Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: 07fJv/RdzkuAsPAwx6KW5NLA9Ss4T/2xvRcHIkr3lPg=
Subject key identifier: 68:1B:E7:74:7E:82:87:74:95:61:D5:5A:7F:1A:76:4B:89:96:3A:BE
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019CACEBE99C1861C702C98B8C9B1E5029BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 157E
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: DZgmhxVoGHKa554nmnDVcXaACS6KuwwPUJlCjIbkPAc=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e9:9c:18:61:c7:02:c9:8b:8c:9b:1e:50:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=681be7747e8287749561d55a7f1a764b89963abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:3a:5b:f4:60:7c:c2:25:a3:94:e8:80:1d:
c3:c6:25:6b:47:a3:2f:71:79:5e:00:8f:78:bf:58:
d5:9d:d6:2f:80:22:90:20:30:c0:a1:db:ec:4b:26:
3a:be:70:3c:28:e5:ec:44:8f:70:fa:0f:fd:14:40:
b6:a7:27:76:80:58:e9:b8:ed:87:d5:68:1b:95:72:
e0:8f:4a:da:7a:bb:63:2d:10:15:52:b0:d9:12:75:
06:64:e0:a1:34:1d:f4:16:f7:9e:0c:33:1e:4b:e5:
ed:51:a5:63:ca:ac:4d:50:a6:69:35:6d:13:79:27:
ac:8d:90:74:79:0d:25:d3:b0:aa:cf:87:e7:b0:95:
ec:bf:86:d6:58:50:bd:be:ac:2f:2e:ca:bc:00:c7:
b6:8d:70:eb:58:2a:21:0d:8e:da:5a:3d:a0:28:1c:
0e:d6:3e:25:3f:60:3c:a2:de:cd:84:65:1f:12:72:
0c:00:c0:15:4d:47:41:cd:ed:80:7b:d4:67:3b:ec:
5d:d7:62:59:67:82:a8:30:7e:01:63:17:5c:95:a8:
b5:ae:30:04:2a:b0:bd:a5:41:61:31:9a:f7:6f:09:
22:44:cf:b8:d7:b0:8d:03:3a:af:00:8c:0c:ee:68:
e7:de:ac:00:85:cf:d6:4b:77:89:5e:60:02:08:ea:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:E7:74:7E:82:87:74:95:61:D5:5A:7F:1A:76:4B:89:96:3A:BE
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:42:18:36:c0:56:9a:bf:0f:33:b6:1e:d9:74:55:9f:3f:
71:b4:a0:7b:b1:35:9f:f4:8b:92:6f:6a:d5:c2:d5:eb:a5:34:
4f:64:c3:cd:aa:af:b2:ac:4f:a0:87:de:04:fc:a6:02:6b:df:
80:19:3e:99:46:14:0a:40:6b:66:d6:40:42:81:61:a9:94:1f:
26:f7:13:ce:53:55:a8:fb:69:7c:50:a0:2a:6b:12:34:ee:b4:
58:96:aa:8e:50:a7:b6:e7:31:24:fe:a3:9e:eb:94:36:6f:e2:
8e:9b:c9:4a:79:87:a3:b3:41:5d:93:30:45:e3:ca:0d:49:79:
37:d1:cb:1d:37:37:ac:01:97:3d:9f:77:aa:a8:de:21:90:4a:
1a:95:6f:36:cf:3c:d7:e1:1b:22:84:5d:a0:85:c8:69:50:b2:
e8:5d:40:4e:a5:d9:d0:56:fb:7a:1d:76:b8:80:30:59:c0:56:
0c:41:d2:6a:97:bc:4c:4b:3e:e9:a4:71:39:9a:c0:b4:78:ca:
c6:ce:18:42:27:93:b8:53:c5:18:39:0d:d2:c8:49:7e:b6:4c:
cc:49:76:2e:0a:f4:e6:17:c3:bf:60:16:2c:be:25:5f:cb:56:
f7:9b:72:9e:2a:4c:de:c1:01:01:c6:bb:ec:6a:8e:52:38:55:
e8:b9:7d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+mcGGHHAsmLjJseUCm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjYwMzAyMDUwMTA3WhcNMjYwMzAzMDUwMTA3WjAzMTEwLwYDVQQD
Eyg2ODFiZTc3NDdlODI4Nzc0OTU2MWQ1NWE3ZjFhNzY0Yjg5OTYzYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreE6W/RgfMIlo5TogB3DxiVrR6Mv
cXleAI94v1jVndYvgCKQIDDAodvsSyY6vnA8KOXsRI9w+g/9FEC2pyd2gFjpuO2H
1WgblXLgj0raertjLRAVUrDZEnUGZOChNB30FveeDDMeS+XtUaVjyqxNUKZpNW0T
eSesjZB0eQ0l07Cqz4fnsJXsv4bWWFC9vqwvLsq8AMe2jXDrWCohDY7aWj2gKBwO
1j4lP2A8ot7NhGUfEnIMAMAVTUdBze2Ae9RnO+xd12JZZ4KoMH4BYxdclai1rjAE
KrC9pUFhMZr3bwkiRM+417CNAzqvAIwM7mjn3qwAhc/WS3eJXmACCOrbcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgb53R+god0lWHVWn8adkuJljq+MB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6xCGDbA
Vpq/DzO2Htl0VZ8/cbSge7E1n/SLkm9q1cLV66U0T2TDzaqvsqxPoIfeBPymAmvf
gBk+mUYUCkBrZtZAQoFhqZQfJvcTzlNVqPtpfFCgKmsSNO60WJaqjlCntucxJP6j
nuuUNm/ijpvJSnmHo7NBXZMwRePKDUl5N9HLHTc3rAGXPZ93qqjeIZBKGpVvNs88
1+EbIoRdoIXIaVCy6F1ATqXZ0Fb7eh12uIAwWcBWDEHSape8TEs+6aRxOZrAtHjK
xs4YQieTuFPFGDkN0shJfrZMzEl2Lgr05hfDv2AWLL4lX8tW95tynipM3sEBAca7
7GqOUjhV6Ll9iw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:54 2026 by rpki-client