Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: rFcsLlZYghSL09s3zYdxLmPWiqZqGfnz9ng4r5NzzE8=
Subject key identifier: D6:08:33:01:90:FF:46:85:F7:1B:01:0B:47:F7:A5:56:1E:E1:25:38
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019CAEDA608911A6A78C6D7070116B77E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 157F
Signing time: Mon 02 Mar 2026 14:01:13 +0000
Manifest this update: Mon 02 Mar 2026 14:01:13 +0000
Manifest next update: Tue 03 Mar 2026 14:01:13 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: tgFEmaga19i1yC3x4VldbUBHxLX0wzxIvHxif4fQOtE=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:60:89:11:a6:a7:8c:6d:70:70:11:6b:77:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Mar 2 14:01:13 2026 GMT
Not After : Mar 3 14:01:13 2026 GMT
Subject: CN=d608330190ff4685f71b010b47f7a5561ee12538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:0c:ef:e2:c5:dd:ee:6f:69:af:f3:90:db:
f5:be:ac:16:75:bd:6a:58:78:2b:f8:dc:d5:a2:e9:
be:51:0d:a8:4f:97:91:61:68:a7:6d:70:11:6f:0b:
ef:68:d5:92:bf:d6:00:b8:3b:30:98:c9:07:31:16:
8d:00:a1:f8:9b:c0:c7:88:58:bc:16:d9:56:e7:74:
5f:2c:84:cd:47:9d:f9:5e:0d:48:6c:d6:37:bd:e2:
b8:dd:f1:d7:c3:fe:8f:f7:a4:09:2d:1e:73:36:62:
9f:32:b9:98:00:76:e2:d0:c4:52:64:9c:9c:e8:78:
c9:c7:10:ac:f5:91:2b:cd:20:b1:d5:d9:c6:9e:01:
96:ca:d3:6d:e6:6f:44:11:8a:24:ca:a6:5a:19:ff:
b1:6c:56:34:01:ce:e4:4d:1f:73:51:9f:e2:0c:d4:
bb:db:cd:53:f5:a1:f5:1c:bf:8f:6b:04:26:37:f9:
42:25:72:e0:05:b4:c6:59:f6:b7:97:02:1c:8e:23:
b5:f1:2a:ab:e0:46:60:a5:15:55:a7:96:79:32:0c:
22:45:47:e0:45:a9:22:9d:92:4e:ed:1f:60:1c:0e:
32:6f:a2:d1:70:ad:a7:55:01:e8:69:bd:d4:05:3c:
d5:92:61:4c:82:06:1c:de:5f:95:92:36:00:ab:17:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:08:33:01:90:FF:46:85:F7:1B:01:0B:47:F7:A5:56:1E:E1:25:38
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:33:20:e4:23:14:fc:3a:a8:1d:85:7d:e1:aa:d2:44:c3:e5:
60:db:d9:9c:cb:27:b7:9b:8a:b0:bd:70:23:09:3a:e1:02:7d:
82:04:a8:3b:17:97:54:c3:1d:89:da:94:ab:0c:8f:ea:d6:ce:
7b:be:62:c5:cd:c6:54:e5:cd:21:4d:a1:42:86:a8:d5:4d:06:
b6:d0:06:11:c9:45:fd:a6:f9:11:a4:44:7b:b5:1f:e2:14:2a:
f8:b2:c0:38:ff:a5:ed:fb:17:6d:18:15:87:94:44:b9:ed:85:
ef:00:b1:de:a3:94:21:ca:58:a1:0f:bd:93:bb:4d:20:09:1c:
a0:5c:9f:ca:de:aa:63:31:c4:65:c2:ee:68:9a:ae:b3:46:c6:
c6:5f:95:0d:03:dc:92:ed:3c:49:bf:85:33:89:db:03:cf:98:
46:8b:96:4e:25:60:2e:4f:7a:b2:be:6a:ab:b3:1b:b9:c8:f2:
c6:54:b8:c2:8a:ab:9b:6d:11:8b:29:40:af:c1:9c:ae:97:e0:
45:4e:04:50:6c:97:90:a9:f8:17:14:c2:88:14:8d:2a:1e:bf:
69:81:4e:13:3f:ca:db:e3:bf:f8:bf:fe:e3:a2:b0:77:42:89:
29:30:ec:c1:42:3e:04:81:be:bb:06:42:93:f2:50:68:75:cd:
d5:08:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:27 2026 by rpki-client