Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: Hl0At9PipgFKtT/edrPQM0cxqkuE5UXn0KRelAZ+O/o=
Subject key identifier: 2C:CA:32:32:93:CB:CD:7E:84:5D:FB:01:7B:05:D8:47:0E:59:4C:E1
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019F9059B0B329D17C8DDD63C08B14B7E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 165E
Signing time: Thu 23 Jul 2026 19:00:24 +0000
Manifest this update: Thu 23 Jul 2026 19:00:24 +0000
Manifest next update: Fri 24 Jul 2026 19:00:24 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: 2V9dtsSXAuztj3q+aXFtUAFcrP4H/P8cj8IRIvUrEF0=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b0:b3:29:d1:7c:8d:dd:63:c0:8b:14:b7:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jul 23 19:00:24 2026 GMT
Not After : Jul 24 19:00:24 2026 GMT
Subject: CN=2cca323293cbcd7e845dfb017b05d8470e594ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:7c:14:a3:9e:3e:97:cc:98:0f:79:5a:c2:
9a:b1:b7:0e:a3:27:79:32:ae:64:cd:19:f1:44:4c:
27:9a:b1:f5:bb:32:81:34:05:5f:ab:22:87:92:9c:
d3:02:ed:9e:99:49:dc:35:e1:86:ed:76:29:7c:2d:
77:db:62:c7:59:ef:88:66:46:c2:54:48:b4:a2:0a:
3b:dc:5c:85:0f:36:7e:0f:a5:57:78:25:d1:b1:c9:
9a:fc:cc:bd:07:51:ba:95:9f:27:90:e8:41:b6:6b:
11:44:1a:9e:ee:d1:e8:0f:c2:91:77:f7:62:66:60:
40:0f:02:34:97:1e:ce:48:e8:41:fa:18:db:7a:f8:
3f:a2:7a:8d:f2:e3:fe:d4:c4:27:75:a4:39:d7:d9:
fd:26:88:3d:26:fc:47:7c:48:c8:b4:9d:c2:43:ff:
7e:d4:bb:93:01:96:ef:2e:91:12:73:9d:55:59:24:
0c:1b:23:24:b0:c9:4d:6d:3e:b4:a1:67:19:3c:c6:
61:c7:bb:00:8e:ea:8b:67:b8:7d:ea:5b:bb:71:1e:
d8:b3:f2:e3:fb:39:6c:be:b4:4c:6a:3d:6b:fc:5a:
8c:f3:08:63:c0:91:4a:cb:2c:9b:7a:f7:b0:0c:1d:
79:9e:fe:9a:4f:ce:2a:8f:37:9b:3f:82:53:55:c1:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:32:32:93:CB:CD:7E:84:5D:FB:01:7B:05:D8:47:0E:59:4C:E1
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:08:ff:04:9a:49:67:36:fc:40:34:c1:07:7c:ef:b1:6a:50:
d0:2b:1c:dc:53:5a:0a:2f:3e:2a:19:1e:aa:64:90:ab:64:f0:
8c:85:d5:37:17:bc:5a:3a:5b:83:28:1a:22:cf:bb:bb:e2:f1:
82:1b:8f:05:dc:92:33:17:bc:de:f2:76:6e:86:aa:ac:4a:88:
71:a4:84:7c:61:ff:65:e5:b0:b2:cb:c3:c3:b7:1d:f3:56:af:
36:05:4a:ed:bb:ca:87:fb:d8:18:ab:bd:a9:d6:30:e6:b3:da:
60:67:d6:7d:a7:73:3f:9c:61:10:fe:3b:d6:e3:e2:93:8a:e4:
72:60:1d:85:25:0d:ff:e7:df:62:04:82:17:ac:08:a9:c5:53:
fd:99:ee:bb:7d:da:d0:99:1e:e4:dd:a8:2a:7d:b2:19:c4:16:
36:9d:e4:36:a3:ff:79:fb:ae:33:73:52:bc:9f:32:87:84:cd:
26:7f:c3:f2:98:bc:54:45:3a:e7:bb:1f:bb:ad:ca:e7:36:51:
f2:fd:6e:f8:2c:07:35:59:5f:cf:eb:e0:d5:5e:fc:27:42:fe:
30:14:46:1d:9e:fc:30:4d:a0:25:97:d8:70:0c:0b:1b:ed:51:
a5:37:83:ec:b9:bc:f3:08:fb:6e:ae:64:11:ed:7a:b8:8a:1a:
b3:5c:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:26 2026 by rpki-client