Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 9gng6zaQngh8lBCr9ugwb9MJ10vBc+xjOb79ls8E+nM=
Subject key identifier: 4B:6C:BF:94:CA:E0:8E:63:3D:CF:7F:5C:79:C8:B5:77:56:03:7E:25
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019FAABE6D81C7608EA68AC74F2A15DF450B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0800
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: Cs089BB1Oe0mIByZiCt/jWClGlAtWVD26YC7vIprepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6d:81:c7:60:8e:a6:8a:c7:4f:2a:15:df:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=4b6cbf94cae08e633dcf7f5c79c8b57756037e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:ac:4b:da:f7:33:1a:26:3a:06:d6:23:a9:
9b:be:a4:52:11:8b:a1:69:36:07:bf:8f:93:7d:2a:
02:9d:4a:4c:a0:0b:77:d0:d2:95:da:46:ff:8c:1e:
3f:f8:85:52:85:3b:4d:af:2c:d3:4b:d6:22:2a:62:
88:d0:e6:ac:1e:95:ba:6e:e0:fa:91:08:6d:78:7a:
b7:31:94:f0:6d:26:68:f1:a6:69:7f:ec:55:7b:fc:
14:c9:8e:28:2f:7f:4e:6c:ec:54:34:79:40:27:a2:
f1:aa:42:59:7d:fe:d2:97:87:c7:eb:37:0b:45:a2:
f9:57:ce:4e:b1:45:dc:5f:90:37:f3:83:c5:4c:9d:
a0:2d:ed:e1:41:e9:b5:4e:cb:4c:90:d4:f4:33:9a:
f3:c3:d9:f0:df:aa:7e:c8:d5:21:de:42:0b:1a:99:
5f:d1:63:68:5f:7f:56:6f:74:c8:19:54:b0:5a:3f:
e4:b2:13:6c:67:79:c1:bc:1d:1a:94:4c:a6:6f:51:
ec:3c:2d:c6:72:a6:c7:ce:ac:72:17:70:f8:19:aa:
3a:07:65:a7:37:e7:b3:20:7a:f3:58:04:e5:77:77:
1a:d0:bc:e9:4e:84:10:81:fd:04:00:7d:87:65:2d:
25:85:59:76:c8:ac:32:0b:db:ce:89:f4:d7:ec:84:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:BF:94:CA:E0:8E:63:3D:CF:7F:5C:79:C8:B5:77:56:03:7E:25
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:fe:9a:db:47:e7:db:5b:16:66:19:e3:7b:00:ae:3d:a6:
a6:c0:f2:91:06:77:e7:05:81:7f:4d:55:f3:09:1d:1d:da:79:
70:e4:98:a6:26:82:4a:1b:f5:95:86:1f:9e:a3:fe:ee:36:e1:
76:b3:4b:01:33:70:90:76:4a:9e:33:41:33:e5:0a:47:0d:7d:
87:58:94:de:04:ac:b4:c7:10:ec:9f:d9:d9:f0:c3:8a:ff:3d:
df:15:a3:cd:9a:49:0b:59:e7:62:63:21:fe:bd:b9:3f:4a:d7:
3d:13:1f:2d:5d:75:86:5b:a1:76:77:f6:1b:e8:91:5f:33:d8:
64:1d:b0:6b:23:d8:27:7c:c4:a1:ac:93:0e:5f:f4:3d:42:98:
09:60:f7:e6:cf:aa:fc:8d:77:67:d2:44:c2:5f:d0:26:16:84:
7b:83:41:c6:c3:2c:75:58:fd:37:dd:6d:6c:72:7e:c9:e5:e6:
00:02:f2:26:ef:d7:be:d7:09:ea:ff:ab:56:1b:9b:a3:b3:20:
b9:40:04:a7:94:0a:9a:54:4c:1f:73:f6:f8:23:04:95:2c:7f:
66:b4:1a:3e:dc:1b:ec:8d:bc:d6:bf:04:2b:6d:43:6c:4d:ad:
52:8e:0f:ce:cc:b0:9b:45:b5:ed:e4:f2:7c:a2:62:14:5e:14:
f8:ec:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:21:23 2026 by rpki-client