Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: VvUuLkN6fmZK5zK2vO158AJcQubGqWnBqES2ifDB2fc=
Subject key identifier: 20:78:1F:35:EF:2E:A6:17:1B:C0:D5:E3:AE:8E:62:8D:E0:D9:61:71
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 019F924813C51C8F2D87784C129CB3F1B993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 1215
Signing time: Fri 24 Jul 2026 04:00:24 +0000
Manifest this update: Fri 24 Jul 2026 04:00:24 +0000
Manifest next update: Sat 25 Jul 2026 04:00:24 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: mHsafvfTfSIobozlP5P85EZ0niH+8nmB8XStNp9N5F8=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:13:c5:1c:8f:2d:87:78:4c:12:9c:b3:f1:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Jul 24 04:00:24 2026 GMT
Not After : Jul 25 04:00:24 2026 GMT
Subject: CN=20781f35ef2ea6171bc0d5e3ae8e628de0d96171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:b5:0b:cc:57:5b:d6:fc:25:c8:76:6e:33:
64:f2:6b:3b:44:59:b9:67:b2:26:43:79:c7:f8:97:
4b:4f:03:e8:8d:41:17:0c:70:f9:02:42:fb:dd:2d:
21:ea:99:5f:40:6a:f3:d8:a7:66:13:32:b0:9d:79:
39:13:82:3e:c5:de:16:c7:71:a7:f6:33:b4:18:2c:
5c:09:40:23:6c:84:34:76:0e:6b:81:bc:4f:5c:8f:
20:9b:f5:3a:26:85:44:89:3d:59:6d:aa:99:16:c7:
7a:d3:20:b5:45:f8:3f:b9:b3:58:83:79:b9:f5:5a:
4b:26:22:ee:16:49:58:52:39:dc:12:87:d4:3c:bb:
d3:85:c6:da:b6:17:55:48:0c:21:ae:2e:7e:2f:be:
0a:a4:83:84:6d:e8:80:d5:c0:a1:fc:34:21:a0:ac:
57:50:2e:f6:64:cf:f4:78:25:5d:ef:e0:c8:04:18:
fb:60:55:c6:86:a0:b4:1f:f4:60:3a:bb:5a:21:2f:
e7:31:01:3d:77:bd:18:b5:91:69:ef:bd:6a:74:ca:
6a:98:3c:1a:1d:96:b8:83:da:d5:1d:0b:7f:29:3c:
12:11:a6:9d:25:92:65:04:41:39:7f:58:51:39:10:
77:c0:8e:ae:6c:27:b1:45:2a:69:dc:77:ff:35:0d:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:1F:35:EF:2E:A6:17:1B:C0:D5:E3:AE:8E:62:8D:E0:D9:61:71
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:5e:47:42:c7:ed:d3:81:1e:c9:37:80:18:3d:ce:70:6d:
58:43:89:e3:09:63:20:b9:7e:1a:c0:ec:e8:d1:b8:7a:cf:d9:
72:e7:bd:dc:7d:2a:43:e0:09:cc:2e:f6:fe:fa:80:34:c0:ca:
35:f4:49:d7:91:1f:27:04:b0:b5:ca:ad:0b:98:72:08:02:05:
7c:01:19:2b:7b:c4:99:cd:76:c1:d9:d2:dc:0b:99:0f:a1:ec:
96:6c:b1:13:30:30:02:1b:9e:c6:f3:00:89:a6:e0:ef:4d:be:
a6:0b:7c:db:83:f4:2c:b2:75:f3:2d:07:be:50:fc:88:a5:63:
90:33:a8:cc:6b:e1:1e:db:de:9c:b6:26:4b:2f:77:0b:e1:2e:
67:e5:8b:77:67:0d:b6:a9:cd:2a:38:f2:1f:f1:fd:2b:00:62:
d9:6d:44:ff:3c:81:f1:0c:3a:0b:80:e8:5f:82:06:99:95:b3:
39:1f:08:0e:d7:e6:a8:31:3f:91:e4:c5:d7:af:53:3c:77:61:
cd:1f:7e:4e:a4:4a:68:83:cb:f7:fe:39:ef:59:91:f5:dc:26:
ba:95:32:05:6f:3b:bf:f1:02:c3:ae:d5:9c:4b:f6:b2:fb:bb:
60:fb:4a:e6:82:bb:f3:cd:03:87:76:39:cb:d1:53:72:06:9d:
d8:22:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:23 2026 by rpki-client