Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: s1n13++QKTBpDSNr3UXzQ+gMi5coLhOI24lyYmo+YQQ=
Subject key identifier: C4:63:9F:7B:26:5E:7B:DA:7C:C5:04:9F:B9:EE:F2:EE:82:D5:45:99
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01A08AC3DFACF9B50166676509B9035B189D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0874
Signing time: Thu 10 Sep 2026 10:01:27 +0000
Manifest this update: Thu 10 Sep 2026 10:01:27 +0000
Manifest next update: Fri 11 Sep 2026 10:01:27 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: unv5EnHFZmCumh1fKBZqCAERzF3lCSbfXsbwelP+a/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:df:ac:f9:b5:01:66:67:65:09:b9:03:5b:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Sep 10 10:01:27 2026 GMT
Not After : Sep 11 10:01:27 2026 GMT
Subject: CN=c4639f7b265e7bda7cc5049fb9eef2ee82d54599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:0a:1f:d3:d9:38:59:f3:7c:af:81:25:bd:
c5:e3:0a:a8:c5:e8:86:ff:d8:36:bf:5b:f6:fe:10:
18:95:48:ad:33:0d:76:f3:e8:d3:ff:48:2f:72:18:
e0:8b:29:15:6a:d2:4d:fa:b0:aa:cb:bd:a4:02:05:
51:c9:61:8c:f3:53:e8:10:e0:6a:60:20:a7:4c:11:
20:69:e1:36:ca:fd:0a:cd:1f:53:44:9a:80:a8:76:
01:a3:99:f0:6c:a3:ae:52:ff:89:16:82:e6:fb:0b:
2a:14:9e:5f:e9:ce:cb:b9:0f:81:77:d3:fb:16:7c:
da:a7:e7:1c:ca:56:89:ff:08:7c:df:20:e1:1a:38:
21:97:5b:db:8e:88:6c:93:84:4f:57:4b:ac:ea:08:
9c:e2:83:f5:00:08:a9:be:f7:e5:bf:ae:ab:f5:52:
4b:16:1e:1d:7c:eb:26:a2:e7:39:aa:ff:5c:ff:d0:
27:98:98:7c:d8:9b:ff:b7:6f:ea:51:44:70:c5:3a:
ff:fc:58:79:ad:92:76:30:f2:c3:f8:66:2b:9c:d0:
43:9d:ef:92:cd:93:c0:32:43:25:14:00:0b:0b:a1:
e7:27:7d:e2:38:1a:7e:1f:1f:9e:85:fb:f5:65:eb:
72:9f:8f:7a:d1:7f:e1:f7:52:37:3b:43:56:19:49:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:9F:7B:26:5E:7B:DA:7C:C5:04:9F:B9:EE:F2:EE:82:D5:45:99
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:6d:64:4b:c9:17:e1:2e:50:65:67:03:9b:19:b0:71:1b:
49:f7:91:63:66:c5:5a:6d:32:6c:1c:f5:1f:b7:62:bc:80:ee:
3f:32:73:c2:8d:ae:8d:bf:dc:65:d2:4c:fd:72:41:64:4a:c8:
a0:86:34:1c:68:88:30:aa:0c:e8:79:81:32:41:19:1a:c6:99:
66:91:13:54:2b:23:d2:ff:ef:d4:6d:0f:d8:b9:70:13:d8:37:
90:78:ee:1a:3b:7a:d5:2f:56:77:49:71:14:64:5e:24:48:6c:
87:d9:76:f2:15:30:28:56:95:ce:d1:e2:13:3d:49:2f:11:17:
93:cb:86:5c:e0:c4:6e:f0:5f:5e:3c:71:ab:ed:da:cd:d8:7c:
cb:64:93:22:e1:54:c0:4d:9f:0d:db:7f:0b:75:b5:cc:dd:85:
1c:f2:35:04:56:f6:bc:39:c4:24:3c:e7:c1:3a:c8:81:59:aa:
a5:a1:a7:6d:85:e3:63:6c:3a:9f:82:d7:dd:5e:50:b2:0e:92:
8e:19:47:c2:d5:2a:f6:36:b1:43:4e:a4:25:fa:31:40:67:45:
2b:6c:25:da:b5:55:b8:18:1c:08:cc:46:16:58:89:81:83:28:
43:9e:40:99:15:4c:d3:19:57:1e:7f:27:24:e5:03:45:86:a6:
fb:67:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:47 2026 by rpki-client