Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: 3hR+h7RzOsXvPL+DPRTgQ9/AFtH1UcwKHTPT/zfPlcU=
Subject key identifier: A5:F3:98:1C:20:B0:1D:47:37:3D:51:CC:CC:1C:7B:9E:28:AE:E4:81
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01A1C4423A2557D02F2EBB30A95B947C5EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 1782
Signing time: Tue 10 Nov 2026 07:00:36 +0000
Manifest this update: Tue 10 Nov 2026 07:00:36 +0000
Manifest next update: Wed 11 Nov 2026 07:00:36 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: r9mtjIo6yZHhp6QI7xMmIxO0T2OGXohgCFkctKXZZDg=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:3a:25:57:d0:2f:2e:bb:30:a9:5b:94:7c:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Nov 10 07:00:36 2026 GMT
Not After : Nov 11 07:00:36 2026 GMT
Subject: CN=a5f3981c20b01d47373d51cccc1c7b9e28aee481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:ad:72:59:0a:66:12:00:4e:4c:95:50:22:
0e:52:2f:89:51:6b:e1:b5:20:d7:ec:71:68:08:c9:
09:d4:7f:a1:c3:92:ba:6a:e6:a3:a2:76:ab:73:ab:
b1:26:15:fb:71:5f:5c:7f:72:b1:ad:ae:63:3d:af:
0b:49:69:39:5c:9f:c6:08:48:6d:27:80:e0:ac:f8:
26:86:6e:b8:1c:fc:ef:6f:82:a3:01:18:30:42:6a:
37:28:10:d0:45:7f:4f:45:c7:32:ab:49:80:4f:f7:
ad:6f:cb:d7:05:1b:ef:1c:92:ff:5e:f1:14:a6:e7:
37:2f:56:45:12:03:c4:ad:97:14:c1:20:3f:45:fb:
2f:c7:86:52:29:b9:e6:d0:0c:71:37:06:6b:11:88:
4b:76:ec:3e:c8:3a:2e:a5:2c:d3:c3:25:ea:a5:55:
04:41:8a:ee:d6:17:b7:e4:fd:dd:5e:5b:ee:eb:57:
b6:cd:94:f6:05:12:da:1a:d1:b5:70:63:31:56:3c:
e3:d2:7f:5c:42:48:b2:e4:7c:09:88:74:07:f4:1e:
79:66:5f:ac:01:31:7d:23:cb:d7:32:41:b0:e0:e4:
5f:07:11:b7:6e:ae:f0:fc:c0:51:5e:6a:60:81:9a:
da:28:66:65:82:99:7f:94:30:ec:37:29:ee:72:ec:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:98:1C:20:B0:1D:47:37:3D:51:CC:CC:1C:7B:9E:28:AE:E4:81
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:23:83:89:fb:c6:6d:01:74:c9:97:aa:43:4b:47:5e:b0:fe:
d5:a8:66:a8:18:91:31:0b:07:37:cd:90:75:8c:74:03:5c:a0:
1c:4a:7c:95:f7:dc:dc:3a:9e:ee:21:ad:fd:ea:c0:b3:9b:99:
63:e1:b8:b7:6f:c9:f1:10:07:49:53:41:b4:1e:c3:c4:0e:e6:
d7:95:a8:aa:bf:cf:1d:66:f1:b1:d4:e7:1a:92:38:87:4f:cd:
17:d6:35:f8:20:1a:b9:1b:8e:53:43:50:f5:86:d2:65:ef:8f:
be:f6:5c:7f:0f:c7:78:22:eb:7f:dd:a5:ed:6a:10:b4:2e:7a:
44:c4:7e:bf:c0:f1:02:e5:80:9e:64:62:f7:a4:0b:c2:f2:5e:
5a:c0:5e:e1:c3:bc:4c:4d:05:54:d0:9b:1f:67:ff:91:4b:7b:
06:ff:7a:58:07:90:dc:aa:7f:f1:98:f8:30:d3:0c:6d:d3:ba:
85:b0:38:ad:11:1a:a4:43:ca:89:56:99:ce:36:ee:75:27:d8:
30:ad:05:33:1e:7a:10:45:a6:1f:56:21:3f:08:0b:65:5b:93:
7b:6a:98:2f:97:1f:5e:91:39:62:d6:98:c2:49:cb:06:bd:b5:
78:a6:11:14:c6:fb:50:f3:49:e9:e2:c2:d0:c1:b8:ab:87:0c:
87:78:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:50:55 2026 by rpki-client