Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: prxEkJUe/Qx1elHSYk9waH53DdjiFXS8e0s0Vhkw3Fg=
Subject key identifier: 56:3D:80:4E:93:87:D9:A7:38:F8:1A:F2:D0:AD:E4:4F:35:E9:5F:92
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019DCDBD8E1251412B09F0C3F837E1E750A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0709
Signing time: Mon 27 Apr 2026 07:00:44 +0000
Manifest this update: Mon 27 Apr 2026 07:00:44 +0000
Manifest next update: Tue 28 Apr 2026 07:00:44 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: Re89gd17yNp1AnnNYKiMg5UI1Hkh6hk2y/tfrjocIGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:8e:12:51:41:2b:09:f0:c3:f8:37:e1:e7:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Apr 27 07:00:44 2026 GMT
Not After : Apr 28 07:00:44 2026 GMT
Subject: CN=563d804e9387d9a738f81af2d0ade44f35e95f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:f0:a4:eb:f7:b6:bf:82:43:64:4a:1f:59:
5c:fd:43:6e:d5:43:5b:f8:ad:c5:07:da:b6:0b:78:
12:8e:0a:60:72:37:9b:11:ba:3e:b8:d9:81:66:93:
5f:00:a6:3b:d1:c6:60:4e:18:00:25:28:ec:76:92:
7e:1a:43:d3:dd:ef:84:f2:4f:d4:c1:26:90:31:35:
9c:e1:8e:4d:5c:8f:b9:ee:6a:1b:c7:4c:b9:68:a6:
fd:c1:92:5d:2f:46:bd:e5:e9:73:e5:d4:37:45:79:
27:6f:85:99:1a:28:61:04:cb:20:3b:fe:8c:e3:90:
19:b1:1a:27:e3:87:9e:16:d5:0b:67:87:99:4c:81:
67:bf:cb:ad:af:78:47:9b:4f:14:b5:3b:6a:3c:5b:
9a:ba:5f:b2:00:53:84:c7:24:5e:d7:d0:80:53:34:
31:0f:14:d0:bd:53:dc:be:50:67:0c:d6:18:79:9a:
60:c2:99:20:7c:0c:90:61:7c:c9:65:a2:8d:e4:d6:
95:06:c2:b4:ce:26:e6:7e:a4:16:f6:f4:ad:ab:68:
b6:03:88:d9:9b:58:04:5d:34:17:f5:70:ed:02:f1:
6b:a6:01:a8:3e:46:a2:93:24:05:13:ec:75:75:e3:
51:9a:7f:e0:af:d8:af:99:25:5c:36:25:81:c8:ce:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:80:4E:93:87:D9:A7:38:F8:1A:F2:D0:AD:E4:4F:35:E9:5F:92
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c9:1f:35:15:cd:26:dd:a6:a5:72:16:cf:8b:3b:80:8d:25:
08:81:f4:31:ff:cf:9e:fb:9d:d1:4b:8c:72:37:c1:9e:1e:a5:
5d:39:5a:7e:03:74:f0:4e:9c:67:29:fb:78:c9:7c:66:02:c6:
cc:4e:d7:3c:22:eb:c5:e6:26:44:6f:88:5b:82:2e:21:ca:89:
19:bc:f1:26:bb:2a:8c:08:92:fc:5d:a1:60:4e:eb:e4:c6:84:
bc:00:cc:2b:57:23:26:47:8b:3d:00:72:39:9b:a6:e7:0e:d8:
aa:e5:e8:0b:d8:fd:14:9e:33:53:80:92:92:f4:cd:16:3b:da:
c5:9e:4a:1a:b3:65:80:f8:db:91:45:85:2d:5a:80:9b:28:34:
c9:70:f0:a6:64:27:39:b6:38:a4:9a:51:c9:35:32:88:8a:98:
8f:b7:e4:68:32:0a:10:93:62:d9:18:3b:bf:18:c1:9e:41:85:
18:7e:ae:c3:75:9b:8f:dc:18:41:49:ef:8e:c4:ad:7f:d8:c6:
1f:0c:77:3b:1b:51:df:9c:55:86:43:dd:28:5d:5a:32:4f:44:
16:dc:b9:4e:c7:3e:53:e8:88:b2:2f:5e:c7:7f:55:c8:89:95:
bd:24:b5:00:ae:cc:47:94:07:71:73:b8:c9:9d:39:ff:10:49:
0c:ce:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:07 2026 by rpki-client