Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: aUi1U+AU57wzV8jQCagNhpMmXhtFNF/Rxuqax9seU5Q=
Subject key identifier: 40:AB:FF:2C:23:60:97:C1:EC:DB:E0:5E:DE:06:F6:C6:EB:72:64:1C
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019EF9F07C7B97C0E0D10A90BDBDE9161844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 16AF
Signing time: Wed 24 Jun 2026 14:02:27 +0000
Manifest this update: Wed 24 Jun 2026 14:02:27 +0000
Manifest next update: Thu 25 Jun 2026 14:02:27 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 5zQa54qGt+nkaDZgT9mzl5PjXomxZuNOH9ky6aTJXos=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:f0:7c:7b:97:c0:e0:d1:0a:90:bd:bd:e9:16:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jun 24 14:02:27 2026 GMT
Not After : Jun 25 14:02:27 2026 GMT
Subject: CN=40abff2c236097c1ecdbe05ede06f6c6eb72641c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:ab:31:a4:f4:40:54:c8:ea:0a:4d:ff:74:
2c:c5:8a:25:eb:3c:33:db:91:95:87:12:51:12:25:
ca:b6:51:e3:dd:9e:a2:00:a0:2c:8b:0a:2c:dc:22:
d1:72:c3:81:39:2e:29:17:66:80:68:4a:61:80:87:
75:d6:08:18:83:df:70:db:9c:70:e0:39:5b:41:6b:
24:c6:30:7f:4b:a3:90:3f:78:c2:25:d6:80:9f:5e:
eb:26:0c:31:f3:15:f7:63:33:ae:fe:d7:ef:81:5c:
08:59:7c:39:3f:8c:ad:c6:e2:f6:c7:21:eb:86:85:
75:7b:82:bc:16:36:64:82:7a:75:7e:43:9a:a0:2c:
55:dd:85:db:39:da:75:41:fa:0a:44:d2:28:f5:5a:
fa:d8:b2:96:b8:9a:9d:db:07:72:b8:23:b5:3b:f1:
dc:fc:02:2b:03:97:f7:fb:46:b4:90:99:fd:46:69:
fd:be:45:a1:75:30:b7:d4:e8:b9:94:5d:c7:18:3d:
3c:c0:05:85:d8:95:ba:46:ac:e4:aa:05:9f:0a:f8:
66:70:99:93:c5:57:e2:6f:81:40:67:df:0b:4e:04:
33:ec:f8:8b:07:73:d6:08:a3:5c:c9:f1:f5:f1:af:
20:3b:34:f1:9f:c5:88:35:fb:05:96:cf:7a:52:c5:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:FF:2C:23:60:97:C1:EC:DB:E0:5E:DE:06:F6:C6:EB:72:64:1C
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:0f:f3:e6:e8:4d:34:6a:93:ba:c9:f6:69:42:8b:b4:76:
10:5b:d1:41:fa:51:92:e2:10:35:98:aa:5d:dc:9a:26:c4:8f:
fe:64:62:fc:f1:f0:78:8d:fc:01:a7:eb:b8:1a:62:61:f7:dd:
26:9b:9f:4e:cc:3c:5d:d5:05:00:af:b4:2b:10:68:a8:1b:01:
90:25:63:85:d0:7f:8b:55:81:5e:99:19:e5:8f:e4:7b:8d:69:
ab:77:04:c0:2e:26:ad:70:15:ff:ce:c2:06:fe:9d:de:6c:56:
c9:e0:3a:88:7f:8d:4c:a6:2c:a4:63:b7:83:dc:95:94:5d:26:
bb:56:09:91:55:96:8e:f1:e2:18:bb:00:35:25:57:c4:31:d9:
88:bd:dc:ad:ba:62:81:af:72:36:64:22:dd:e1:cb:50:10:82:
71:d0:8e:bc:d8:da:8d:e5:b4:06:74:27:c8:4d:01:cd:a7:07:
5d:fc:07:56:cb:0e:c0:3f:85:c6:3d:8d:55:52:b7:41:ec:32:
d4:c1:fa:54:93:ec:91:00:73:ac:eb:10:de:67:9e:b1:28:f7:
62:b7:c1:96:20:de:44:43:8a:38:8f:50:c6:82:db:b5:70:05:
62:b4:2d:ed:fc:53:a8:64:18:c0:ab:84:f7:02:37:29:a7:42:
b9:bf:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:28:24 2026 by rpki-client