
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: ttLcw+fiDbNHzGBNIxalhUAjbVvUGpB1dRBKiGBzFjo=
Subject key identifier: 08:04:FE:70:04:69:0D:A4:59:14:17:52:28:F7:E9:27:5F:BD:6B:35
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 01A11898AFECA54381DAC42CD71C4C9199BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 17C8
Signing time: Wed 07 Oct 2026 23:00:22 +0000
Manifest this update: Wed 07 Oct 2026 23:00:22 +0000
Manifest next update: Thu 08 Oct 2026 23:00:22 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: PQBekILqR+Oe/txprYHcbAWQKD2GYD7scmbtOqx+5lw=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:af:ec:a5:43:81:da:c4:2c:d7:1c:4c:91:99:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Oct 7 23:00:22 2026 GMT
Not After : Oct 8 23:00:22 2026 GMT
Subject: CN=0804fe7004690da45914175228f7e9275fbd6b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:89:bd:9f:38:ac:80:d9:eb:85:fe:35:74:
bc:52:df:58:92:4d:01:67:ed:6a:d3:3c:ed:5e:75:
98:f8:3b:c5:29:2d:68:4c:a5:b0:e5:19:7d:01:ee:
6e:10:43:bf:aa:0f:43:dc:05:ee:31:5d:2a:f5:da:
54:da:9b:87:f3:eb:56:ce:c7:75:ac:fe:5f:34:1f:
90:41:a0:0b:84:f5:a6:95:e6:d4:de:79:d3:6c:69:
aa:8b:24:93:4f:cc:c1:11:d3:3c:d2:5e:e5:3a:83:
95:5d:fd:68:a0:e7:4f:7c:ad:a6:fe:18:4b:a8:2d:
bc:34:7c:2d:e4:60:f7:e7:f8:3e:ed:6e:02:38:69:
7e:94:ea:53:52:9a:11:53:42:fa:7b:c9:22:86:5a:
c7:38:17:76:86:a6:69:f4:42:2f:ae:b1:dd:f4:0d:
89:ec:e8:5b:65:7f:99:14:e0:1d:0f:20:08:85:3d:
a3:90:4c:97:be:fe:dd:f4:fa:d1:29:f9:78:93:bd:
f1:fa:78:3f:80:8d:e5:bb:e4:7f:62:12:b3:b0:20:
1f:38:5a:cc:b2:d5:60:0a:d2:c6:c2:9b:38:63:29:
c9:78:db:b9:e1:0b:19:82:04:7c:ea:e3:cb:9a:29:
1a:4d:dc:9f:c8:8d:31:71:1a:3a:8a:c0:19:6b:f3:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:FE:70:04:69:0D:A4:59:14:17:52:28:F7:E9:27:5F:BD:6B:35
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:75:9b:8a:81:ff:04:25:99:0c:4a:4c:2e:9c:fb:47:b7:
b3:82:50:55:9b:3a:ea:67:26:52:b9:2c:68:92:a4:cd:92:c5:
e0:87:b5:37:52:8a:b3:52:a5:c1:0d:e9:be:e7:91:1d:58:7b:
05:05:c7:2e:12:0d:e5:53:72:a5:e5:14:12:84:85:11:5c:c1:
67:af:66:73:3b:4d:97:c7:f5:df:2f:52:ad:b2:83:4f:92:c5:
da:dc:d1:f3:06:ff:14:79:8d:7e:32:94:40:e4:d3:15:83:6c:
50:9c:a5:bd:42:d9:3e:9d:ee:e0:94:fb:3e:7c:4f:53:22:4e:
99:97:34:43:0e:63:38:22:18:ee:cc:49:af:1a:b6:f9:dd:20:
cf:04:1a:45:a6:55:20:8b:48:32:3f:25:e0:26:2e:ae:ff:e5:
e7:80:bb:9e:9a:e1:0b:5c:4c:68:72:22:ea:80:be:ac:42:70:
b6:a5:3f:dc:87:ed:dc:ac:d9:56:f0:b2:f3:29:c6:04:b8:56:
30:56:4a:c6:a9:3b:c1:ba:da:49:8b:f0:f5:1d:d6:ce:ee:80:
5a:da:fe:e6:9a:a4:2c:88:eb:f1:56:4a:0c:fc:d8:e5:91:84:
c2:9e:76:dd:b6:36:32:eb:95:a0:5c:cc:ba:0a:6c:8c:bd:2d:
6d:ca:65:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYmK/spUOB2sQs1xxMkZm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjYxMDA3MjMwMDIyWhcNMjYxMDA4MjMwMDIyWjAzMTEwLwYDVQQD
EygwODA0ZmU3MDA0NjkwZGE0NTkxNDE3NTIyOGY3ZTkyNzVmYmQ2YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv6JvZ84rIDZ64X+NXS8Ut9Ykk0B
Z+1q0zztXnWY+DvFKS1oTKWw5Rl9Ae5uEEO/qg9D3AXuMV0q9dpU2puH8+tWzsd1
rP5fNB+QQaALhPWmlebU3nnTbGmqiySTT8zBEdM80l7lOoOVXf1ooOdPfK2m/hhL
qC28NHwt5GD35/g+7W4COGl+lOpTUpoRU0L6e8kihlrHOBd2hqZp9EIvrrHd9A2J
7OhbZX+ZFOAdDyAIhT2jkEyXvv7d9PrRKfl4k73x+ng/gI3lu+R/YhKzsCAfOFrM
stVgCtLGwps4YynJeNu54QsZggR86uPLmikaTdyfyI0xcRo6isAZa/PapwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgE/nAEaQ2kWRQXUij36SdfvWs1MB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU311m4qB
/wQlmQxKTC6c+0e3s4JQVZs66mcmUrksaJKkzZLF4Ie1N1KKs1KlwQ3pvueRHVh7
BQXHLhIN5VNypeUUEoSFEVzBZ69mcztNl8f13y9SrbKDT5LF2tzR8wb/FHmNfjKU
QOTTFYNsUJylvULZPp3u4JT7PnxPUyJOmZc0Qw5jOCIY7sxJrxq2+d0gzwQaRaZV
IItIMj8l4CYurv/l54C7nprhC1xMaHIi6oC+rEJwtqU/3Ift3KzZVvCy8ynGBLhW
MFZKxqk7wbraSYvw9R3Wzu6AWtr+5pqkLIjr8VZKDPzY5ZGEwp523bY2MuuVoFzM
ugpsjL0tbcplRg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:53:24 2026 by rpki-client