Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 7RLElk2rSFuC/V1cxuwUFtw/DqaICEsH3fbGHC9YM6U=
Subject key identifier: 17:09:F3:43:E4:42:85:BD:10:CA:A1:C4:AA:E9:E0:48:2C:0C:24:9C
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01A17A3AEAFAAC0001077EDDC0E2DDADC1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 08F0
Signing time: Mon 26 Oct 2026 22:00:43 +0000
Manifest this update: Mon 26 Oct 2026 22:00:43 +0000
Manifest next update: Tue 27 Oct 2026 22:00:43 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: 2wYCACuKe6ORtsPxxSln5WWQ4y2EB+Ov596whXU8OnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:ea:fa:ac:00:01:07:7e:dd:c0:e2:dd:ad:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Oct 26 22:00:43 2026 GMT
Not After : Oct 27 22:00:43 2026 GMT
Subject: CN=1709f343e44285bd10caa1c4aae9e0482c0c249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:c6:00:0d:c5:c3:64:bd:d6:cc:01:2c:a7:
88:34:9d:7f:46:89:5f:22:12:22:8c:10:d1:da:f3:
71:61:4b:99:3e:0b:f9:ab:97:9a:82:f6:13:fb:dc:
06:d8:8e:a1:bd:24:75:bb:f2:79:80:ea:73:8b:fb:
b8:a4:16:f5:2f:fa:32:70:86:f1:4b:f9:8c:74:cc:
9a:41:c4:b9:75:3d:cf:60:ab:b6:37:1e:93:5e:ce:
66:8d:2a:83:bd:60:22:d2:40:3a:39:2f:df:cd:08:
fb:20:50:15:c0:f5:2c:6c:38:5f:5e:b2:03:ed:aa:
cc:6f:3f:33:ea:3c:6d:5d:90:99:f4:18:5f:7b:14:
15:81:3c:a3:77:78:35:62:f1:05:24:09:d0:53:7b:
39:a8:85:ef:5e:a6:d4:d0:e7:78:06:82:3c:46:b0:
d8:b7:8b:95:96:cd:f9:d0:c1:33:3a:d2:61:1e:08:
8f:c7:cf:1d:d7:c3:6e:93:14:dd:77:13:8b:1b:f2:
16:69:40:92:d4:49:23:a3:48:a7:14:0e:df:6d:42:
c2:ee:c5:be:90:48:3b:14:2d:74:a0:c8:3d:e2:ea:
a8:9b:14:4d:ed:b9:59:f1:f5:9c:6f:8e:00:93:c1:
5a:37:12:47:c8:d3:fe:87:0e:02:e4:68:31:98:54:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:F3:43:E4:42:85:BD:10:CA:A1:C4:AA:E9:E0:48:2C:0C:24:9C
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:6e:1f:f2:40:6d:de:5f:c7:69:02:cc:35:cc:8a:03:f2:
ae:2d:72:75:dd:0e:b1:e3:59:4a:fb:d0:cf:dc:ca:c4:12:2a:
b8:e0:44:d9:36:de:fe:b7:80:51:5c:f1:56:3c:41:09:95:8b:
ed:38:11:81:ed:09:62:c3:e4:81:c1:74:86:a6:36:04:2d:6e:
31:cc:49:aa:1d:f5:8e:40:3e:56:bd:95:62:47:e4:96:3b:77:
e1:19:dc:36:ee:37:9c:ca:f7:56:88:fb:ff:e0:ec:18:77:25:
b9:a6:0c:e3:53:5e:38:eb:ce:17:89:cd:2e:60:79:e9:02:41:
55:ec:e2:fa:d9:e5:bf:c7:d5:e7:2a:cb:1e:c5:5c:8c:b8:82:
af:30:e5:19:86:92:ce:ef:aa:33:6b:b3:ab:3f:32:d3:7d:85:
56:c1:b0:14:bd:3c:8e:45:47:65:c9:ec:31:af:6e:45:90:84:
df:41:b8:9e:f9:c9:7d:ff:32:cc:91:34:87:16:c9:5a:a0:bc:
83:bd:bc:51:91:1f:a3:d7:7e:2b:95:b5:51:c4:4c:61:e8:30:
dd:3a:92:00:91:ae:e4:1d:e7:45:93:7c:41:57:21:c3:96:a0:
b3:cb:38:45:8c:dc:38:48:66:8e:db:85:f0:7e:dc:c9:a5:01:
74:0d:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:03 2026 by rpki-client