Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: JMcd3OyO6e8PnmMGo+MkPp6BcsqVxLU0HjsMHIlO9kg=
Subject key identifier: 68:D2:E5:73:7E:58:FE:2F:0F:72:2A:B5:3F:96:47:6F:64:1A:2B:42
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01A0D0ED765C7172AD339A90B010515D4025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 1704
Signing time: Thu 24 Sep 2026 01:00:18 +0000
Manifest this update: Thu 24 Sep 2026 01:00:18 +0000
Manifest next update: Fri 25 Sep 2026 01:00:18 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: 5vhiKPxLnv1XiEZJDipRaUMz+6ytlbQpt2IEXXMlpjM=)
2: DrZAtoY9Rywo8Ldr7YL_hDy1B6M.roa (hash: ZHyEZKVIvM9BzDhqQ2OC3fMsoZAiuL1oIVL6MnD4jI0=)
3: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (hash: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:76:5c:71:72:ad:33:9a:90:b0:10:51:5d:40:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Sep 24 01:00:18 2026 GMT
Not After : Sep 25 01:00:18 2026 GMT
Subject: CN=68d2e5737e58fe2f0f722ab53f96476f641a2b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:f9:1f:af:9a:ff:57:ee:53:2a:e6:2e:78:
02:09:90:b9:93:e6:ee:27:a1:b5:32:a0:f0:de:3a:
3f:62:83:16:df:61:9b:87:af:a3:59:b7:93:7b:51:
85:a4:38:21:1a:30:10:89:24:e9:0a:7a:5a:ec:6e:
84:eb:7c:7c:b5:b4:91:35:3f:a7:0b:0f:30:71:27:
f9:25:5a:16:41:82:53:39:0d:2f:fb:04:83:e2:28:
74:f0:31:47:13:90:d0:a3:af:a4:fa:55:0d:81:d5:
16:35:6a:2c:02:d3:90:9f:18:5f:32:df:f8:21:90:
e4:bc:30:ef:6b:6d:ce:f3:5c:ff:9d:3f:9a:ba:a8:
30:b0:53:41:33:42:3b:ad:aa:4e:28:6e:02:4e:e3:
65:69:ea:11:82:9a:c4:4d:01:ae:95:b9:f8:f1:5b:
40:00:73:f5:e3:f1:e3:c3:7f:92:7f:4a:be:be:70:
85:fd:80:ce:ca:88:c1:2d:6e:c1:f3:04:f9:57:77:
b6:bd:0e:43:aa:fa:ea:8c:1c:fa:59:2b:51:0c:04:
9d:e9:65:85:77:b3:6e:82:46:92:29:44:3a:01:93:
df:24:8d:4b:c2:b2:6b:54:c9:29:77:3b:2f:3a:fa:
6f:03:dc:6e:ae:fe:e8:72:8b:eb:5c:29:c4:7c:01:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:E5:73:7E:58:FE:2F:0F:72:2A:B5:3F:96:47:6F:64:1A:2B:42
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:3b:6e:79:95:4f:10:59:35:7c:4d:67:cb:51:e9:4a:bd:
22:b4:b0:15:f6:f9:65:fe:8a:07:53:9e:f2:bc:52:7a:7b:44:
63:ff:2f:c3:a1:ee:06:4e:f0:da:50:69:8b:fb:be:45:2a:58:
6e:58:1b:de:24:5a:c9:4a:53:08:8d:8e:66:b4:82:fc:0e:d6:
c4:3f:0c:f3:60:de:2f:47:71:54:2b:0e:2c:c6:97:fb:76:d2:
b6:0f:b7:47:4b:05:94:08:81:1d:d5:17:45:87:73:42:52:60:
ec:13:1a:76:22:6b:96:57:ef:ce:fc:01:f0:96:02:5f:7e:87:
1a:12:ee:fb:22:af:9c:7d:db:7c:a1:5c:82:44:ba:08:95:85:
44:8e:01:43:a2:ae:a2:87:24:79:11:23:04:90:0c:41:05:81:
8e:65:a1:31:03:5b:22:16:0b:38:85:13:99:f7:c2:7e:19:e7:
f4:e1:c1:78:f0:2e:29:b2:7e:c9:a1:02:d2:16:be:de:0d:7e:
2c:53:d5:9c:f2:df:86:99:cd:c6:3c:a0:47:1d:80:82:28:58:
9f:29:03:80:49:27:35:ca:e1:a1:c0:7d:94:d3:2f:02:90:6a:
15:37:93:15:07:76:60:7a:48:b6:fc:e6:e6:b6:55:e5:fe:df:
d3:00:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:38:35 2026 by rpki-client