Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: 560BpQHk3yFslRMRrwJ1K6hhD97HiFtuTwG2m+pWcyA=
Subject key identifier: A7:B8:89:F2:CA:2C:AF:97:E2:98:BC:0F:2F:0E:8B:5F:FB:9F:D5:6C
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019E1D908003B6C0E9664CF5AFC9B0519FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 159E
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: 6IFOgPb3euRLwPHktoNcb5WebxhluObBQ2/84euub1g=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:80:03:b6:c0:e9:66:4c:f5:af:c9:b0:51:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=a7b889f2ca2caf97e298bc0f2f0e8b5ffb9fd56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:4d:5a:fa:17:55:06:c0:ff:d7:67:a1:2a:
fc:30:12:68:01:3b:0e:b8:f4:1d:6a:3a:b6:57:06:
1d:e5:64:da:ee:23:aa:e0:92:8e:f2:9e:ee:0a:c8:
9e:a4:f9:6e:0e:c6:fb:dc:8d:e0:d5:fc:f5:be:d5:
c9:66:44:2a:5b:74:5a:18:fe:d9:b8:8e:6c:46:63:
27:97:48:39:34:7c:08:b2:03:04:33:60:46:d6:23:
c3:6a:89:bf:b6:43:25:ab:76:5a:62:01:6d:fb:3f:
24:b8:a0:90:fd:6f:cc:47:1e:6d:f1:ad:d8:c4:a1:
d9:bc:fb:53:bf:31:04:39:ec:b6:0d:c9:c5:0d:a5:
01:a9:db:27:d7:1c:84:b2:0d:c3:1a:a0:2c:54:46:
2b:8a:fa:0f:80:05:e0:37:72:95:a4:ac:f1:88:bd:
6f:43:47:37:46:60:6b:af:f1:e9:cb:2b:f6:dd:c4:
49:49:cb:a5:d8:72:49:72:94:6b:29:b6:ad:3f:61:
46:d9:9a:7c:05:6e:7f:0b:21:0b:75:75:b6:ae:b9:
27:05:af:eb:9a:aa:ce:26:59:dc:9e:d6:ce:12:4f:
01:97:9a:b8:1e:30:e8:c8:a7:61:8d:16:f0:a1:4f:
ba:99:04:ca:17:a5:80:9f:32:d4:6b:0f:4f:e5:55:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:89:F2:CA:2C:AF:97:E2:98:BC:0F:2F:0E:8B:5F:FB:9F:D5:6C
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a2:42:60:55:02:50:d2:e2:f6:61:fa:ac:89:f6:10:5b:77:
41:5b:ee:d7:7f:7e:27:03:5a:14:1c:a8:b6:ca:4c:dd:b2:d8:
d5:94:7f:a7:d4:d3:3b:a6:a7:4e:fb:75:41:01:40:1f:00:85:
55:22:37:92:ba:5f:ce:d1:e6:2b:cf:5c:a2:71:2b:68:4e:45:
de:8c:35:c2:38:48:b3:df:00:62:79:6c:b4:79:31:a2:af:a9:
7a:08:b1:b8:68:da:7d:81:20:9e:28:48:be:5a:7c:29:b2:d9:
33:1b:8e:b8:dd:50:ce:f1:b9:bc:17:79:ec:89:02:0c:ea:a8:
1a:b5:7d:0d:54:53:d6:ef:92:ec:ff:b2:f5:00:be:84:44:2c:
98:f4:8b:26:d6:f8:88:05:76:44:9d:a8:3d:f9:99:ee:17:c3:
43:17:ef:cf:fd:64:a4:4b:ed:a0:33:a0:ff:f7:b2:59:db:5a:
50:51:99:e0:53:ab:b8:d1:75:fd:24:ac:f1:73:e0:83:06:d6:
7e:08:80:dc:71:71:b1:de:92:c6:5b:0f:8b:b9:f6:00:fb:3b:
e7:30:bb:db:07:2d:95:20:5d:41:4f:ed:4d:a8:e6:de:4f:3c:
86:68:61:4d:b6:4f:69:91:bd:64:8e:70:59:28:b5:dc:88:9c:
92:c3:80:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIADtsDpZkz1r8mwUZ/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx
NGM0MzYwHhcNMjYwNTEyMTkwMTA5WhcNMjYwNTEzMTkwMTA5WjAzMTEwLwYDVQQD
EyhhN2I4ODlmMmNhMmNhZjk3ZTI5OGJjMGYyZjBlOGI1ZmZiOWZkNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxilNWvoXVQbA/9dnoSr8MBJoATsO
uPQdajq2VwYd5WTa7iOq4JKO8p7uCsiepPluDsb73I3g1fz1vtXJZkQqW3RaGP7Z
uI5sRmMnl0g5NHwIsgMEM2BG1iPDaom/tkMlq3ZaYgFt+z8kuKCQ/W/MRx5t8a3Y
xKHZvPtTvzEEOey2DcnFDaUBqdsn1xyEsg3DGqAsVEYrivoPgAXgN3KVpKzxiL1v
Q0c3RmBrr/Hpyyv23cRJScul2HJJcpRrKbatP2FG2Zp8BW5/CyELdXW2rrknBa/r
mqrOJlncntbOEk8Bl5q4HjDoyKdhjRbwoU+6mQTKF6WAnzLUaw9P5VUIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe4ifLKLK+X4pi8Dy8Oi1/7n9VsMB8GA1UdIwQY
MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt
NDBkMTkxMWZhN2YzLzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz
LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqJCYFUC
UNLi9mH6rIn2EFt3QVvu139+JwNaFByotspM3bLY1ZR/p9TTO6anTvt1QQFAHwCF
VSI3krpfztHmK89conEraE5F3ow1wjhIs98AYnlstHkxoq+pegixuGjafYEgnihI
vlp8KbLZMxuOuN1QzvG5vBd57IkCDOqoGrV9DVRT1u+S7P+y9QC+hEQsmPSLJtb4
iAV2RJ2oPfmZ7hfDQxfvz/1kpEvtoDOg//eyWdtaUFGZ4FOruNF1/SSs8XPggwbW
fgiA3HFxsd6SxlsPi7n2APs75zC72wctlSBdQU/tTajm3k88hmhhTbZPaZG9ZI5w
WSi13IicksOAeA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:07:32 2026 by rpki-client