Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: xPp0+URHJku2sKFcxM17qarvKIl2UaP53veRj5D5xTc=
Subject key identifier: FA:DD:D9:5A:7E:82:32:F9:AE:59:D8:99:5A:D2:3C:87:11:2D:85:58
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019FAAF55E2E668FF5310C80DA47359C29E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 10E3
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: h5WGtnzKKiLZ7yQtbe2wzmOP0Mj59VJWhFUqWAd9AmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5e:2e:66:8f:f5:31:0c:80:da:47:35:9c:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=faddd95a7e8232f9ae59d8995ad23c87112d8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:f5:04:38:00:77:85:6d:60:f0:a6:bb:25:
ed:40:15:9c:9a:14:62:ff:59:f4:e8:08:ca:f8:aa:
b3:b3:ef:f6:04:56:18:a8:94:21:33:cc:7b:ef:67:
6c:2e:27:61:18:11:aa:06:da:9d:8e:bb:ea:e3:5a:
c6:84:3e:f3:7d:9e:be:0b:18:8d:ef:3c:ed:60:de:
07:ca:9a:dc:0b:0e:84:dd:6e:0a:a0:89:e8:12:02:
ff:3f:52:3a:56:98:86:43:e0:fa:a4:14:4d:d6:87:
9d:73:c2:01:99:40:76:13:51:d5:88:70:aa:ee:f3:
c1:82:0b:be:e5:47:41:47:07:9a:f0:7b:cb:fc:da:
13:dd:86:e2:22:69:46:4f:a7:bb:a6:cc:eb:dd:04:
bb:88:20:04:bd:b1:47:d8:9e:07:ed:77:76:ef:76:
85:84:43:79:d4:6e:f1:2a:00:74:1d:79:93:b8:98:
62:11:b2:ba:a4:2c:fc:de:81:5c:55:9e:b1:fe:5f:
75:d3:51:d6:04:1f:c1:04:f9:22:d7:e8:96:d6:c2:
36:90:14:39:5e:b8:c0:4e:98:af:46:76:25:3c:69:
a4:fd:9b:a4:ac:1b:bf:22:87:b2:7e:39:f9:91:d1:
60:9a:59:b4:45:4a:17:2f:ea:c5:d5:94:18:b0:20:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:D9:5A:7E:82:32:F9:AE:59:D8:99:5A:D2:3C:87:11:2D:85:58
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:15:2c:23:ea:82:8a:f2:88:be:55:0a:bc:1b:ce:ee:5c:
ea:d8:49:a2:63:ae:5b:d3:ff:49:97:70:61:ea:1b:12:79:5f:
f1:ab:16:15:ff:16:ea:82:95:1d:0b:17:2e:fc:55:c2:7b:15:
38:e2:a9:3b:5b:71:87:91:c3:27:70:af:5b:f9:d6:6a:89:19:
34:da:07:bc:5c:39:71:1e:c1:3c:0e:4c:06:9f:55:58:0d:61:
c3:09:d5:40:54:69:7d:d2:5e:2d:15:04:c3:dc:e4:de:88:af:
70:75:b7:1e:eb:8f:33:7a:d6:66:85:ef:7e:ae:ee:e4:60:65:
e5:4e:b1:f1:b3:05:c4:25:76:d3:f8:48:c7:25:c5:0c:07:a6:
0b:e1:88:52:e9:57:44:15:3c:27:92:06:fb:59:20:6c:2e:68:
45:25:82:7b:5c:6e:61:f7:90:f1:d5:a8:ac:ac:cb:f6:1d:96:
f6:72:82:2e:23:49:d6:9d:90:4c:12:aa:9a:3f:a3:aa:f8:4b:
ef:ee:3d:02:28:6f:f1:f2:84:ae:83:5f:95:80:75:c7:1d:e4:
04:94:0b:bf:bf:8a:2e:75:b8:23:c7:09:71:bb:5a:bd:10:4d:
2c:80:1a:c2:50:a7:f8:cb:70:23:0d:ff:cd:42:9d:89:1c:03:
80:97:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:30 2026 by rpki-client