Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 1MnLkTUzqpdmwLBKU6UAYnk/wBQmy0MPsacu+aG66nQ=
Subject key identifier: EF:4D:F9:26:06:E7:27:7B:1B:E4:0A:79:EB:F3:95:50:CD:0D:A5:DB
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019CE4110801F4BA833D6DAE36F88F5EFD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0690
Signing time: Thu 12 Mar 2026 22:00:47 +0000
Manifest this update: Thu 12 Mar 2026 22:00:47 +0000
Manifest next update: Fri 13 Mar 2026 22:00:47 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: vYqOYZQkMc8QUWbZD4MIpiw3pYIDcAHL4aBneyy51Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:08:01:f4:ba:83:3d:6d:ae:36:f8:8f:5e:fd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Mar 12 22:00:47 2026 GMT
Not After : Mar 13 22:00:47 2026 GMT
Subject: CN=ef4df92606e7277b1be40a79ebf39550cd0da5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:6b:2f:bc:5c:a3:34:86:7e:d2:b8:ee:6e:
99:b3:25:74:9c:cc:91:ee:e2:c0:b5:84:63:bc:90:
41:f0:ac:ce:65:b3:88:d1:82:28:e9:84:af:56:03:
e6:40:3a:55:a7:c6:3c:cb:aa:e1:fc:f3:ff:d0:49:
74:9f:e6:a3:ee:0d:98:f3:c4:7e:b5:2b:b8:f7:b3:
a1:48:4b:b5:3a:23:5e:fb:6c:8f:70:b4:e7:02:4b:
51:5c:2d:b3:a5:60:aa:f0:c0:68:47:65:71:32:fb:
13:77:22:87:c4:21:f0:05:7e:5d:37:21:f0:f0:6c:
57:8e:ea:e7:bc:6a:f1:e0:b4:82:ed:f3:1c:3d:7e:
79:bb:4f:f5:30:9a:2f:48:a0:ab:d5:df:88:c1:e7:
38:56:ea:83:98:92:27:36:08:1b:60:03:0e:1a:27:
61:aa:0f:a0:c2:b8:7e:a6:21:ea:91:89:53:00:9e:
64:bf:53:f4:4c:6c:ef:13:34:22:62:4e:1c:33:b5:
2d:21:39:79:99:2c:97:11:ad:3c:57:d4:7d:3e:d1:
05:be:2d:54:49:32:d0:65:2b:97:6a:34:7d:1c:65:
55:5f:ec:fb:66:13:91:b1:5c:4e:85:64:9d:d1:72:
2e:3a:23:57:b9:6c:66:ab:8d:51:2e:d0:ef:6b:c8:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:F9:26:06:E7:27:7B:1B:E4:0A:79:EB:F3:95:50:CD:0D:A5:DB
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:5e:18:63:79:95:44:96:3f:0c:a3:38:5e:7c:c0:5b:fb:
f0:f1:05:57:e1:aa:fb:b7:9c:db:34:6e:60:46:f0:a9:f3:c1:
d9:ef:0c:ac:92:a8:49:f7:ea:2d:7a:40:d7:cc:9f:b4:d7:74:
51:88:bf:d0:eb:07:f6:9c:11:15:a1:1b:3c:f7:19:26:24:e6:
f9:dd:53:4c:b1:95:71:01:58:09:b0:e0:1d:cd:59:1d:ba:4a:
9e:bf:80:e5:3d:ba:7c:b7:eb:79:5d:e6:3d:0f:67:8f:29:a0:
1e:82:0a:ca:b5:0e:8e:7c:cc:6e:a3:8d:9b:da:da:c7:02:de:
a5:95:0b:93:37:79:d4:d9:5a:e1:e4:24:13:c8:a0:e7:75:4d:
5e:ec:f5:c5:1c:dc:a9:ad:31:73:f9:40:d3:7b:7e:96:35:a0:
22:ec:b7:4a:08:5b:06:7f:6a:a7:69:38:ad:77:a3:57:3b:4e:
b0:04:b2:4e:31:99:7f:05:7a:e8:e7:87:2b:87:18:e7:46:f3:
32:fc:e9:af:e7:b3:88:8f:be:ff:15:2c:77:a6:a9:85:f7:ea:
fc:b5:88:e9:31:4c:de:96:35:6e:70:72:63:96:a7:bd:34:6b:
61:aa:9f:c3:40:31:18:5c:fc:76:b5:3d:c4:99:80:5a:7c:77:
66:d1:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:51 2026 by rpki-client