Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: g4vVB7tVCIHEk2zYIm+SAlGw64neSIBc1mff3cH/FEw=
Subject key identifier: BD:BA:04:8C:0D:C4:20:A9:42:18:3F:C9:D9:E9:A9:9B:76:F7:12:5E
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019EBFC7FFF3CAB1214C6B8D67BC5EDF0DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 15F2
Signing time: Sat 13 Jun 2026 07:00:15 +0000
Manifest this update: Sat 13 Jun 2026 07:00:15 +0000
Manifest next update: Sun 14 Jun 2026 07:00:15 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: nav+5stNwQPQeq5TNvErZp+A05H6DPP5BkuQMCnGGzU=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:ff:f3:ca:b1:21:4c:6b:8d:67:bc:5e:df:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jun 13 07:00:15 2026 GMT
Not After : Jun 14 07:00:15 2026 GMT
Subject: CN=bdba048c0dc420a942183fc9d9e9a99b76f7125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:69:40:d0:2e:cd:5a:03:7b:e7:5e:01:26:
4b:3d:96:af:e8:e1:a1:9f:ed:81:b8:92:ce:a2:8e:
e6:63:73:20:0a:d6:0d:4b:74:35:a8:6c:e4:c4:14:
93:a3:1f:28:9d:33:62:1e:e3:4a:11:ca:e6:38:1a:
40:57:c0:32:db:ed:ca:2f:c8:38:de:eb:31:d7:10:
24:c2:58:36:53:fa:69:5b:df:4a:b0:28:29:9c:f1:
34:da:db:45:a5:5a:7f:d4:df:0f:ce:89:0a:c8:06:
d7:6b:b3:2f:b8:8c:c0:53:0d:cb:4c:3a:f4:a2:51:
6b:08:5e:a0:05:27:ba:57:d0:b2:73:7b:b6:ba:da:
17:d8:a4:0d:2c:d2:15:8e:85:eb:7d:05:7c:f8:7f:
78:39:9d:87:85:db:f7:21:61:2a:22:e3:a5:c9:c9:
c9:46:99:21:f0:75:53:7a:9a:ce:3f:ab:e2:3d:dc:
82:1d:a9:22:b4:04:79:42:a0:e5:ba:58:57:77:84:
96:11:f8:15:bd:95:e3:65:bf:90:b7:52:f2:ba:83:
5c:36:0a:49:4f:42:3a:03:15:4c:8a:ed:4d:da:18:
0f:ba:7c:af:eb:5d:e8:c9:80:80:f8:f2:aa:a5:b1:
c8:d0:7e:8d:aa:43:1c:12:f1:6b:28:be:f7:cd:3f:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:04:8C:0D:C4:20:A9:42:18:3F:C9:D9:E9:A9:9B:76:F7:12:5E
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:91:d2:74:5a:2b:b8:ab:72:54:c6:67:c7:4c:72:00:a0:83:
64:5b:56:31:74:05:76:8c:80:19:9c:85:94:4c:32:b6:f6:80:
2e:85:3c:95:3f:48:e7:e2:f4:2b:16:09:5a:b7:5e:91:b0:55:
25:84:7c:af:9a:43:d8:06:ad:d8:20:6c:10:29:67:32:89:ab:
29:28:4a:94:b9:a8:63:51:30:6e:55:07:5e:6a:b7:2c:4f:d5:
22:ad:76:ca:9e:c4:be:bf:d8:0e:9f:ba:d5:32:f4:a0:b0:70:
09:d7:b9:b3:00:9f:20:37:f6:8d:5d:df:8c:ba:68:93:8f:92:
ca:34:e3:a3:89:fe:c4:59:9c:dc:90:dd:56:92:c7:9c:78:d9:
06:64:ee:f7:12:fa:eb:ba:69:1c:a0:ef:c7:bf:0c:06:08:86:
e5:64:4d:2f:06:ce:88:d1:64:f5:05:0e:7f:26:2f:e3:78:e6:
ce:2f:e3:2a:5a:7b:ce:0c:fb:cd:5d:b6:21:e1:ec:d8:5a:6f:
11:22:90:7d:46:11:0c:6a:a5:58:57:b0:88:26:02:b8:91:3b:
d5:5e:83:bb:9f:2d:ba:bc:86:61:69:32:fe:00:f4:1d:dc:c4:
6f:a8:4e:f0:5c:ad:e9:1b:68:52:94:06:e6:dc:bb:b0:bb:7f:
58:b4:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:11 2026 by rpki-client