Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: p404fvjUlPr4JbUfixk/Z8Hegw2SmQNy/QjgB2Ha978=
Subject key identifier: 99:33:A9:9E:30:74:68:21:61:9E:76:14:E3:7D:14:90:31:BF:24:1A
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 019D382E962A1D8147271C11560B18E4FFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 0576
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: PwrlOtm2P7bSTHPu4qJvSXidoSw.roa (hash: H6VRRV9xRJe9egiq6XVsdHUwEnyAitSMRcYsekBGIfk=)
2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: 7b76IYAnqymFUD8kWpY+rReraVaKS8EJsMKT33KrTNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:96:2a:1d:81:47:27:1c:11:56:0b:18:e4:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=9933a99e30746821619e7614e37d149031bf241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:7f:a5:a3:c3:d3:fd:56:4a:a8:7e:66:c4:
72:cc:8a:ff:8a:52:df:fa:44:22:35:ef:41:d2:89:
2e:da:f5:9f:48:bc:48:25:c2:96:5c:6f:55:e4:c6:
f3:e2:0c:17:d7:83:52:11:26:1e:6f:5d:9e:45:e7:
b6:2e:2b:f1:e3:d7:cf:ee:ca:75:c7:e1:a6:1c:8d:
c3:38:21:fa:50:b0:53:b9:9e:c0:96:c7:5b:07:74:
78:b6:35:59:e8:b7:bb:b4:9d:ea:83:dd:38:ee:27:
5c:62:1b:e6:70:f5:cf:20:bb:17:61:9b:1d:3a:0a:
19:ef:62:19:e3:8b:f0:cf:53:4f:60:52:64:a9:e0:
aa:af:14:20:5c:a6:c4:ba:6e:ee:07:02:f4:69:a4:
12:af:f2:e5:64:e6:ff:04:dd:a7:9f:82:21:54:09:
06:c1:00:41:90:1a:59:18:8c:6c:b5:66:40:65:a3:
a6:5c:3e:17:09:6b:ac:42:41:2e:02:b9:cc:86:c8:
da:70:6e:f2:01:80:b4:c8:2b:f7:f5:5d:27:49:e0:
0d:06:b9:b1:24:ca:97:e2:48:ad:b5:25:04:3a:f7:
62:dd:b1:d1:3e:3f:6a:7e:72:88:32:97:51:76:77:
5e:b0:f1:91:b0:8e:39:05:a9:59:d7:63:e9:53:06:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:33:A9:9E:30:74:68:21:61:9E:76:14:E3:7D:14:90:31:BF:24:1A
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:0d:ac:10:df:23:03:b6:00:28:d7:af:f8:7e:52:0b:78:
95:7e:5d:96:79:01:fa:7e:60:ab:f1:75:c9:a3:c6:89:b2:a2:
cc:84:70:38:48:84:50:98:31:5d:81:b1:cb:aa:14:f2:05:87:
9e:44:08:df:cb:82:be:2b:bc:97:21:cc:90:f0:88:7c:b5:af:
67:b7:90:72:62:45:c1:42:30:12:d2:19:7a:6d:a1:15:6c:21:
f8:dc:dd:d5:ba:42:78:65:0e:bc:d5:a5:c1:6f:0d:e0:65:05:
e8:f6:4b:30:17:ec:5d:1d:f0:9b:84:0e:88:3a:c0:5b:d6:1c:
ea:08:dc:aa:c1:c3:79:f3:dc:3f:e3:82:e0:0e:66:98:55:cf:
9c:0f:8c:83:0b:62:e6:ba:e4:d2:a4:4d:37:72:73:62:de:e3:
2d:bd:ec:d2:ac:10:06:00:4b:cf:0c:b0:dc:b5:b6:f3:81:c0:
6d:bc:1b:3c:93:0b:d6:3e:00:c6:80:ba:83:c6:fc:34:ae:66:
a8:3a:33:9d:bc:12:2b:7a:67:50:28:51:32:f8:3d:ce:ac:30:
84:93:ac:d9:ee:76:78:22:de:1b:60:fc:33:7c:96:82:7e:b4:
69:c1:8f:81:85:0a:a8:3f:8c:a5:f1:be:cf:3e:17:19:a0:b3:
48:32:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:11 2026 by rpki-client