Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: P734b39vD+hoCM1iwBp7EsTh/BjzpKGYtM8kqt1mUeU=
Subject key identifier: DC:76:59:CD:95:CD:E1:77:5E:8B:AC:37:17:B8:A5:6F:5D:0D:A6:C1
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01A0E7AF121559310E43035F9FB914292E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 1187
Signing time: Mon 28 Sep 2026 11:03:25 +0000
Manifest this update: Mon 28 Sep 2026 11:03:25 +0000
Manifest next update: Tue 29 Sep 2026 11:03:25 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: Sz/kQlby/ZeyaVUXhjAbtJlVBh9dw/htkQmaY2LcVmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:12:15:59:31:0e:43:03:5f:9f:b9:14:29:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Sep 28 11:03:25 2026 GMT
Not After : Sep 29 11:03:25 2026 GMT
Subject: CN=dc7659cd95cde1775e8bac3717b8a56f5d0da6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:18:83:67:92:c0:0b:57:6c:89:d9:56:6f:
09:fd:16:93:b1:18:b7:9b:2e:97:e4:79:52:8d:27:
6a:a2:e1:72:07:6f:ff:f8:86:86:a9:29:b1:85:d5:
cd:4e:03:17:81:c5:27:8e:8a:ec:d9:fb:99:88:d7:
81:3c:80:76:be:df:1b:f5:6c:9d:bf:e6:29:a2:4c:
1c:bf:4c:cc:34:33:a4:bb:74:40:a4:26:79:77:be:
3c:4f:dc:f2:1a:41:9d:96:19:2a:80:70:6e:2b:bf:
37:68:c5:13:bd:f8:70:d1:63:7d:37:b2:3a:6b:72:
ee:11:e6:8e:b9:66:ce:c8:af:a7:b3:6c:c6:3b:97:
84:77:c3:b0:8d:82:5a:55:13:8d:ea:b7:7c:fe:68:
19:90:40:bd:30:27:c8:2f:a3:ab:5a:fe:f8:67:9c:
39:ae:80:6f:18:9e:28:8f:85:6a:35:22:26:54:b2:
59:57:df:1f:b9:dd:25:a5:70:97:0e:2c:7a:bb:e8:
56:b5:26:a2:c8:e9:36:cc:8d:18:a9:74:d7:44:0f:
e2:0e:04:c7:38:90:24:d9:ea:a2:a4:63:67:24:14:
49:75:b4:b4:89:8a:ee:1e:6a:6d:ec:1f:a7:6c:40:
b2:a0:77:10:f1:c9:b0:c8:d4:ba:b9:42:38:6c:a1:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:59:CD:95:CD:E1:77:5E:8B:AC:37:17:B8:A5:6F:5D:0D:A6:C1
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d2:0b:84:ed:aa:ad:65:6c:45:7a:53:05:67:4b:88:05:9d:
76:51:6e:98:25:37:b8:01:e1:c0:19:7b:3d:06:dc:94:38:1a:
fd:c8:9a:93:b7:24:59:5c:88:25:ee:cf:81:ed:00:83:ff:fd:
de:25:1d:4b:aa:4b:f7:1c:21:17:44:03:4b:47:ba:70:d5:1f:
81:b1:7b:2f:d1:b3:f4:da:fc:83:03:80:41:94:5d:22:e5:9a:
df:a2:82:76:fb:9a:10:fc:84:fa:fb:93:7d:f7:ac:44:a7:66:
b1:59:b1:d1:32:e2:87:6a:60:9b:6b:95:f4:53:26:9b:94:35:
d3:96:3a:b1:30:d1:67:94:09:2f:c9:ab:a6:59:c1:24:ca:ea:
21:aa:42:fc:35:ca:dd:20:b9:06:aa:6c:f6:e6:74:47:e9:0c:
e4:2c:49:e7:4b:84:25:4a:3f:a7:93:06:1b:59:52:59:25:a7:
e8:ec:ab:86:0f:40:47:bf:9b:6e:c9:9a:2c:90:26:ca:aa:63:
06:2a:f2:a7:5b:be:67:f0:b0:f1:78:0c:b6:a1:ff:44:a5:f5:
35:a2:91:53:a6:dd:f2:09:68:67:59:0c:1f:81:76:b5:a4:e7:
ce:8c:a1:ae:af:1e:c6:65:c7:a4:04:c9:4a:bc:8b:7a:9b:29:
a8:c7:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:36:45 2026 by rpki-client