Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: wjCLMMZduLSoI8qoS4FHnXYX4A/upE8478UsL9CUqOk=
Subject key identifier: 65:93:A0:35:BD:CF:A0:DA:5D:D7:38:EE:E9:CA:8E:5E:67:F3:0E:D0
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01A0C368A2E14EDC40AFD7BE0EC722C73B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 16FD
Signing time: Mon 21 Sep 2026 10:00:09 +0000
Manifest this update: Mon 21 Sep 2026 10:00:09 +0000
Manifest next update: Tue 22 Sep 2026 10:00:09 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: PM31CjAcDyK1evJwnxqz6sct/AtixPODcc/nyCFR5VI=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:a2:e1:4e:dc:40:af:d7:be:0e:c7:22:c7:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Sep 21 10:00:09 2026 GMT
Not After : Sep 22 10:00:09 2026 GMT
Subject: CN=6593a035bdcfa0da5dd738eee9ca8e5e67f30ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:e8:cd:6f:a0:4a:bd:db:28:e5:e9:b0:95:
ba:ad:90:55:27:bb:c7:29:eb:22:46:46:61:7e:8e:
95:86:4f:4d:76:2b:f8:98:16:70:e1:85:07:e5:d6:
8b:f0:b7:d5:b5:ef:9a:14:e8:6f:f6:6a:5c:96:62:
9d:e4:e7:73:35:cb:53:cb:21:0b:cc:70:ad:de:57:
db:2e:21:eb:6f:db:b2:aa:99:98:b8:58:a4:eb:f9:
6c:99:72:2e:3a:02:d3:7e:65:39:3d:eb:6a:d4:ae:
29:be:59:6e:06:12:2e:09:61:aa:60:24:ae:05:75:
ea:79:be:01:7a:43:b9:cd:84:e5:fd:d6:51:37:8e:
99:9c:3c:e5:15:93:f6:7d:3a:46:08:20:d6:59:25:
c1:64:7d:8a:eb:4f:a6:ed:d4:d6:fe:ce:29:63:4d:
f9:bb:90:52:4a:eb:ab:84:5d:45:96:eb:7c:b2:f6:
ea:b4:09:80:81:f8:15:7f:52:75:b7:83:b1:58:94:
82:60:7b:20:61:43:5b:a0:5e:7d:f5:f1:d7:d8:63:
d5:6d:a0:fc:ce:90:b5:ef:e4:d3:eb:1a:ef:9d:f0:
20:75:e3:96:39:86:5b:08:59:8b:16:5a:e6:fb:de:
ac:d8:d7:8f:f6:dc:40:c6:79:35:90:a7:7d:39:6c:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:A0:35:BD:CF:A0:DA:5D:D7:38:EE:E9:CA:8E:5E:67:F3:0E:D0
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:20:c1:74:d4:43:7d:e9:9b:63:cd:b3:96:42:eb:fa:ce:ae:
c2:62:fe:a9:0a:3a:d7:f8:5a:6e:74:c2:b0:d3:3c:d3:08:10:
80:f3:7e:4f:3e:11:53:7b:92:07:f8:2a:ef:6b:68:f2:05:64:
2d:3c:1e:8d:7b:b3:12:eb:4c:a9:94:d8:f1:53:a9:18:df:19:
8f:a8:06:2c:11:62:14:70:16:27:40:2e:03:16:b2:46:90:b0:
3f:35:b9:67:43:a8:93:9c:59:9f:c6:89:c0:bc:d2:ca:23:17:
27:34:cb:0e:73:9b:0f:34:ac:2a:ac:9d:6f:c5:07:a3:41:6b:
4d:9c:86:05:7f:7a:4b:bd:15:85:07:97:94:5e:06:75:32:1f:
82:63:99:0e:b1:d1:9c:fa:ed:c6:3b:0b:e5:f5:a9:20:52:f6:
0b:8f:84:67:d3:35:b7:62:fa:4b:75:bf:6b:56:83:95:86:21:
e8:e4:c1:4b:09:03:78:47:c9:70:ad:b3:01:9f:80:2c:7e:78:
e6:dd:be:bd:ae:4c:d3:df:8e:c2:27:ba:e8:db:a8:8d:08:39:
d2:17:48:65:f4:d0:df:26:47:c1:4f:a0:bd:c3:f4:af:8d:8b:
08:57:a6:0c:eb:25:61:82:01:41:a5:af:15:a2:e3:05:74:5e:
5f:0a:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:46 2026 by rpki-client