Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: HLMpF8oUn5OZhAhUvOtGEnYA7Nho7kIjjcWci2flUGs=
Subject key identifier: EF:47:CE:8E:62:4A:89:25:2F:69:83:67:CF:69:0B:C7:49:72:FE:0C
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019ED318AE0E67442B29B1E4DEC77E9568AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 15FC
Signing time: Wed 17 Jun 2026 01:01:10 +0000
Manifest this update: Wed 17 Jun 2026 01:01:10 +0000
Manifest next update: Thu 18 Jun 2026 01:01:10 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: 90bvQTYK3DsQzGfRJ+42KTovEbta0caYgtiKNIOnrkY=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:ae:0e:67:44:2b:29:b1:e4:de:c7:7e:95:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jun 17 01:01:10 2026 GMT
Not After : Jun 18 01:01:10 2026 GMT
Subject: CN=ef47ce8e624a89252f698367cf690bc74972fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:26:3c:68:7a:aa:3e:a4:e0:ea:51:cd:c9:
a3:ef:49:f0:41:a0:f3:de:b2:5f:ff:aa:8b:6f:1b:
7f:c6:d2:7e:3e:51:76:ef:1a:e3:03:2f:58:46:ec:
33:ce:63:f8:c9:41:b4:75:25:cd:de:0a:24:8a:e7:
05:1b:ba:d8:75:72:ae:bf:41:82:79:55:7b:82:26:
a1:46:f3:93:0d:f4:9a:df:46:8f:69:e4:f7:9d:3b:
e8:55:1e:65:f4:07:41:3d:f3:ed:3c:11:cb:90:a1:
d3:6f:14:bf:3e:8c:b7:8e:52:d2:b4:f5:85:2b:88:
4e:48:e5:10:05:df:df:c9:7b:1d:71:ce:01:c7:62:
a6:48:56:56:92:20:3a:78:4b:aa:d3:9b:9f:a1:f2:
c1:15:f4:54:10:54:39:23:c0:97:9d:a1:27:dc:e1:
80:7e:de:07:1e:69:03:b6:93:7b:f6:79:7d:46:5e:
c9:01:0a:65:ad:7c:f3:88:3f:f7:03:52:28:79:22:
a5:73:a6:76:75:d5:5a:39:98:c5:3f:64:6a:f2:c9:
e5:55:c0:a8:88:43:b3:c2:93:13:eb:91:3a:7e:9b:
00:36:bc:41:66:c9:86:3e:6e:cf:9e:7f:8c:ae:16:
68:b6:77:04:16:de:1e:26:85:64:8b:6b:4f:e5:58:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:CE:8E:62:4A:89:25:2F:69:83:67:CF:69:0B:C7:49:72:FE:0C
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9c:ec:3a:98:79:f2:d6:de:62:7f:87:7d:c3:39:63:ba:e0:
26:8f:cd:5e:b9:6e:3a:21:6d:24:66:12:88:f0:47:da:67:3f:
84:f4:b8:21:8d:65:c0:ac:a0:90:5c:e8:ce:f9:8f:6f:93:92:
60:3e:42:9b:17:f7:f2:7d:7f:5e:27:21:95:b7:0b:3b:ef:76:
8d:a9:05:60:1c:7e:02:5a:88:bd:6f:c3:27:b9:74:2a:e5:81:
45:df:10:b8:4f:0a:1d:cf:29:30:6e:3c:04:4a:fe:28:9c:e0:
61:b2:35:e7:bf:ad:c3:5e:1b:88:6b:21:d5:f8:a5:67:3b:49:
6b:65:ed:51:66:33:81:33:5d:ec:17:c6:22:ac:55:bd:9f:a5:
75:00:ed:84:be:12:65:2f:51:ef:39:54:bf:a6:a1:8e:32:b2:
9d:6a:42:f9:bd:bf:66:eb:f0:a4:20:1e:87:4e:3e:b9:c7:3b:
0a:6b:b5:7c:39:cc:6d:36:e1:32:18:0e:9c:ee:c4:d1:88:6e:
79:b0:bb:7c:21:ec:b3:fe:0a:bc:99:1f:38:55:e3:cd:05:b5:
89:e0:e7:53:ba:c9:4e:cb:2f:32:ea:7f:3d:92:d1:25:17:8b:
04:7a:b7:b7:09:c3:53:0c:84:62:9f:59:1f:1b:b5:ae:9b:2a:
d4:43:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:08:49 2026 by rpki-client