Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: 8/cREwjFz/xmnhkxJUtr/cigzSqTKRnUxj4FIChBOfE=
Subject key identifier: 19:83:DA:B1:77:FB:EC:05:63:D8:EB:1B:46:F2:57:56:A3:74:38:A1
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 01A10701C06C64444E9660D88462926C0DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 12D6
Signing time: Sun 04 Oct 2026 13:01:57 +0000
Manifest this update: Sun 04 Oct 2026 13:01:57 +0000
Manifest next update: Mon 05 Oct 2026 13:01:57 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: LbwlYZxwCXegfSmNvLaqnE139jF94aG7ttPmEJrV1pI=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:c0:6c:64:44:4e:96:60:d8:84:62:92:6c:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Oct 4 13:01:57 2026 GMT
Not After : Oct 5 13:01:57 2026 GMT
Subject: CN=1983dab177fbec0563d8eb1b46f25756a37438a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:fd:a7:6f:a1:04:5a:59:ac:95:79:7b:1d:
9b:a1:1d:c2:eb:21:d1:77:66:3a:b2:5c:43:fe:38:
cf:ed:59:c4:2f:e2:5c:44:7e:45:e1:4d:bc:cf:ac:
e8:26:8b:d0:ab:7d:1b:ea:bf:b2:91:0d:82:27:bf:
fc:b5:6c:d1:54:93:e4:f9:4d:15:89:e5:a9:f2:d0:
2b:b7:9b:2b:58:08:ff:08:d5:65:ad:93:85:d6:2f:
46:2a:5c:3e:0b:79:63:6f:21:07:46:a2:bc:47:18:
4f:db:c2:c1:7d:ea:5d:df:f8:ab:2c:a5:96:95:7a:
e2:af:bd:64:2d:d6:46:61:c1:3d:da:ab:9b:7c:fe:
6d:33:66:59:02:67:b6:b4:f2:9b:d2:a9:24:df:69:
43:c0:f2:1a:62:03:a1:30:19:5c:2e:fc:56:b1:9d:
ec:b9:4e:64:cd:fc:c3:4b:cd:19:f9:a0:51:73:06:
10:d8:30:60:9d:fd:c8:33:da:5d:70:c2:11:9b:40:
2f:83:87:e2:0f:44:3c:2e:e8:65:ab:e7:2c:0c:7d:
2c:2f:19:0b:81:0d:cc:bd:52:2f:5b:42:54:fb:2a:
3d:78:19:b7:4e:59:fd:ef:aa:be:fd:d9:ef:76:95:
b6:8a:02:00:b3:85:3b:aa:27:d9:d8:aa:52:83:07:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:DA:B1:77:FB:EC:05:63:D8:EB:1B:46:F2:57:56:A3:74:38:A1
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:6b:66:c2:40:50:1c:ac:17:cb:2e:40:25:12:3a:fa:0e:
ec:1c:38:86:47:fd:10:6b:b7:5e:07:ff:7d:86:77:d5:49:e8:
6c:bb:6e:c3:9d:19:e0:97:bf:eb:f6:b7:1d:df:e9:80:8a:bc:
c7:70:5b:1d:30:45:96:e6:f0:d1:0a:11:07:73:62:fc:d8:ac:
d4:8f:90:89:ef:86:3b:9c:d6:d7:8c:2c:53:25:ac:1d:d5:69:
80:f3:bc:97:5d:e0:66:a2:c8:35:05:b9:93:22:e9:47:ad:99:
34:7c:d4:5f:b0:b8:9d:b5:2d:91:94:b7:65:fa:48:ad:c5:db:
bd:be:24:50:78:e4:33:14:9d:b7:4c:0c:38:2f:bc:74:a7:21:
f3:bb:3b:08:b3:59:ac:d1:3f:13:63:e0:09:70:e8:53:db:3c:
89:c2:00:33:f1:8c:68:d0:5a:00:bf:99:4c:51:4f:0b:dc:8e:
4c:f8:d7:54:9a:82:b2:18:32:10:ec:db:17:93:57:3c:95:19:
11:34:51:ee:f9:9c:d8:00:d2:b6:82:5b:4e:2c:c8:9a:c7:16:
82:0a:02:a0:d3:4e:05:83:ce:0a:4c:20:d0:b7:64:41:86:4c:
35:38:a1:cd:7e:83:79:1f:3b:62:ab:e8:6f:c2:c7:63:9a:9a:
63:44:50:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAcBsZEROlmDYhGKSbA2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZDMyMTZjY2NjODYzZWNhMGMzZGQxODk5NDFiMWI5ZWEz
N2NhY2QwHhcNMjYxMDA0MTMwMTU3WhcNMjYxMDA1MTMwMTU3WjAzMTEwLwYDVQQD
EygxOTgzZGFiMTc3ZmJlYzA1NjNkOGViMWI0NmYyNTc1NmEzNzQzOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Sj9p2+hBFpZrJV5ex2boR3C6yHR
d2Y6slxD/jjP7VnEL+JcRH5F4U28z6zoJovQq30b6r+ykQ2CJ7/8tWzRVJPk+U0V
ieWp8tArt5srWAj/CNVlrZOF1i9GKlw+C3ljbyEHRqK8RxhP28LBfepd3/irLKWW
lXrir71kLdZGYcE92qubfP5tM2ZZAme2tPKb0qkk32lDwPIaYgOhMBlcLvxWsZ3s
uU5kzfzDS80Z+aBRcwYQ2DBgnf3IM9pdcMIRm0Avg4fiD0Q8Luhlq+csDH0sLxkL
gQ3MvVIvW0JU+yo9eBm3Tln976q+/dnvdpW2igIAs4U7qifZ2KpSgwedKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmD2rF3++wFY9jrG0byV1ajdDihMB8GA1UdIwQY
MBaAFKDTIWzMyGPsoMPdGJlBsbnqN8rNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0Mzgt
MGQ0NGMwNGE4NDQ4LzEvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0MzgtMGQ0NGMwNGE4NDQ4
LzEvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPihrZsJA
UBysF8suQCUSOvoO7Bw4hkf9EGu3Xgf/fYZ31UnobLtuw50Z4Je/6/a3Hd/pgIq8
x3BbHTBFlubw0QoRB3Ni/Nis1I+Qie+GO5zW14wsUyWsHdVpgPO8l13gZqLINQW5
kyLpR62ZNHzUX7C4nbUtkZS3ZfpIrcXbvb4kUHjkMxSdt0wMOC+8dKch87s7CLNZ
rNE/E2PgCXDoU9s8icIAM/GMaNBaAL+ZTFFPC9yOTPjXVJqCshgyEOzbF5NXPJUZ
ETRR7vmc2ADStoJbTizImscWggoCoNNOBYPOCkwg0LdkQYZMNTihzX6DeR87Yqvo
b8LHY5qaY0RQ4w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:13 2026 by rpki-client