Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: ZgmG5UhK+SEbyT/rYb6fv19MybsnH286zD2yeQ/mZrM=
Subject key identifier: 3C:0A:56:D0:7D:2F:CF:D9:45:7D:F3:7C:14:9B:DC:6B:6D:37:DB:0F
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019FA11679FB048D02B2D13564054282AFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 07FB
Signing time: Mon 27 Jul 2026 01:00:32 +0000
Manifest this update: Mon 27 Jul 2026 01:00:32 +0000
Manifest next update: Tue 28 Jul 2026 01:00:32 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: A6nSDhvcQg5h9pBYXIkg9i7mhnsw4mknWYJLUfLQYNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:79:fb:04:8d:02:b2:d1:35:64:05:42:82:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jul 27 01:00:32 2026 GMT
Not After : Jul 28 01:00:32 2026 GMT
Subject: CN=3c0a56d07d2fcfd9457df37c149bdc6b6d37db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:20:d6:80:c8:bf:59:54:15:df:f9:b6:2c:
e6:e6:17:03:e2:7f:70:b0:3b:6d:b8:16:88:eb:b8:
0b:fc:34:05:b3:7a:4b:b4:de:bd:84:4a:30:36:d3:
63:56:00:62:f6:2d:b4:75:2b:4d:ff:d4:aa:70:5c:
3a:20:1c:ce:02:20:4f:81:82:5e:ee:84:b1:b0:e7:
d9:f7:77:53:3e:66:97:b0:b5:9a:94:74:04:e7:bb:
55:60:e5:51:6f:ec:04:4b:9e:8f:d0:93:e7:17:d2:
4f:62:2a:59:a9:7a:7f:aa:ea:b2:53:3d:8b:49:92:
9d:4e:16:37:48:9c:9c:77:92:70:ed:72:1a:f1:8a:
ae:b2:dd:6a:0f:97:89:13:7f:80:aa:16:76:7d:63:
1a:32:01:20:0c:e8:37:fe:70:c5:c4:4d:e8:e8:c9:
a7:07:aa:41:03:02:b1:e5:7f:b2:aa:2b:8a:a6:5a:
71:f9:17:0f:e9:2f:45:72:0f:a4:32:1b:92:5b:fc:
26:fc:c7:ad:88:ed:c4:0a:07:36:19:7f:e6:5a:d0:
cb:bc:be:b8:35:c2:50:14:e6:12:34:57:c2:f5:b8:
4e:a4:00:1e:a4:7f:cc:64:e3:47:bd:45:45:1a:07:
4d:d8:bc:1e:05:23:3e:cf:d2:d3:a6:60:0d:86:31:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:56:D0:7D:2F:CF:D9:45:7D:F3:7C:14:9B:DC:6B:6D:37:DB:0F
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:ee:71:cb:69:b7:a3:8c:06:5e:52:fb:d4:5c:a4:5b:f6:
f0:e7:ba:c3:af:1b:b7:c7:d9:89:1b:a0:06:52:7f:e2:86:b3:
cc:ab:71:c5:e7:35:3b:b3:60:58:42:ff:c3:5b:96:e6:92:b4:
65:90:bd:8a:f7:f4:67:ac:77:bf:78:d2:1a:47:17:a8:35:ff:
e4:8c:51:1f:c5:21:82:25:12:72:7d:ff:55:87:f6:e1:16:5e:
39:de:68:37:7b:83:8b:90:34:e1:2f:df:53:53:66:dc:41:4f:
8b:e5:35:bf:81:04:0d:65:b3:7f:48:f2:d5:2c:28:e8:d7:fa:
98:29:09:4f:aa:42:90:0b:69:9f:fd:54:32:52:7a:41:24:6d:
1f:fb:fc:f3:48:ea:cb:8c:d9:85:05:78:98:ba:67:4f:b2:9a:
c6:96:31:50:f4:ef:58:33:53:3e:5d:19:05:27:eb:2c:6a:00:
71:00:fe:33:1e:54:fc:b6:fd:ca:0f:72:b1:c2:d5:85:da:33:
02:4a:a1:e7:cf:e0:8a:c9:75:2b:f2:58:07:f7:54:42:e7:24:
a2:1b:d0:aa:95:c2:81:94:a8:2b:bc:b4:fd:01:96:4b:85:1a:
97:1b:f3:ca:e9:40:a2:a4:a8:17:a9:44:eb:d8:1e:50:18:50:
ff:22:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:47 2026 by rpki-client