Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: TLiTQqNjzyu2iPgbmFBSBYuVO474hJ69+XlFwP+Bqtc=
Subject key identifier: 9E:B8:02:D0:C5:93:A3:C1:C5:FC:E5:7E:E0:80:75:0B:C0:AF:3B:5C
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01A13F027D92071037900CC273ADF5822970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 173D
Signing time: Thu 15 Oct 2026 10:01:30 +0000
Manifest this update: Thu 15 Oct 2026 10:01:30 +0000
Manifest next update: Fri 16 Oct 2026 10:01:30 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: sgdewaJvC3Lto9Kls93e0H8maTODIjFQW9HnZMPXagE=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:7d:92:07:10:37:90:0c:c2:73:ad:f5:82:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Oct 15 10:01:30 2026 GMT
Not After : Oct 16 10:01:30 2026 GMT
Subject: CN=9eb802d0c593a3c1c5fce57ee080750bc0af3b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:f2:c6:6c:c2:24:0f:54:29:84:fa:48:80:
39:c8:a6:86:cf:3a:18:c9:80:74:fa:3c:a7:5f:2d:
d6:f3:52:95:43:14:9b:47:62:c2:37:d7:b9:d5:e1:
96:d7:59:b4:07:e2:5d:65:0b:66:eb:0a:53:17:9b:
40:07:15:b4:89:f8:5b:8f:e1:26:f2:69:df:0c:48:
ce:24:51:85:e6:57:5e:57:43:56:2d:03:f6:a5:24:
bc:c8:21:37:98:a1:91:11:60:2e:ed:c5:9d:2b:a6:
d5:03:d3:17:f7:40:ca:98:b7:8c:86:a7:46:06:f0:
83:c1:a2:44:20:76:b9:8b:1e:00:66:99:11:c9:90:
0a:b4:d3:e1:74:af:3a:8b:7a:a7:50:18:7b:55:c2:
64:b6:f8:ad:29:3e:91:23:af:bc:28:6d:a1:78:d0:
98:2f:29:b2:f2:d5:fc:eb:26:7c:e1:73:08:22:86:
4c:f8:50:7d:2d:29:18:c1:4c:4f:9f:7b:be:d9:73:
84:23:6f:26:45:c8:8b:ce:64:b0:ce:67:3f:09:27:
d6:6e:59:26:a1:dc:51:2a:1f:0c:b1:77:fe:7d:64:
39:cf:c1:76:9a:46:be:60:c7:77:2d:a4:10:e5:bc:
4a:81:e2:ae:85:e9:79:e2:3b:d9:3f:f5:d0:1c:cc:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:02:D0:C5:93:A3:C1:C5:FC:E5:7E:E0:80:75:0B:C0:AF:3B:5C
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:18:36:1e:7d:3a:f9:e5:41:0d:1e:c4:5f:51:8f:aa:15:01:
61:2f:89:13:62:57:2f:6f:45:46:78:da:68:40:f9:0c:f9:17:
a6:b5:35:47:9a:a7:14:40:97:5c:d5:d3:c2:a0:8b:3f:d7:c6:
13:3a:8c:82:33:40:5d:26:6d:ba:a5:3f:fb:91:b0:c6:5a:15:
0a:10:30:35:4a:87:42:fb:fc:cb:9a:aa:22:81:c0:7d:0d:b0:
26:1d:49:70:0e:08:84:3d:c3:b6:e8:c9:bd:d1:89:33:8b:0a:
0a:32:10:bc:e5:27:77:7b:17:ec:2a:02:f0:63:7b:f6:c4:ff:
a1:66:0c:e4:a9:c5:d6:29:17:34:2f:c6:f9:6d:d5:4e:c7:91:
1e:42:19:b7:e3:51:56:d7:de:cc:8e:c9:c5:5a:03:0f:03:a9:
5e:e5:21:bb:d5:2c:ed:76:ea:91:bf:37:6c:c4:9b:b4:81:26:
ab:8c:08:26:69:2e:42:3d:42:05:de:7e:28:89:7b:19:07:7f:
b0:f0:b9:25:e2:6a:19:58:cc:54:1e:70:25:0b:1b:cd:71:fb:
21:dd:dd:b9:56:76:3e:59:52:98:c4:84:86:89:a6:5f:8d:32:
94:e8:ee:4c:1a:09:af:48:e4:39:95:3d:75:fa:b3:28:2c:59:
52:91:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:04 2026 by rpki-client