Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: 06RlYoemVpLnE/q/9zLVI8q0c2ApUJTaTbpP+oK+o6M=
Subject key identifier: AF:D9:56:EA:BD:F5:27:BB:E1:67:16:49:C0:54:48:E7:6C:52:47:AA
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019CAA58D096DA18E8B1C76700A01F87BA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0F55
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: YdwBL5CAt4FCng6TgnpEq6Kbl6L06rh/lCYHe1Ge1jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d0:96:da:18:e8:b1:c7:67:00:a0:1f:87:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=afd956eabdf527bbe1671649c05448e76c5247aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:63:db:c7:e4:9c:1f:09:43:78:39:1c:3d:
d2:39:df:8e:c1:86:2b:b1:ad:05:10:5f:57:8d:f9:
3d:d9:8e:70:cb:c3:52:dd:93:99:76:00:cb:ea:48:
06:5e:c0:63:19:85:45:ea:93:df:ed:4a:1b:2e:0d:
cc:e5:9d:76:a1:4c:a7:9c:92:d6:2b:a0:63:81:7b:
d4:03:c8:0d:63:25:ba:ff:93:5e:bf:6a:df:14:f2:
8d:98:7b:2e:72:8e:22:e7:a2:92:8d:5f:de:f4:45:
41:1a:e1:9c:46:50:bf:0c:1f:fd:d1:2c:fa:09:c1:
c3:d7:22:38:a8:e2:c9:9a:91:59:06:97:74:54:d9:
0e:d2:6e:1d:d8:82:a5:ea:f6:5d:f7:0f:77:74:f8:
8c:1a:6f:2e:7f:f2:6c:87:e8:97:ed:d6:87:7e:d5:
fb:53:84:f7:fb:3c:a3:8a:73:f9:6a:7d:0a:61:28:
db:29:5d:e3:9c:36:fa:f9:57:79:59:c3:57:17:31:
a1:fe:08:5d:55:09:ff:ec:83:0f:e6:5f:87:6a:a8:
ba:cb:a6:a0:ab:c4:ab:c1:87:be:4d:a8:e9:4a:59:
3a:6f:da:c0:ef:58:e8:29:7f:65:34:77:76:09:82:
1f:34:c7:50:d3:c8:d8:21:a1:fa:cc:99:04:10:12:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:56:EA:BD:F5:27:BB:E1:67:16:49:C0:54:48:E7:6C:52:47:AA
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:19:57:56:c8:1a:3b:72:ce:f2:26:cd:d1:74:53:43:63:
e3:13:3b:dd:d9:ca:1e:01:ac:5d:78:24:fa:23:0b:85:d5:56:
4c:49:79:d4:b0:1c:72:3c:48:7a:7a:e9:81:ae:07:2c:8c:b8:
0a:e0:b9:ec:12:68:0d:5d:68:21:9d:01:1b:07:a4:9a:92:41:
d9:35:12:bf:4f:79:4a:c2:84:2f:53:40:09:e8:41:16:20:20:
10:fa:c9:0a:0e:5f:1e:3d:bc:d2:3c:47:60:f3:48:33:4f:ba:
4b:27:81:bf:40:77:f7:15:b8:76:57:32:aa:43:f0:bf:fc:ef:
75:6a:ad:5b:52:53:d6:22:0f:6c:38:ce:8e:57:ae:70:53:8f:
5c:9b:c6:ae:62:17:dd:28:c9:dd:8e:f7:7c:a5:e6:90:c0:09:
7f:89:7e:7a:c9:02:70:eb:1c:7b:06:66:aa:be:a1:50:55:32:
73:99:bd:c3:7d:db:07:6f:6f:0c:1e:fd:f2:fb:d0:f0:35:f2:
f4:e2:bc:1c:d9:b8:21:c0:c7:92:65:cf:2f:4f:f2:2d:6b:8a:
28:71:2d:09:9c:2a:e1:6e:ba:f5:94:a1:02:a1:9c:97:26:f8:
d2:02:12:a7:0c:cc:a4:d1:ab:d9:a0:98:c5:ec:a9:39:b4:a0:
ad:0d:45:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNCW2hjoscdnAKAfh7qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy
OTU1NGEwHhcNMjYwMzAxMTcwMTEyWhcNMjYwMzAyMTcwMTEyWjAzMTEwLwYDVQQD
EyhhZmQ5NTZlYWJkZjUyN2JiZTE2NzE2NDljMDU0NDhlNzZjNTI0N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr59j28fknB8JQ3g5HD3SOd+OwYYr
sa0FEF9Xjfk92Y5wy8NS3ZOZdgDL6kgGXsBjGYVF6pPf7UobLg3M5Z12oUynnJLW
K6BjgXvUA8gNYyW6/5Nev2rfFPKNmHsuco4i56KSjV/e9EVBGuGcRlC/DB/90Sz6
CcHD1yI4qOLJmpFZBpd0VNkO0m4d2IKl6vZd9w93dPiMGm8uf/Jsh+iX7daHftX7
U4T3+zyjinP5an0KYSjbKV3jnDb6+Vd5WcNXFzGh/ghdVQn/7IMP5l+Haqi6y6ag
q8SrwYe+TajpSlk6b9rA71joKX9lNHd2CYIfNMdQ08jYIaH6zJkEEBKhJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/ZVuq99Se74WcWScBUSOdsUkeqMB8GA1UdIwQY
MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct
ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz
LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXoZV1bI
GjtyzvImzdF0U0Nj4xM73dnKHgGsXXgk+iMLhdVWTEl51LAccjxIenrpga4HLIy4
CuC57BJoDV1oIZ0BGwekmpJB2TUSv095SsKEL1NACehBFiAgEPrJCg5fHj280jxH
YPNIM0+6SyeBv0B39xW4dlcyqkPwv/zvdWqtW1JT1iIPbDjOjleucFOPXJvGrmIX
3SjJ3Y73fKXmkMAJf4l+eskCcOscewZmqr6hUFUyc5m9w33bB29vDB798vvQ8DXy
9OK8HNm4IcDHkmXPL0/yLWuKKHEtCZwq4W669ZShAqGclyb40gISpwzMpNGr2aCY
xeypObSgrQ1Fug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:19:49 2026 by rpki-client