Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: 8GzAYSefEpoazAqKx9EzSX1pWCE8NfZlOf0K5PYFzt4=
Subject key identifier: FD:D4:CA:0F:1C:BA:AC:1A:1E:5B:01:DA:32:20:02:99:7F:0B:C9:90
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 019FAB63852154EDCEB453CC60EC03EFD76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 1222
Signing time: Wed 29 Jul 2026 01:00:53 +0000
Manifest this update: Wed 29 Jul 2026 01:00:53 +0000
Manifest next update: Thu 30 Jul 2026 01:00:53 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: MIQWVEGFjF6ZFHf71hYK02+wDFwCtQARaLnk06uJeH4=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:85:21:54:ed:ce:b4:53:cc:60:ec:03:ef:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Jul 29 01:00:53 2026 GMT
Not After : Jul 30 01:00:53 2026 GMT
Subject: CN=fdd4ca0f1cbaac1a1e5b01da322002997f0bc990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:a2:b8:c7:09:4f:94:16:b1:5c:a3:18:0b:
90:1f:cd:f7:5a:85:16:26:aa:e5:9c:85:fa:4a:e6:
a1:5f:0f:07:41:67:6e:b7:de:6f:ad:d1:31:6e:66:
db:80:56:f9:77:4b:96:82:0f:be:1d:f7:db:dd:0a:
c8:82:2a:39:ba:9c:45:ff:47:31:4b:78:2c:c0:7e:
1b:c3:85:89:39:80:09:30:ff:27:6e:cb:76:0e:c1:
49:04:38:76:f3:92:8a:bc:ae:72:d8:29:5d:9f:ab:
ab:09:bf:5c:4b:1d:a8:54:e6:d4:11:e6:94:27:8e:
08:2d:f6:41:86:46:f0:83:c1:59:f8:60:76:fe:3b:
17:68:e7:81:be:7d:f9:c1:7f:5d:17:ca:f7:30:27:
d9:c9:49:b6:11:e4:e3:fa:74:03:37:d5:40:71:86:
a7:fc:f6:7e:21:8d:88:2d:4e:4e:46:36:f7:24:74:
5c:db:6e:20:c8:b6:1e:9b:51:70:18:e0:39:02:8c:
41:78:eb:bb:23:90:1e:90:a8:96:d0:da:1d:3d:e3:
e8:bd:df:cd:0f:ac:66:43:66:95:ec:e4:d4:b0:d0:
6e:60:b1:ec:96:a4:69:71:94:e2:50:98:3c:de:85:
06:bc:31:e8:67:8c:27:1c:d9:21:91:d2:b9:61:6f:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:CA:0F:1C:BA:AC:1A:1E:5B:01:DA:32:20:02:99:7F:0B:C9:90
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:64:9a:a7:2b:44:2d:64:8a:43:cb:bd:6a:a0:83:90:ec:
4f:5e:3a:84:45:9f:8b:28:e4:69:20:87:16:56:67:e1:ff:25:
44:99:dd:fd:a3:a4:47:05:c2:17:d1:06:9c:e9:0e:ea:d7:f7:
10:e9:15:50:bb:0c:62:d3:85:7c:b6:5d:43:b9:c2:83:73:4d:
3b:44:06:3a:52:58:30:30:22:5b:07:7c:18:58:26:50:46:f8:
b6:59:46:76:b5:f4:09:cf:e2:b1:1f:d0:d1:b2:28:d8:90:3f:
8b:c7:71:d9:e8:19:85:89:d1:99:27:38:24:9c:20:9a:61:59:
11:84:d2:6b:9e:86:45:3d:77:dc:96:fe:ac:e3:62:6a:b2:ed:
72:f7:bb:75:49:75:ac:67:2d:2c:a6:e0:8b:ee:dd:61:64:f5:
69:05:1c:92:d4:4c:a4:5f:c1:74:f2:6a:4a:6e:79:36:c5:30:
49:cc:88:06:6d:01:47:70:e6:c5:f0:c7:d2:3e:3b:f1:d9:61:
28:9c:fe:9b:23:44:c1:e9:19:e8:62:80:79:62:a2:cc:78:2e:
1d:13:f8:8c:d4:9c:91:93:eb:41:3a:11:16:77:82:84:fc:66:
19:7a:2d:fb:c2:ab:ff:00:81:ba:1e:17:bd:17:9b:2f:35:7b:
3a:26:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:05 2026 by rpki-client