Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: 3mvwFG9ujwKSVck6hyZmfoiSiuoe97JBhV3Y2zcK8v4=
Subject key identifier: 7B:12:2D:52:6A:C9:C0:59:3C:A4:3D:CC:5E:DE:3C:0D:9F:20:68:50
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019D9A7540EC71C0A683B1273AEA786B2D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 15F9
Signing time: Fri 17 Apr 2026 08:01:08 +0000
Manifest this update: Fri 17 Apr 2026 08:01:08 +0000
Manifest next update: Sat 18 Apr 2026 08:01:08 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: H2LfWNNhP9wqWbJ4Bs5VptmfWGz/C5T/7REdUu1BmcQ=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:40:ec:71:c0:a6:83:b1:27:3a:ea:78:6b:2d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Apr 17 08:01:08 2026 GMT
Not After : Apr 18 08:01:08 2026 GMT
Subject: CN=7b122d526ac9c0593ca43dcc5ede3c0d9f206850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:40:0f:c6:8e:4a:a0:09:73:b7:63:6f:32:
3c:44:d1:d0:d9:66:06:b1:c2:a6:63:5e:4d:72:e6:
bb:61:a9:02:a0:32:84:00:33:f5:0c:07:16:39:16:
9c:73:bc:28:f1:c8:bd:78:f5:23:bd:2e:68:49:bb:
23:1a:a9:4e:cc:e5:92:6e:d3:a9:f8:cf:83:1c:af:
33:98:d3:07:e8:dd:b9:cf:92:33:36:4b:0b:7b:df:
03:15:36:33:a4:a9:fb:e2:c1:91:c0:4a:f1:e1:54:
72:50:b6:a7:20:da:84:a8:b4:9f:fe:e0:ea:8b:10:
78:37:80:36:06:c1:48:a8:a5:03:d8:7f:27:c0:73:
3e:f6:b8:e6:2b:50:dd:28:3e:fc:0b:e3:e1:39:2f:
5e:52:fe:2a:5b:61:e3:70:04:17:c2:d6:d2:e5:fa:
5e:99:52:ca:54:40:5a:59:33:01:c9:64:ab:d5:1a:
c9:8f:ca:8b:0a:2b:0e:7f:87:28:64:a5:f6:fe:59:
f6:d2:51:3d:9c:0c:33:b8:eb:08:fd:a0:e5:61:4c:
2f:3d:35:b3:51:8d:96:95:ac:8f:19:ea:a6:18:0a:
bb:c8:bc:75:76:d3:d8:5c:84:e9:92:58:6c:ea:25:
4f:28:56:74:69:7d:5f:15:1d:88:a6:2b:dc:f7:b5:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:2D:52:6A:C9:C0:59:3C:A4:3D:CC:5E:DE:3C:0D:9F:20:68:50
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d0:53:70:cf:42:f1:e2:9b:2c:a1:a4:23:0a:0c:b5:17:d7:
0a:8c:28:aa:cf:2e:bb:32:64:fd:9e:f5:35:0f:1a:90:f2:7f:
f1:3f:d6:28:56:9d:70:e5:91:73:10:99:c0:92:72:5c:f9:3d:
9a:bd:b2:b9:b9:f9:4c:b1:16:c7:2f:f1:7c:3b:a1:d5:8d:5e:
a3:a6:48:31:67:72:f3:a8:1a:99:39:95:28:ef:96:cf:f0:93:
bf:88:df:38:7c:cd:c7:18:de:66:96:87:a2:87:1f:5b:d0:a3:
7d:13:62:03:94:2b:f1:96:88:6e:ef:c7:40:f2:c5:cb:5f:8d:
33:93:ac:25:19:45:4e:4d:08:75:9c:4d:6f:68:b6:2e:a9:95:
de:ce:58:ea:64:43:60:1e:87:0d:1e:e6:ed:9e:cf:b0:4c:3c:
7d:61:ca:45:bc:4f:3f:6a:45:cc:95:19:92:15:29:99:0c:c9:
08:80:5c:1a:17:9d:be:2b:76:f5:f8:d1:6d:87:39:81:76:9b:
eb:10:2c:9d:22:3e:dc:e2:ee:c9:40:16:78:30:60:18:f9:67:
18:7a:0a:7b:2c:25:0f:0a:42:09:8c:24:1f:62:dd:9e:7f:f4:
3b:ba:f2:b4:73:47:34:0d:bc:cc:65:ac:95:6b:c8:6d:9a:fd:
cf:ca:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:07 2026 by rpki-client