Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: zARByIjfSkNJHDpe8Z+tDL+D6acbBrswLLt8y5M0kVs=
Subject key identifier: 33:62:12:A4:05:FA:C6:C6:C9:E4:C6:AF:41:2A:B8:33:95:C4:4A:ED
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01A0CA7E2E0B47192425DE308E483D0D0CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0895
Signing time: Tue 22 Sep 2026 19:01:01 +0000
Manifest this update: Tue 22 Sep 2026 19:01:01 +0000
Manifest next update: Wed 23 Sep 2026 19:01:01 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: pWN0KWpN1sXwh+TTPmMVbqo8bM9yQaALaqYg1kfOaSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:2e:0b:47:19:24:25:de:30:8e:48:3d:0d:0c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Sep 22 19:01:01 2026 GMT
Not After : Sep 23 19:01:01 2026 GMT
Subject: CN=336212a405fac6c6c9e4c6af412ab83395c44aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:d7:0c:3a:ab:90:58:af:e1:1e:eb:36:c4:
fb:1f:08:02:cc:31:cd:26:33:ef:70:fd:5e:f3:67:
b8:1d:d3:0e:ab:42:b2:4a:a5:09:41:62:6d:c3:c4:
8f:65:62:1b:03:45:b6:60:b6:a8:c7:a3:4e:90:96:
fb:b7:ee:ac:4b:80:ca:da:cf:06:cd:b0:99:fe:b7:
bb:f2:ef:fa:c5:3b:fd:5f:51:c1:d4:1c:9a:6e:dd:
8d:b3:11:da:28:9b:08:05:b1:b9:84:af:9b:d5:ff:
14:27:e2:de:30:8e:10:94:a0:cc:92:11:12:aa:55:
35:e1:88:7e:e5:37:85:04:77:39:c5:b3:e4:36:09:
9a:0c:06:42:0f:a8:a4:89:51:44:89:49:ba:4d:0a:
bb:80:08:46:79:4a:9a:ff:91:f1:0f:c7:93:20:b5:
4f:37:87:5e:55:da:86:65:ac:f0:79:82:55:d3:6e:
fd:cf:29:d7:23:94:e0:be:80:ff:bc:85:63:e6:b9:
e8:e2:0e:88:58:cb:26:4a:4d:d5:2a:d6:1f:fd:6f:
71:fa:42:c4:8f:04:91:c2:8b:7e:5c:fb:04:85:4a:
f3:3d:00:27:87:c8:aa:1e:9b:fa:8e:7b:48:d3:77:
d7:6a:9e:36:da:52:b3:fc:b3:02:51:25:40:d6:a8:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:12:A4:05:FA:C6:C6:C9:E4:C6:AF:41:2A:B8:33:95:C4:4A:ED
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:96:d3:77:0f:0d:bd:bc:f9:8e:38:e3:80:20:be:a4:55:
86:34:a4:29:10:3c:5f:55:b8:a3:8b:2b:21:d2:b1:53:f2:ca:
84:71:4e:5d:2b:65:af:8d:9a:9b:f8:89:2b:bd:25:42:19:41:
da:19:a6:78:1a:3d:62:a4:77:5c:dc:53:53:cd:8d:12:3a:d6:
70:9a:3e:f1:1c:5f:61:94:41:ed:a0:2c:d7:85:c4:c5:42:15:
5a:a6:6d:21:b2:08:31:e1:4f:27:96:4d:19:58:2b:26:02:6f:
cf:a3:c7:21:94:81:28:7c:b6:aa:17:f7:28:f2:fa:4e:52:37:
13:ab:e0:7c:a8:72:ed:0a:9f:9e:e1:1d:e3:bb:83:3c:3f:c1:
22:71:c9:c6:94:49:6f:8c:43:34:10:be:5b:ae:ff:e9:38:eb:
4a:82:04:f2:19:d2:f4:c8:9e:e7:52:be:d2:48:62:1b:03:6b:
1b:3a:c2:09:af:ab:4c:71:73:cc:af:e5:a8:17:66:42:5d:83:
65:96:65:4a:5a:f5:0b:15:f2:e0:2c:07:8f:98:37:79:25:3a:
23:53:27:1e:f7:6d:6b:b9:af:38:92:e0:b5:64:2f:a9:de:22:
0c:ac:a9:06:ad:34:b5:e7:e0:54:55:f8:8e:37:fc:40:95:e1:
18:9a:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:47 2026 by rpki-client