Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json)
Hash identifier: cdysEDxxypUYmoD9OHdSiDAIOzxePY6XDQemWDvIHz8=
Subject key identifier: A0:E6:37:60:B8:6F:02:E7:7B:43:76:9A:87:9C:8C:F2:F3:6D:56:FC
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 019CA9EB57768F8162EF081D3727E310211B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
Manifest number: 0E48
Signing time: Sun 01 Mar 2026 15:01:38 +0000
Manifest this update: Sun 01 Mar 2026 15:01:38 +0000
Manifest next update: Mon 02 Mar 2026 15:01:38 +0000
Files and hashes: 1: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: 1OF3YIi/+/4jDuAqauattIlp7ZnFQloJe+rbQcKFQ/A=)
2: zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa (hash: cuiATN6CsW6UrYic6PJvMAevjZeViQMrG4aNtH1vYrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:57:76:8f:81:62:ef:08:1d:37:27:e3:10:21:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Mar 1 15:01:38 2026 GMT
Not After : Mar 2 15:01:38 2026 GMT
Subject: CN=a0e63760b86f02e77b43769a879c8cf2f36d56fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:76:c2:b0:cc:f5:00:6e:46:2f:f6:90:f5:
93:60:a7:ff:5f:1d:94:ac:a8:c5:57:c4:70:19:7e:
1b:ea:7c:c1:47:45:72:04:5b:cf:00:6d:71:ef:87:
89:c0:e6:4a:5d:07:33:86:9b:94:6a:30:e3:ce:a0:
e5:c4:79:71:e3:d6:df:40:95:b2:6f:d1:32:f0:04:
c1:4e:cd:1b:c0:40:d2:ab:b7:ef:f8:d8:b7:79:84:
e7:8e:4b:b2:50:c2:79:66:e3:f3:2c:a0:cb:4b:aa:
ad:bf:4a:08:d7:48:7d:5e:c8:f3:60:22:76:c3:fe:
40:0b:1c:51:48:df:51:a8:c6:fa:7a:7a:a3:77:34:
7d:f3:d9:0f:e1:81:89:65:9c:fc:21:bc:19:ab:35:
7c:e1:b2:a7:fe:69:07:0f:0f:60:51:f7:61:cc:56:
96:52:a7:56:64:0f:38:a8:ce:98:77:c5:3d:92:78:
4b:85:f2:ae:5e:5b:3d:76:da:01:92:42:51:b0:05:
4b:81:5d:d5:4a:49:9e:e6:1b:93:83:6f:45:b7:11:
15:92:17:fc:c1:19:65:ff:ad:b5:b9:f7:47:37:71:
d8:3e:01:4a:4d:a8:96:56:1a:e5:78:1e:43:f9:2d:
87:d5:69:49:56:0c:b7:3b:a9:c0:84:1b:34:5f:44:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:37:60:B8:6F:02:E7:7B:43:76:9A:87:9C:8C:F2:F3:6D:56:FC
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:78:96:78:60:f1:e0:56:46:b0:4a:bb:49:ac:92:2b:49:
16:ff:13:98:5f:a7:b8:7b:f3:e7:a0:8f:bc:a0:21:8f:b2:99:
ca:6b:2a:9a:80:52:08:2b:78:fc:51:92:5a:05:3f:12:ee:84:
4d:c2:04:d0:e7:88:d0:e9:0f:1f:eb:27:a1:ad:0e:dd:5d:3d:
4d:52:ee:41:4c:ef:fd:f2:74:a7:a6:3e:94:89:a8:ca:c0:4c:
2a:eb:29:f6:6d:2e:2c:ed:36:2f:4c:31:b5:50:3e:0d:d9:7e:
d1:83:de:27:08:de:45:38:c1:dd:df:14:3d:2d:d6:5d:39:ca:
e7:d1:cd:fd:e2:09:26:4c:92:1e:40:e0:ea:75:a1:cb:b4:e7:
34:cb:f3:5a:6c:9e:b0:18:8c:c4:24:7c:c4:6b:40:65:41:7a:
d5:8f:3c:8b:fe:69:ba:34:0e:e9:76:b6:ea:2d:aa:1e:be:77:
79:9a:bb:91:9a:05:90:59:87:3d:29:0d:00:09:a0:23:d7:55:
0c:08:a0:2d:d8:17:29:cf:6d:88:3d:6d:15:3f:e1:e6:fd:39:
66:f1:0c:c2:50:e6:71:13:a3:23:c3:e7:70:1b:27:d3:ea:f8:
55:c2:9a:2d:2e:80:f4:36:58:12:61:e5:df:52:b1:cf:63:04:
ce:90:20:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp61d2j4Fi7wgdNyfjECEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw
Y2Q5YjEwHhcNMjYwMzAxMTUwMTM4WhcNMjYwMzAyMTUwMTM4WjAzMTEwLwYDVQQD
EyhhMGU2Mzc2MGI4NmYwMmU3N2I0Mzc2OWE4NzljOGNmMmYzNmQ1NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn652wrDM9QBuRi/2kPWTYKf/Xx2U
rKjFV8RwGX4b6nzBR0VyBFvPAG1x74eJwOZKXQczhpuUajDjzqDlxHlx49bfQJWy
b9Ey8ATBTs0bwEDSq7fv+Ni3eYTnjkuyUMJ5ZuPzLKDLS6qtv0oI10h9XsjzYCJ2
w/5ACxxRSN9RqMb6enqjdzR989kP4YGJZZz8IbwZqzV84bKn/mkHDw9gUfdhzFaW
UqdWZA84qM6Yd8U9knhLhfKuXls9dtoBkkJRsAVLgV3VSkme5huTg29FtxEVkhf8
wRll/621ufdHN3HYPgFKTaiWVhrleB5D+S2H1WlJVgy3O6nAhBs0X0TCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDmN2C4bwLne0N2moecjPLzbVb8MB8GA1UdIwQY
MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt
NGE2YWNlMjZiOTcyLzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy
LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8l4lnhg
8eBWRrBKu0mskitJFv8TmF+nuHvz56CPvKAhj7KZymsqmoBSCCt4/FGSWgU/Eu6E
TcIE0OeI0OkPH+snoa0O3V09TVLuQUzv/fJ0p6Y+lImoysBMKusp9m0uLO02L0wx
tVA+Ddl+0YPeJwjeRTjB3d8UPS3WXTnK59HN/eIJJkySHkDg6nWhy7TnNMvzWmye
sBiMxCR8xGtAZUF61Y88i/5pujQO6Xa26i2qHr53eZq7kZoFkFmHPSkNAAmgI9dV
DAigLdgXKc9tiD1tFT/h5v05ZvEMwlDmcROjI8PncBsn0+r4VcKaLS6A9DZYEmHl
31Kxz2MEzpAgDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:14 2026 by rpki-client