
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: YRAH7K9mW7jmXtbyMunGJVHoX3WiHXcp50cj2YOdyls=
Subject key identifier: 3F:85:D8:6E:65:2D:4B:26:9F:F3:D5:29:EF:80:26:84:E2:D2:53:04
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019E1BD90F50C5E2E6EB3727F8F16E6FD794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 163C
Signing time: Tue 12 May 2026 11:01:10 +0000
Manifest this update: Tue 12 May 2026 11:01:10 +0000
Manifest next update: Wed 13 May 2026 11:01:10 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: nkoaogOymcNjtjPyB5KjWEw7ceW0tavvF4Nl/0U+cDs=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:0f:50:c5:e2:e6:eb:37:27:f8:f1:6e:6f:d7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: May 12 11:01:10 2026 GMT
Not After : May 13 11:01:10 2026 GMT
Subject: CN=3f85d86e652d4b269ff3d529ef802684e2d25304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:e0:d2:07:d7:be:75:e0:0f:c0:d6:bb:1e:
4c:aa:84:33:d1:91:a6:44:2e:90:6c:55:2b:a8:fc:
89:8e:8b:59:1c:a9:58:22:d6:c5:fe:c7:2b:49:c4:
84:7a:97:c9:89:73:69:8e:2f:42:0b:e0:da:16:ec:
b3:5c:d1:4d:b9:d4:17:94:d1:8e:b5:5e:43:6f:0d:
e6:7c:83:ba:d1:01:aa:4a:ee:33:4d:91:b1:41:46:
d7:26:2c:f2:3d:c0:21:4f:16:1e:4b:6a:4a:81:6e:
fa:fe:42:6d:62:2b:db:02:4d:63:07:bd:66:22:d4:
49:81:85:88:c1:d8:06:6c:f8:43:15:d0:6b:ee:9f:
8f:a9:cf:92:77:28:1b:ce:dd:32:d9:87:2e:57:86:
2b:9e:1f:f9:38:ba:22:be:9b:89:b7:d6:c2:e4:8b:
2f:d0:c4:84:4d:56:17:51:ab:fc:19:d4:2a:ea:b9:
40:d7:6e:ec:ef:76:05:75:86:a4:c9:8a:ca:9f:4c:
ed:f3:27:aa:76:3b:9e:5c:67:fd:40:0d:8b:aa:db:
1c:8d:ff:50:37:a6:24:18:0a:62:f1:22:a8:b9:fe:
0c:bc:4c:1a:64:8f:da:b6:97:3c:8a:68:7c:2d:d3:
d1:b5:99:7d:17:22:76:59:64:7a:d4:8b:dc:0d:29:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:D8:6E:65:2D:4B:26:9F:F3:D5:29:EF:80:26:84:E2:D2:53:04
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:05:9c:8d:39:f8:d6:8d:3f:11:4b:ac:19:2a:46:f4:a8:
76:62:26:10:b3:e8:54:b5:ee:04:f8:1f:2f:7a:d2:74:7e:6d:
a1:21:b1:0e:71:cf:22:c3:53:19:01:09:5f:4a:69:c0:cf:42:
39:e9:01:65:38:fe:cb:27:26:ef:34:25:17:b2:3d:a8:03:5f:
70:9b:c2:e4:cc:ce:92:bd:e5:d3:42:56:ee:ca:ca:15:00:c2:
4c:6d:19:b7:17:7a:b4:9a:8c:f7:06:58:49:cd:4d:bd:c6:91:
64:1a:e1:1f:7a:ed:51:af:0e:77:8d:70:e3:76:b1:97:f5:7f:
54:0f:78:d3:b4:96:ae:f2:bd:ab:a3:d9:36:9a:62:41:36:d8:
1f:ce:02:ea:2a:7e:36:e5:60:c5:ca:b5:6b:4d:b5:99:21:ad:
03:30:02:60:df:9a:1c:02:18:d8:26:35:05:d2:1a:1a:91:a6:
af:be:74:da:f6:08:cb:89:7a:48:a5:9e:6d:ec:bb:63:4a:b4:
79:6a:f2:ed:da:c3:a9:28:c8:60:8c:39:b7:91:56:a9:88:49:
69:b8:f5:82:ae:f4:74:6b:5b:5d:26:a8:22:c8:c9:fa:96:38:
3b:92:ed:13:0b:66:57:57:6c:39:ca:d2:50:1b:55:07:ec:56:
56:53:9b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2Q9QxeLm6zcn+PFub9eUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjYwNTEyMTEwMTEwWhcNMjYwNTEzMTEwMTEwWjAzMTEwLwYDVQQD
EygzZjg1ZDg2ZTY1MmQ0YjI2OWZmM2Q1MjllZjgwMjY4NGUyZDI1MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulvg0gfXvnXgD8DWux5MqoQz0ZGm
RC6QbFUrqPyJjotZHKlYItbF/scrScSEepfJiXNpji9CC+DaFuyzXNFNudQXlNGO
tV5Dbw3mfIO60QGqSu4zTZGxQUbXJizyPcAhTxYeS2pKgW76/kJtYivbAk1jB71m
ItRJgYWIwdgGbPhDFdBr7p+Pqc+Sdygbzt0y2YcuV4Yrnh/5OLoivpuJt9bC5Isv
0MSETVYXUav8GdQq6rlA127s73YFdYakyYrKn0zt8yeqdjueXGf9QA2Lqtscjf9Q
N6YkGApi8SKouf4MvEwaZI/atpc8imh8LdPRtZl9FyJ2WWR61IvcDSnRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+F2G5lLUsmn/PVKe+AJoTi0lMEMB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbcFnI05
+NaNPxFLrBkqRvSodmImELPoVLXuBPgfL3rSdH5toSGxDnHPIsNTGQEJX0ppwM9C
OekBZTj+yycm7zQlF7I9qANfcJvC5MzOkr3l00JW7srKFQDCTG0Ztxd6tJqM9wZY
Sc1NvcaRZBrhH3rtUa8Od41w43axl/V/VA9407SWrvK9q6PZNppiQTbYH84C6ip+
NuVgxcq1a021mSGtAzACYN+aHAIY2CY1BdIaGpGmr7502vYIy4l6SKWebey7Y0q0
eWry7drDqSjIYIw5t5FWqYhJabj1gq70dGtbXSaoIsjJ+pY4O5LtEwtmV1dsOcrS
UBtVB+xWVlObwA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:17 2026 by rpki-client