Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: UWHArrRzA1Ncb/r/k3WfZIVObJoZtFQORJYWnjpKlOI=
Subject key identifier: 7C:C8:68:56:8C:B7:7F:1B:8B:C8:53:28:F7:B7:5C:7E:B5:36:EE:E0
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019F8643C15213C5188A9DBA7C674CF2264A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 10D0
Signing time: Tue 21 Jul 2026 20:00:14 +0000
Manifest this update: Tue 21 Jul 2026 20:00:14 +0000
Manifest next update: Wed 22 Jul 2026 20:00:14 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: IRYzuMXMKkfJcbPxDUevjzLch9DZKPTGDrjU3zkeJ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:c1:52:13:c5:18:8a:9d:ba:7c:67:4c:f2:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jul 21 20:00:14 2026 GMT
Not After : Jul 22 20:00:14 2026 GMT
Subject: CN=7cc868568cb77f1b8bc85328f7b75c7eb536eee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:df:53:4b:30:a9:f4:1c:79:93:7e:49:f8:
9f:02:f8:d4:e5:a3:2c:ba:4b:ee:88:42:f1:19:89:
39:c2:ee:a6:c3:f9:24:98:92:d1:8f:97:33:9c:48:
d9:cb:1b:83:eb:9e:b5:85:c6:f4:e6:c5:20:92:9b:
ef:52:ba:63:94:ed:c3:a4:13:cf:07:ad:0e:16:e0:
d9:cf:c3:d0:62:a4:10:84:4c:15:e2:6d:0e:85:77:
e9:a8:89:3d:1a:6b:7e:0f:e7:9b:67:0a:4d:f7:05:
86:25:6e:ff:5b:85:f4:f9:5d:08:c3:b7:f7:e4:9a:
7c:9b:ec:87:54:64:71:79:a0:e6:35:10:72:24:1f:
d0:aa:ea:a6:74:e1:14:18:40:5b:00:79:c2:bc:20:
59:99:32:9d:70:5d:59:6b:9b:cd:23:88:86:ec:67:
19:2d:d4:dc:40:ea:02:da:7c:28:99:9b:9f:d1:e6:
5a:57:75:c4:33:da:07:54:7b:36:90:76:01:a4:06:
32:bb:1c:d5:9a:ba:7a:0d:d8:cb:15:36:a0:92:90:
3f:40:40:85:05:c9:1c:bd:9b:ce:41:83:8a:8e:f0:
23:8e:8f:8b:e7:7d:21:11:c2:f5:ca:9c:76:fa:8d:
47:82:1a:19:e5:1a:75:fd:41:3b:70:12:c5:d4:ad:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C8:68:56:8C:B7:7F:1B:8B:C8:53:28:F7:B7:5C:7E:B5:36:EE:E0
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:26:3b:16:8c:a1:86:00:6e:61:8a:8e:15:a0:5a:56:22:3f:
05:38:c9:66:5e:47:89:d1:8b:e6:54:b5:8d:06:91:e2:1d:65:
a5:53:f4:0a:e0:56:64:07:a0:13:25:27:82:56:5e:a5:80:a9:
62:85:9b:f1:43:51:1f:90:4c:06:d1:0d:db:35:cd:1f:ea:10:
2d:87:5e:d6:82:5f:b6:e8:d2:b4:4d:a9:4a:10:ca:5b:6d:6d:
63:60:34:1d:f1:21:ff:df:04:a2:d1:24:e0:d1:a4:6a:c4:79:
92:12:f0:54:78:13:cc:06:62:5b:fb:1a:8e:b2:26:56:a2:67:
f6:82:d5:a2:f9:0a:82:f2:25:ab:03:15:26:67:6c:0d:04:7e:
68:9e:ca:77:5d:c6:79:35:6f:0f:78:bd:1b:b6:04:de:43:4b:
e5:c8:54:12:15:d9:84:b9:aa:bd:42:bf:ab:77:8b:cb:7c:f4:
d0:7d:28:9b:ca:ec:5e:fe:dc:e3:c0:82:93:cd:20:1c:51:d7:
08:18:24:08:0c:0d:73:56:14:f9:5f:bf:1b:6b:d3:99:bd:14:
64:7a:ca:19:ea:28:38:e1:23:a4:3f:96:a9:1b:dc:8b:2f:8a:
d3:1c:68:51:36:9e:13:1e:9d:e6:fe:c4:57:55:f7:3b:bf:7c:
77:b3:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:07 2026 by rpki-client