Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: h66Yr4QHsLy6IzRNpVDWcYV3f6NG5JAaugvtKGaTtXs=
Subject key identifier: AD:0C:DA:54:09:63:03:77:5A:89:95:BB:5A:0A:4A:8A:31:58:79:7A
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019D9DAC92963CC5BC6CA55E7E7863C52E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0FD3
Signing time: Fri 17 Apr 2026 23:00:25 +0000
Manifest this update: Fri 17 Apr 2026 23:00:25 +0000
Manifest next update: Sat 18 Apr 2026 23:00:25 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: bTUG7Km1bYIo4mChLoEUUSFcJwJag8OFr4F3P+Scs6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:92:96:3c:c5:bc:6c:a5:5e:7e:78:63:c5:2e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Apr 17 23:00:25 2026 GMT
Not After : Apr 18 23:00:25 2026 GMT
Subject: CN=ad0cda54096303775a8995bb5a0a4a8a3158797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:ba:16:56:a4:41:22:db:fc:09:f6:e3:7e:
d7:c3:34:f7:ff:ca:ac:23:92:03:9c:7d:40:df:fb:
f7:42:fc:c9:56:df:a1:ed:b3:95:ab:26:f3:07:a8:
78:7e:b9:93:a4:da:ac:b0:e2:45:d9:3b:6c:9f:e4:
4d:89:47:15:38:28:37:65:ae:56:cb:7b:3a:e3:d9:
64:58:62:d7:02:8d:e2:4c:ff:0a:93:32:7f:fe:61:
02:a3:5c:c5:5b:4a:79:14:2d:df:3b:06:51:91:f7:
f3:a8:7f:01:06:fd:8a:04:dc:43:ea:a2:17:7b:6b:
b9:e7:54:41:f0:9d:00:00:67:be:43:c2:20:5f:98:
0a:42:f4:d2:0d:27:fc:77:22:a2:37:66:1b:87:07:
d0:6a:54:22:be:c5:0f:8c:aa:d2:64:a5:03:46:81:
6f:c6:18:dc:1c:67:59:f3:1f:b2:1b:01:94:39:c2:
8f:23:5c:6f:4f:24:da:57:ea:44:89:36:82:b5:b7:
7f:c1:13:be:b7:ef:af:ca:69:eb:b4:0a:62:7d:7f:
3c:04:b5:3b:7f:f9:9a:2c:52:e5:da:9e:91:61:d0:
85:9f:37:bd:df:8e:c3:65:3b:44:50:d8:35:39:dd:
37:2e:af:0a:3b:50:61:1e:db:34:1b:6e:28:88:ec:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:DA:54:09:63:03:77:5A:89:95:BB:5A:0A:4A:8A:31:58:79:7A
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9e:1b:04:c1:69:18:ef:cd:4c:f8:81:35:79:7e:60:01:d3:
85:90:95:36:61:df:4f:f8:53:60:72:be:df:f1:0c:bd:2c:57:
69:2b:ea:6f:75:87:52:64:6f:67:a8:bb:32:28:c3:6a:1c:f5:
1c:53:ac:6e:65:06:f9:9f:1f:fc:c4:fa:91:f5:08:3f:3d:9a:
ad:46:e5:c1:27:3d:cb:83:94:58:07:4f:53:0c:75:00:9e:e1:
2d:ab:18:96:b3:ca:00:a9:89:a6:55:66:73:61:bf:8f:ba:e4:
6b:3d:be:ff:29:94:ae:00:f6:35:84:3c:4f:e5:6a:2c:d6:0b:
5c:46:e6:f8:72:a8:6b:df:1c:ce:68:a3:81:f1:e7:fe:7d:1c:
21:e6:8c:c7:72:f6:17:34:3b:ce:71:ef:d1:a6:22:87:a6:95:
33:3e:94:9b:9b:c6:f1:72:3c:7b:f1:71:08:14:cf:af:f9:ac:
b9:11:d8:ac:c3:ff:da:0e:b5:18:59:ea:cc:8b:c6:9a:2d:18:
50:6e:48:52:58:03:cd:96:a5:bd:7e:4a:cd:c2:38:96:0d:63:
ee:92:65:72:5d:12:62:ca:1f:db:28:6d:3e:81:8c:13:8d:4f:
1d:70:d1:b6:bf:ba:56:4f:39:27:3c:c9:aa:09:a1:e8:f8:59:
a7:c6:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:12 2026 by rpki-client