Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: 8/5DC4AUtXUz6RxSwV/XquXovMaOxPD6rf+QHwgKw2k=
Subject key identifier: 06:85:91:05:CC:F4:2C:56:DC:93:B5:F9:E4:50:B8:D9:8E:03:07:46
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019DED80955B3C33B56F9217707DBC35752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 1624
Signing time: Sun 03 May 2026 11:01:59 +0000
Manifest this update: Sun 03 May 2026 11:01:59 +0000
Manifest next update: Mon 04 May 2026 11:01:59 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: cOr9Kfw80cnfKUswlYM1XeczRaKTrZdKwYbUXD3O7fg=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:80:95:5b:3c:33:b5:6f:92:17:70:7d:bc:35:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: May 3 11:01:59 2026 GMT
Not After : May 4 11:01:59 2026 GMT
Subject: CN=06859105ccf42c56dc93b5f9e450b8d98e030746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:8d:93:31:5e:8f:39:b9:07:9c:d3:52:86:
0a:8f:9f:05:d4:16:b7:27:c8:89:5f:9c:1d:c1:c2:
10:ed:63:65:4f:4c:24:41:40:69:b2:41:38:0c:17:
31:81:8f:78:81:bc:bb:df:2a:32:10:8c:12:24:1d:
9c:9c:3c:20:cf:cf:31:ac:99:09:f3:62:ef:6d:3f:
e4:e6:41:6c:79:33:7c:65:f9:62:10:61:dc:72:fc:
40:81:7d:2c:77:98:ed:4e:60:4d:33:e8:27:a4:ba:
ba:3d:cd:fd:78:e3:e6:01:5d:d7:62:40:cc:da:5b:
f1:98:53:72:5a:9c:66:ee:c1:96:36:c3:6a:5a:8f:
02:48:c9:36:41:0b:a7:77:43:76:54:50:d7:84:33:
e6:c7:ec:28:eb:98:ef:f0:d8:92:3d:26:7f:8f:dc:
89:a4:c2:35:fa:79:d0:22:31:71:1a:90:ee:d1:a7:
0c:8f:c2:68:93:2d:02:e8:1e:6a:92:8f:9e:e9:31:
60:9a:a7:fb:5c:44:23:30:e7:92:62:75:c6:79:c5:
aa:87:ce:0e:ef:0b:df:b1:9f:38:50:23:fa:4d:9e:
39:ff:9c:e7:40:8a:7e:01:f8:a3:1e:9f:86:ab:0f:
84:b8:05:34:f8:8e:97:e7:87:9a:6b:6e:13:5c:f7:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:91:05:CC:F4:2C:56:DC:93:B5:F9:E4:50:B8:D9:8E:03:07:46
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:67:7b:3c:63:89:3a:a6:c3:07:a7:ee:02:9c:af:fc:79:
e5:01:32:6d:3e:2e:37:94:b8:79:99:84:87:9d:8c:2c:e7:29:
7c:2a:de:0d:0c:97:c6:bc:78:9c:c9:7c:24:dd:e8:3b:07:a3:
4d:a2:48:96:c5:c1:07:d4:85:dd:cb:96:98:8a:ac:60:f7:30:
d7:d6:56:d1:c2:b6:99:40:64:dc:8c:9f:10:ad:00:3f:22:af:
27:f3:fd:df:60:ec:28:3a:a9:12:6a:46:b4:c8:51:9e:2b:45:
ed:65:b6:02:4c:14:59:11:f1:51:6f:ac:cf:18:44:da:13:5a:
2e:2f:48:50:0d:e3:90:b0:ad:18:9f:b1:02:f5:72:26:30:13:
6e:7a:81:df:85:28:5e:b8:2b:60:4c:2b:7d:43:dd:53:64:88:
c0:a7:c8:4e:98:77:1a:43:d7:c5:7d:ad:33:cc:d3:55:36:bd:
f7:74:07:b3:93:55:e9:50:9a:0a:0a:da:a0:a6:6c:a9:bb:a0:
5d:1f:3a:6f:fa:94:27:c2:8b:f1:4c:ef:34:1b:88:c3:1b:53:
0e:d3:4c:86:ae:52:13:22:8f:23:d0:be:f3:95:35:0e:9c:51:
92:b4:26:51:a2:08:45:4a:1a:c4:97:4a:66:c9:d5:b7:ef:a7:
67:d6:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:15:49 2026 by rpki-client