Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: oHu3Yxw4nk0tboI5svndeurfC1ybDv0rQ8Dv40JmUTk=
Subject key identifier: 5D:80:D7:6E:D5:A0:C7:DE:58:C8:FF:ED:A3:B8:6C:A1:71:29:9F:BD
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019D05C19D72C39A43887CE986FF0B91E96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 15AC
Signing time: Thu 19 Mar 2026 11:01:07 +0000
Manifest this update: Thu 19 Mar 2026 11:01:07 +0000
Manifest next update: Fri 20 Mar 2026 11:01:07 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: Hg09rP5qPErIJZeQwsODPyBUdIgYkEa2dMga0yTDxlg=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:9d:72:c3:9a:43:88:7c:e9:86:ff:0b:91:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Mar 19 11:01:07 2026 GMT
Not After : Mar 20 11:01:07 2026 GMT
Subject: CN=5d80d76ed5a0c7de58c8ffeda3b86ca171299fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:69:6c:25:c7:69:e0:50:49:13:6a:28:e6:
85:31:e4:af:42:14:36:ed:32:08:e2:01:d3:f3:13:
2d:87:96:d0:b3:9e:54:30:9e:22:df:4d:b4:3e:16:
86:d4:d4:f4:b0:e9:43:4f:d1:a8:e3:4d:9e:db:1b:
5b:a7:34:8a:8e:33:1f:1e:b8:f3:7a:a5:6e:0c:71:
08:46:03:99:5c:61:28:05:ed:98:4d:8b:48:75:4f:
e6:9b:c4:dc:d2:b6:aa:85:4b:4f:35:f0:b2:5f:ec:
5b:5c:5b:27:e0:67:7f:77:28:03:66:87:bf:6d:97:
3d:a4:32:86:8e:0c:bc:7b:f6:a2:93:4b:0b:28:6e:
66:a6:ea:91:16:0b:a3:02:07:f6:ad:1c:a5:96:5c:
a5:09:17:af:d9:da:8f:ae:b5:a7:eb:d7:5a:12:5e:
e3:4b:57:b7:6f:50:6b:73:82:ab:ba:84:e0:5c:83:
a0:51:0d:de:89:b3:ea:23:45:bb:d8:c5:4a:85:cb:
dc:34:4e:98:ca:d2:48:68:d0:fb:6e:13:c6:21:df:
a9:23:45:20:9b:bb:c6:6d:8a:16:e6:f7:6e:65:50:
c1:ad:3c:7f:06:56:d7:f0:13:bc:99:f1:90:cd:41:
14:72:a7:4a:62:54:6c:22:d0:5a:c3:31:2e:12:4e:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:D7:6E:D5:A0:C7:DE:58:C8:FF:ED:A3:B8:6C:A1:71:29:9F:BD
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:a5:6e:12:ee:fc:5e:98:cc:a5:e9:1c:c3:de:cf:49:ff:
09:bf:d9:34:b8:74:dd:ab:db:a7:1d:4c:c8:fb:2d:96:71:af:
ca:bf:72:eb:92:99:f8:3a:ab:b3:2c:2d:5e:f7:d2:16:80:71:
67:75:30:31:39:c8:85:0d:4c:25:11:07:07:c5:dd:ed:9c:df:
97:dd:b5:79:ca:e9:da:e4:6d:b0:b3:66:c4:8a:3a:73:f4:5b:
27:f4:32:31:c4:e9:90:7c:05:12:2e:f8:13:1b:e0:58:51:42:
53:4e:b6:dc:6c:eb:21:1d:17:9b:95:54:ae:4d:ba:8e:c2:a0:
76:85:b7:eb:9b:43:69:fb:79:34:64:ab:bf:b3:c4:77:48:d2:
20:f0:6c:80:42:90:68:22:a3:39:01:d5:48:f7:ac:ed:a0:8f:
46:e5:fb:28:3e:88:18:ad:b7:d0:d0:ba:b4:df:80:c3:21:cf:
5e:5b:17:4d:1c:5b:9b:25:f6:8b:03:c8:00:61:bb:d5:1f:ae:
e1:eb:b1:15:28:a7:6c:c8:b8:b0:b2:a4:58:1c:07:d1:d8:93:
5d:95:02:2e:47:99:7e:7e:b4:1b:2a:41:a7:f7:ba:4d:14:3f:
f2:4d:c6:75:70:6d:31:2d:35:34:e6:96:3e:5e:92:34:da:c6:
39:cc:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:34:45 2026 by rpki-client