Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: RF7Tmm9agKpBbkoL3GbppL5PlxowIyIg99JKdd2UfD8=
Subject key identifier: EC:1F:2A:0C:BC:84:79:9C:1F:F5:8B:F1:9B:AC:24:E8:89:05:B8:FA
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019EC33722E6454F94C8852EB91D43D60AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 106B
Signing time: Sat 13 Jun 2026 23:00:30 +0000
Manifest this update: Sat 13 Jun 2026 23:00:30 +0000
Manifest next update: Sun 14 Jun 2026 23:00:30 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: EaTJt3tP5+rCZDLuoql0B55bO3RAmb7NB1vh68/83+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:22:e6:45:4f:94:c8:85:2e:b9:1d:43:d6:0a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jun 13 23:00:30 2026 GMT
Not After : Jun 14 23:00:30 2026 GMT
Subject: CN=ec1f2a0cbc84799c1ff58bf19bac24e88905b8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:56:05:c5:9c:5f:45:60:1f:86:3a:03:69:
c4:66:5c:58:d3:5b:9d:91:e7:a8:a0:87:be:6f:64:
07:37:99:78:32:1d:0d:54:e5:94:31:64:49:c6:cd:
1d:1a:b7:91:af:dd:a0:69:a6:de:5d:b6:dd:87:ee:
99:fe:e9:05:e5:52:84:ea:07:4b:98:ee:46:39:ec:
a4:01:d6:8c:0e:ce:fe:5e:f2:f3:03:e8:2f:2f:b6:
2d:d2:64:41:31:d3:19:b4:b0:a7:33:e0:92:a9:76:
e6:c1:ca:4f:20:45:87:0b:ff:9c:a1:49:83:5a:e7:
23:80:63:58:58:5e:ac:c6:b5:92:8e:5d:74:d8:89:
40:c9:5a:9f:f9:b3:bb:94:9a:5b:21:a3:54:53:e3:
92:b8:0f:6d:b9:96:5d:02:08:73:d2:a7:44:45:67:
3a:d0:22:b3:b5:c3:52:41:81:03:7d:3e:f0:80:99:
d6:6c:9b:32:dc:c2:27:c6:7a:df:35:ae:fe:c0:eb:
25:d5:8c:51:90:7a:0c:72:ef:f3:64:98:81:f7:75:
e1:ff:6b:4d:d0:cf:ea:18:d7:43:cd:09:42:a1:4f:
dd:d9:dd:f9:ca:94:6c:0e:e3:07:d7:c8:58:69:c1:
60:79:d8:61:ff:fa:c2:d1:89:d7:54:dc:39:5e:4e:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:2A:0C:BC:84:79:9C:1F:F5:8B:F1:9B:AC:24:E8:89:05:B8:FA
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:ba:29:f5:2b:a8:08:2d:97:6c:4e:f8:ad:aa:5b:84:ef:
bb:87:e9:95:7c:b2:0c:0a:80:f2:e9:84:74:e9:cb:b3:52:81:
e7:c3:26:82:be:dd:ee:bd:56:a7:f7:51:0a:e0:61:af:fe:e2:
a1:0f:5c:e5:b0:ed:ce:4b:ca:9f:1f:3a:3e:58:ac:96:9c:3f:
cb:2a:79:85:26:e9:0b:0b:4c:97:9f:17:89:96:b9:da:42:6e:
f8:ac:0f:1b:21:5d:86:3e:00:a3:d0:23:0b:44:c2:d6:f1:1f:
fd:e6:cf:f5:ea:8f:2f:5b:7f:1f:a3:9c:69:01:7e:4b:11:d9:
e2:93:b6:fe:20:55:7c:a6:bf:5c:c0:6d:35:00:ad:c0:37:10:
c2:d2:7b:00:b4:04:20:0b:97:0d:f2:2c:6d:53:cc:3d:54:92:
23:90:04:f5:e4:7a:81:06:91:70:43:b4:86:64:9a:9e:42:66:
38:da:d8:cd:48:d4:0c:92:bf:a6:b7:9d:f9:4b:3f:29:90:f9:
22:0b:03:95:e8:de:61:86:28:dc:e1:fd:07:54:be:88:67:52:
89:10:a0:1c:6a:56:4e:5b:dc:54:0c:11:42:4e:84:0f:44:fb:
11:3b:b3:c3:1a:cd:a0:4d:f6:b9:6f:09:4c:30:54:90:b8:25:
4a:22:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:54:43 2026 by rpki-client