Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: Z72Zgz7CueabPlq0dwEmu92wTnTd0Bw7zrqcIOvbAvk=
Subject key identifier: 7F:66:78:B4:B4:C3:7F:8C:95:D7:D8:86:9C:07:3A:82:0A:DE:C1:A3
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 01A0E43F2D7D139F0B69D2F4A41F4C34C1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 12C4
Signing time: Sun 27 Sep 2026 19:02:20 +0000
Manifest this update: Sun 27 Sep 2026 19:02:20 +0000
Manifest next update: Mon 28 Sep 2026 19:02:20 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: Fi2FnA1nbsgDkm3Y+l7m8szBZhb4fe0+YBDpXJ+9AKQ=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:2d:7d:13:9f:0b:69:d2:f4:a4:1f:4c:34:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Sep 27 19:02:20 2026 GMT
Not After : Sep 28 19:02:20 2026 GMT
Subject: CN=7f6678b4b4c37f8c95d7d8869c073a820adec1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:a3:4f:f8:12:ea:76:b3:92:2c:12:8e:f7:
c3:29:72:15:e4:20:af:ca:a1:8d:59:61:4f:94:d9:
69:11:db:db:70:69:67:5a:81:c4:00:21:d5:e9:18:
af:c7:1f:e2:a5:5e:d5:05:58:be:05:60:8a:5d:4c:
4d:64:6b:73:9b:3c:d5:a8:a8:03:30:6f:61:f0:98:
a8:4b:93:4d:4a:77:6d:d3:24:be:ee:d5:2d:68:b9:
e1:8a:a2:57:7d:81:df:8b:99:79:5f:04:63:43:c8:
1b:85:0a:c1:0e:54:cf:0a:4c:38:f7:f7:fe:fc:57:
c1:66:f7:5d:04:70:fc:99:64:59:4c:eb:c1:47:d9:
73:70:ea:63:d1:0d:d0:c0:ce:8d:4b:bf:9d:13:08:
ea:6f:c4:6b:67:0b:d8:07:ce:32:49:01:ca:5b:8d:
fd:1a:41:e1:55:03:e9:ef:20:94:a7:da:a9:96:89:
56:af:59:16:2f:40:26:4f:b8:ff:77:5c:4b:33:73:
54:e6:be:2a:a1:fd:7d:a0:ca:2d:f2:2b:da:f2:55:
13:6c:91:29:60:6c:05:f6:73:18:c1:31:21:75:63:
33:90:67:56:c1:93:25:3b:76:ec:22:19:b1:49:c4:
1b:c3:09:7e:9f:8e:bf:c6:63:96:3f:b8:9d:b8:8b:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:78:B4:B4:C3:7F:8C:95:D7:D8:86:9C:07:3A:82:0A:DE:C1:A3
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:e4:4a:9f:13:0e:87:8d:40:e2:5d:9d:a4:6a:7c:de:21:
55:e9:76:0d:cf:96:a4:a5:17:27:f3:6e:25:3a:c6:fa:bf:37:
11:c9:a5:41:cb:65:94:19:43:41:43:a6:60:ab:7e:4d:2a:75:
f8:4a:2e:1f:63:b6:15:b8:af:90:99:47:57:9c:33:d5:fe:ac:
29:44:81:33:e0:4d:bd:e0:a2:ad:92:0c:9e:a2:68:fe:b5:c9:
39:5a:6e:14:79:f8:5b:83:37:30:fe:9b:a7:a9:3b:8f:9f:7e:
72:29:dd:1a:16:f7:9e:db:ef:c7:f2:03:63:7e:b2:15:c1:db:
7d:d9:78:9a:bf:12:e9:a2:d3:fa:de:e5:18:df:cf:f4:5f:0b:
6a:da:6b:2e:2f:8a:ff:63:40:df:2e:a7:d0:9d:91:cd:87:0c:
56:28:66:c0:1f:14:50:a0:36:e8:e7:f9:1a:2d:e0:be:33:e6:
60:da:a5:5f:cd:76:e0:af:0e:be:25:19:d7:2e:e3:4e:02:64:
b4:32:cf:a4:b0:86:66:4b:50:77:ab:08:fb:43:dc:31:3f:31:
a6:57:fb:18:43:ea:5a:3e:43:c1:54:2b:47:0e:c0:92:c1:79:
c8:7e:ae:70:95:98:a8:b2:f2:2c:11:14:db:92:d6:0d:c3:e4:
09:1e:1d:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPy19E58LadL0pB9MNMGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZDMyMTZjY2NjODYzZWNhMGMzZGQxODk5NDFiMWI5ZWEz
N2NhY2QwHhcNMjYwOTI3MTkwMjIwWhcNMjYwOTI4MTkwMjIwWjAzMTEwLwYDVQQD
Eyg3ZjY2NzhiNGI0YzM3ZjhjOTVkN2Q4ODY5YzA3M2E4MjBhZGVjMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyjT/gS6nazkiwSjvfDKXIV5CCv
yqGNWWFPlNlpEdvbcGlnWoHEACHV6Rivxx/ipV7VBVi+BWCKXUxNZGtzmzzVqKgD
MG9h8JioS5NNSndt0yS+7tUtaLnhiqJXfYHfi5l5XwRjQ8gbhQrBDlTPCkw49/f+
/FfBZvddBHD8mWRZTOvBR9lzcOpj0Q3QwM6NS7+dEwjqb8RrZwvYB84ySQHKW439
GkHhVQPp7yCUp9qplolWr1kWL0AmT7j/d1xLM3NU5r4qof19oMot8iva8lUTbJEp
YGwF9nMYwTEhdWMzkGdWwZMlO3bsIhmxScQbwwl+n46/xmOWP7iduIum6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9meLS0w3+MldfYhpwHOoIK3sGjMB8GA1UdIwQY
MBaAFKDTIWzMyGPsoMPdGJlBsbnqN8rNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0Mzgt
MGQ0NGMwNGE4NDQ4LzEvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0MzgtMGQ0NGMwNGE4NDQ4
LzEvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGB/kSp8T
DoeNQOJdnaRqfN4hVel2Dc+WpKUXJ/NuJTrG+r83EcmlQctllBlDQUOmYKt+TSp1
+EouH2O2FbivkJlHV5wz1f6sKUSBM+BNveCirZIMnqJo/rXJOVpuFHn4W4M3MP6b
p6k7j59+cindGhb3ntvvx/IDY36yFcHbfdl4mr8S6aLT+t7lGN/P9F8LatprLi+K
/2NA3y6n0J2RzYcMVihmwB8UUKA26Of5Gi3gvjPmYNqlX8124K8OviUZ1y7jTgJk
tDLPpLCGZktQd6sI+0PcMT8xplf7GEPqWj5DwVQrRw7AksF5yH6ucJWYqLLyLBEU
25LWDcPkCR4dZg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:22:00 2026 by rpki-client