Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: XE6Gj2VelIZ291BWzDurlfLbvMveuAwUkEKlUVXWGv4=
Subject key identifier: 0E:1F:3E:F8:81:18:7B:3E:5C:6A:EC:E4:1A:6B:D6:41:47:B6:EE:E7
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019F17F95AA336DF87F81701644B11527C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0BFA
Signing time: Tue 30 Jun 2026 10:00:45 +0000
Manifest this update: Tue 30 Jun 2026 10:00:45 +0000
Manifest next update: Wed 01 Jul 2026 10:00:45 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: xhQWb4qWldVgM601FW6+lGJfxqJ+julO0GwI0dFJBxo=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:5a:a3:36:df:87:f8:17:01:64:4b:11:52:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jun 30 10:00:45 2026 GMT
Not After : Jul 1 10:00:45 2026 GMT
Subject: CN=0e1f3ef881187b3e5c6aece41a6bd64147b6eee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:61:c6:27:77:00:a5:61:50:ed:1b:af:aa:
8f:5b:2b:82:a5:d5:74:f2:27:69:10:7f:e4:b6:59:
4b:a3:4a:bb:d3:8b:40:4a:b8:34:16:a2:04:77:2b:
20:4d:98:47:cc:7c:b9:30:3d:1b:c8:b5:06:2a:1e:
a1:c4:eb:b0:6b:e0:c4:0a:c7:84:d4:d8:63:69:5e:
98:51:a9:d4:34:ed:0d:d9:fc:3d:09:2e:49:7d:b3:
89:63:3e:40:ee:46:27:9f:30:f0:e8:61:db:8d:51:
04:67:da:8c:93:14:40:41:2a:30:67:ad:0a:a3:2f:
2e:c5:3d:97:f1:91:1c:14:75:86:58:85:37:4a:32:
0d:12:67:7b:f0:48:32:43:f1:20:01:cf:bb:ca:21:
ed:16:4c:6a:ec:1b:c4:f9:54:9a:cb:4b:64:c1:1d:
5b:b8:54:62:b8:5a:25:0a:f8:9b:9f:e1:e0:33:65:
4a:8e:a4:3f:88:37:b8:19:7f:9b:8b:aa:38:9a:37:
c5:41:54:3d:c6:fe:86:9d:93:87:d8:66:ab:8f:84:
0f:45:0b:0d:6a:5b:f6:65:44:13:d7:34:ae:b6:f5:
31:aa:45:1d:4c:87:54:d6:9a:15:71:e6:2b:ce:7b:
5b:75:08:7e:d2:12:1c:ce:73:c9:ea:12:18:93:50:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:3E:F8:81:18:7B:3E:5C:6A:EC:E4:1A:6B:D6:41:47:B6:EE:E7
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:49:00:49:8e:72:41:1a:bb:10:24:36:6d:f6:e9:42:db:
c3:19:84:a9:3b:22:80:d9:41:88:35:d5:4a:56:cc:21:8c:16:
77:58:bb:39:88:91:9f:84:37:2b:81:b1:18:5b:06:73:38:2b:
46:1e:2f:e0:a9:30:c6:5d:10:31:f2:46:8c:c1:6c:b9:50:d0:
95:d1:22:7a:4b:e2:55:92:df:4c:67:cf:e4:b0:3f:84:2d:4e:
7f:03:cb:c3:9d:9d:60:17:2f:6a:e8:79:dd:61:51:fa:c1:47:
f5:62:79:d2:3e:f0:a5:e4:d7:52:75:21:6a:e1:0e:93:e6:f1:
7d:ff:df:8e:29:4d:24:69:4a:4c:18:14:65:89:36:07:fb:27:
ed:dd:94:29:51:df:0f:57:5d:32:46:0c:c4:ce:ae:92:20:f1:
6b:be:7c:e6:d9:da:74:ed:15:47:f8:12:ca:49:5b:a3:79:69:
24:3b:f1:2c:d7:ed:c2:91:72:e8:5a:b2:98:92:19:20:e1:92:
aa:bd:13:91:fc:8c:fe:0e:6e:a0:87:83:44:a2:1a:b2:46:99:
2f:7c:07:84:65:51:1f:70:54:36:63:bc:9c:0a:a5:03:94:ad:
50:44:33:d8:32:ea:5c:f3:0f:26:be:d8:1f:95:7d:2f:6d:b3:
3a:fc:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:48 2026 by rpki-client