:
61:69:84:f7:26:64:39:d7:32:56:87:3b:f4:62:88:
c2:80:be:27:6c:7d:e6:c7:50:48:5e:2a:7d:53:4c:
76:0d:4d:ac:23:38:dc:1a:1a:1a:23:a9:18:d8:34:
7a:43:d5:61:a0:95:2b:7a:96:d2:fc:6b:27:2f:81:
14:17:dd:34:33:8c:53:1e:38:6e:05:ea:5f:f9:32:
c7:d7:e9:fc:03:02:9f:a7:52:29:48:a6:23:33:29:
c4:3c:0b:b7:c9:60:fe:29:cd:15:be:94:a6:c1:fd:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:AC:23:7A:92:77:50:F6:09:84:B5:81:E4:DA:C3:63:15:F5:15
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9e:a6:cb:c6:b1:fe:ca:3d:1e:f1:53:4b:13:04:cc:fb:94:
d5:d5:79:da:b0:10:0b:a0:45:86:e4:cd:0e:7d:26:67:6f:84:
39:d2:28:68:6f:c7:86:2c:90:71:66:2a:4a:a8:33:cd:3f:74:
0a:1b:a9:c7:85:87:78:b6:37:9f:f2:7f:e1:49:cf:6e:f7:da:
eb:32:8b:5d:07:35:9c:59:03:a5:74:83:54:2e:c6:34:8c:1a:
26:ed:e2:5a:b5:53:06:6c:77:2f:81:89:9a:62:ed:f2:e4:c8:
d9:73:6c:d0:a8:a2:5c:ba:58:96:f2:f5:09:ae:a7:30:42:87:
c4:a9:da:44:d2:9e:2c:c9:e8:c1:52:c2:59:91:d3:6f:25:85:
81:71:3a:11:25:2f:5f:a1:af:07:3f:2d:7e:fd:a4:51:17:8a:
12:2a:75:8a:4a:f2:c1:2d:8f:7b:90:27:58:b0:91:e6:31:59:
42:1f:cf:94:15:05:5b:4c:c7:1d:93:d0:9b:39:8e:6a:d3:fd:
4b:4b:5d:7c:98:6e:e4:ee:26:54:98:2d:4c:2c:ad:b8:ff:22:
76:a2:9a:2b:5f:d1:eb:02:b9:2d:4f:37:c0:8d:19:ac:c6:a5:
87:79:5c:85:8a:96:72:b0:dc:18:c0:d5:e7:4f:bd:c7:c4:66:
2a:d9:a0:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxt5iwIro8DGQTimnoSKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx
NGM0MzYwHhcNMjYwMzAxMTkwMTI1WhcNMjYwMzAyMTkwMTI1WjAzMTEwLwYDVQQD
Eyg0MWM0YWMyMzdhOTI3NzUwZjYwOTg0YjU4MWU0ZGFjMzYzMTVmNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVkaJNiVvcOPdBD5c2NvKKuFJpR
e9qebeDpAReRpQspD7bmM9SjqxcVarCbmGHrV7TtcfxyDtsZio8rxrX5dxbzfjc+
cx44n+Nphoz+9ZUP1frzNcVvGMLK/EXPZaXaCocGX4atyiHxonbKM+pbFSr0Tb2y
RYA2YcLvvzlY3v1w5X3WfpVTkUhQBTuYK4tQyNJWiZZhaYT3JmQ51zJWhzv0YojC
gL4nbH3mx1BIXip9U0x2DU2sIzjcGhoaI6kY2DR6Q9VhoJUrepbS/GsnL4EUF900
M4xTHjhuBepf+TLH1+n8AwKfp1IpSKYjMynEPAu3yWD+Kc0VvpSmwf0K/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHErCN6kndQ9gmEtYHk2sNjFfUVMB8GA1UdIwQY
MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt
NDBkMTkxMWZhN2YzLzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz
LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ6my8ax
/so9HvFTSxMEzPuU1dV52rAQC6BFhuTNDn0mZ2+EOdIoaG/HhiyQcWYqSqgzzT90
Chupx4WHeLY3n/J/4UnPbvfa6zKLXQc1nFkDpXSDVC7GNIwaJu3iWrVTBmx3L4GJ
mmLt8uTI2XNs0KiiXLpYlvL1Ca6nMEKHxKnaRNKeLMnowVLCWZHTbyWFgXE6ESUv
X6GvBz8tfv2kUReKEip1ikrywS2Pe5AnWLCR5jFZQh/PlBUFW0zHHZPQmzmOatP9
S0tdfJhu5O4mVJgtTCytuP8idqKaK1/R6wK5LU83wI0ZrMalh3lchYqWcrDcGMDV
50+9x8RmKtmgfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:42 2026 by rpki-client