Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: Wb0dObnX2GEsbIR1T++03XeSiTQhb89KVeHc1uoWpl4=
Subject key identifier: 2D:AF:6F:1F:C1:45:43:C1:04:97:B6:6C:5B:E6:8A:73:11:EE:A0:31
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019FA9AC0C27DD6FB10C0894B342A350F094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 170A
Signing time: Tue 28 Jul 2026 17:00:52 +0000
Manifest this update: Tue 28 Jul 2026 17:00:52 +0000
Manifest next update: Wed 29 Jul 2026 17:00:52 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: Nr4wCRUkcLth4W++BkZI4cDoXYuxlYoB2CDNz/IjTuE=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0c:27:dd:6f:b1:0c:08:94:b3:42:a3:50:f0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jul 28 17:00:52 2026 GMT
Not After : Jul 29 17:00:52 2026 GMT
Subject: CN=2daf6f1fc14543c10497b66c5be68a7311eea031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:ba:68:10:d1:16:28:13:1b:73:4d:ca:85:
b4:ad:63:70:7a:29:b0:e0:16:1a:59:3d:e2:37:91:
4a:4c:fa:e2:dd:f3:cb:2e:b7:e6:71:3f:e7:ef:8b:
99:36:85:5b:27:96:11:e8:39:3e:ad:fc:1a:4f:ef:
44:ed:bd:9e:bf:55:49:7c:7c:61:22:1a:37:c3:a5:
04:4a:9d:a9:f3:e5:2d:f4:6b:d3:f4:81:13:ff:39:
69:88:25:fb:0f:69:f7:6b:39:39:44:d0:b8:be:19:
0f:72:2b:f0:2f:b8:94:cb:70:24:cf:cb:5b:1b:ba:
fb:51:6d:75:6c:01:88:7f:6c:1e:9b:6f:09:87:3b:
b7:44:0d:57:8e:19:d6:1b:26:65:c9:69:10:29:b1:
a3:2d:3d:00:84:60:ce:03:58:5d:0d:82:80:af:f5:
1b:d2:4d:45:6a:b6:95:59:1e:12:f7:9f:f2:73:60:
6b:0a:f6:dc:13:44:b8:cf:5d:6f:fc:b3:f1:e6:10:
f0:ee:fa:1e:e0:ed:f7:db:66:74:aa:7a:49:21:7f:
2d:cc:e6:8f:71:45:93:f3:21:12:11:af:42:3d:2d:
03:f6:61:f9:70:fd:e6:a5:40:5c:c6:e0:b5:ed:ec:
2f:ed:c6:48:f7:49:f2:1a:36:70:c0:01:eb:f7:18:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:6F:1F:C1:45:43:C1:04:97:B6:6C:5B:E6:8A:73:11:EE:A0:31
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:12:19:37:17:0f:a8:63:41:f8:48:93:f7:05:ed:13:07:
03:f5:a4:4d:0a:c8:5c:49:83:e3:b2:3b:9e:6a:67:ae:e1:75:
9d:b9:43:22:8b:df:e5:c9:ec:c5:b5:41:be:6c:7d:f1:00:84:
e3:7c:aa:90:97:75:cc:05:0a:18:6e:92:4b:f2:94:f5:e3:2f:
18:7f:5d:7d:71:0d:49:ce:78:dd:4c:dc:a1:74:c2:51:de:07:
3b:eb:93:20:75:8a:ac:18:12:a4:5f:9d:97:8a:9d:c7:8a:a3:
0d:54:74:05:85:3b:c4:d8:61:25:3a:86:d2:52:83:81:a1:27:
7e:dc:60:5d:ae:4c:12:3b:b7:b6:f3:8d:12:d2:e6:54:93:00:
40:34:25:1b:ec:fa:e6:fd:22:c7:dd:c2:26:03:17:ef:17:1f:
fb:df:aa:8d:29:c1:a1:d0:73:a8:4c:60:d3:93:74:e3:9c:6e:
a6:78:9f:67:48:d5:6d:95:be:f5:fe:b6:75:d9:92:15:a6:3c:
69:fb:fc:88:8c:f5:78:08:ed:96:6d:62:03:01:fc:61:31:16:
00:33:91:9f:cb:95:98:8e:b6:fc:b8:9a:3e:7a:ac:5c:22:42:
c1:ce:63:c3:75:60:d1:3d:dd:c2:f9:40:0c:ec:94:7b:88:a6:
64:d2:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:02 2026 by rpki-client