Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: RQ1Fjs06i4NN2rGOZaGJfvypFtAnqr3NxasomM8QV0Y=
Subject key identifier: 1C:5A:49:7A:9F:21:7F:62:CF:37:C9:CB:C5:13:61:CB:24:D4:E2:8C
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 019FFC7FC5E94B3B2465F24AAADDFE9D5DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 124C
Signing time: Thu 13 Aug 2026 19:00:59 +0000
Manifest this update: Thu 13 Aug 2026 19:00:59 +0000
Manifest next update: Fri 14 Aug 2026 19:00:59 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: j+jkrbYsChhBjHfQzC1a0ltl3DMVaJQ9RSWWSqHVUpg=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:7f:c5:e9:4b:3b:24:65:f2:4a:aa:dd:fe:9d:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Aug 13 19:00:59 2026 GMT
Not After : Aug 14 19:00:59 2026 GMT
Subject: CN=1c5a497a9f217f62cf37c9cbc51361cb24d4e28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:35:82:3c:77:76:2d:fa:c5:ce:78:0d:a3:
7b:9e:20:c1:e4:58:8b:35:e9:6f:6c:4e:e6:f5:3e:
1a:28:8d:62:e7:79:e3:c8:e4:f1:06:39:0b:a5:f8:
89:8c:61:e0:11:c1:22:7e:3d:27:b5:22:4b:48:df:
57:07:ad:ed:6b:00:92:0e:76:0c:76:9a:36:bd:cd:
2f:e4:35:c8:7f:de:3d:f8:fb:30:f7:06:41:71:55:
70:50:52:4b:82:84:eb:f6:1b:fb:48:3f:c0:3f:eb:
b6:1d:ea:10:c5:9d:e3:42:72:59:72:79:5a:24:de:
48:ef:5b:43:94:8d:8c:51:79:b2:bb:43:a4:f2:c5:
71:c6:e4:4f:d1:5c:1a:23:ee:95:4f:c4:6e:9a:98:
84:30:17:ad:bf:c7:2f:3b:2b:fd:26:01:be:b3:53:
69:96:57:bc:7c:d6:cf:d9:ac:2c:58:e6:18:89:4e:
1f:ad:2d:38:98:b0:8d:ab:20:c2:ed:5b:d6:75:0f:
68:ec:a3:43:dc:c9:fc:a3:47:3e:ef:f5:7c:a7:a3:
14:8e:05:36:1e:71:2b:56:98:86:96:59:c5:91:f4:
eb:62:84:d0:47:42:7e:90:30:78:39:6e:52:eb:7f:
c8:64:90:ed:da:3f:79:36:14:c4:1a:3d:ce:f5:aa:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:49:7A:9F:21:7F:62:CF:37:C9:CB:C5:13:61:CB:24:D4:E2:8C
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:93:09:b9:a4:55:f1:39:2e:49:8c:03:30:89:42:85:14:ec:
26:ec:22:b9:d0:e1:aa:20:98:19:e3:c7:27:f9:ed:91:d3:b8:
c2:10:7e:24:21:c4:fb:5e:7d:b1:a2:85:f9:a9:87:41:00:2b:
5f:96:83:de:9e:fe:16:de:6f:6f:54:b6:06:94:83:98:df:15:
4b:11:27:23:11:19:a2:c7:5f:7a:64:40:32:e5:88:ad:7d:c7:
91:ca:78:f4:c8:56:cc:34:48:63:9c:c2:5e:55:76:0e:ae:9f:
b1:eb:e8:7c:e2:9a:db:47:be:55:fe:05:41:c2:3e:0d:1b:b5:
80:59:b9:27:0f:e4:e3:00:cd:eb:17:0b:48:18:71:30:fb:7e:
c2:95:b5:58:28:50:39:64:f4:d3:8a:fb:87:08:3a:da:32:52:
c4:59:64:35:13:44:f0:1c:70:2b:9d:17:c8:82:eb:16:5c:1a:
89:d7:6d:ea:7e:3e:10:60:74:e3:21:97:5f:2d:86:61:67:5a:
a9:2e:2b:54:7a:48:f7:10:df:62:5d:d2:e4:4a:1a:10:a6:61:
87:ca:1a:b3:89:8e:31:49:9a:d8:71:ee:70:db:1b:ea:b8:6a:
e7:5c:fb:0d:c8:7e:fe:d5:99:1a:59:e9:5d:e2:01:f8:bb:d6:
dc:e6:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:54:49 2026 by rpki-client