Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File: oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier: OxNrcXaZi9btFG22aHcBQSMXO8x0d4ubKHyZfbVwDFI=
Subject key identifier: 63:D0:3D:9C:5E:DF:9F:E2:58:36:1C:ED:E0:B5:B1:83:69:DA:F6:18
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 01A0E0621AC813A39CA0E67EC7C056351A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number: 12C2
Signing time: Sun 27 Sep 2026 01:02:00 +0000
Manifest this update: Sun 27 Sep 2026 01:02:00 +0000
Manifest next update: Mon 28 Sep 2026 01:02:00 +0000
Files and hashes: 1: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (hash: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU=)
2: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: 5s27jPPau3D1UUH7xH8IiygND/GKPsUEGQ3S5cnNy/0=)
3: oTJ_SiNI-sTWNycV04ya44fLP9Q.roa (hash: oQAMQxzLon76LhylB305yCYYWrb8zMDw4+N6NR6rHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:1a:c8:13:a3:9c:a0:e6:7e:c7:c0:56:35:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Sep 27 01:02:00 2026 GMT
Not After : Sep 28 01:02:00 2026 GMT
Subject: CN=63d03d9c5edf9fe258361cede0b5b18369daf618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:84:f4:18:1c:9d:22:28:f5:3b:55:e9:eb:
dc:f6:e5:27:6d:01:2d:e7:88:34:59:32:22:5d:d1:
db:14:80:bc:85:64:c5:fb:be:e1:55:6d:61:a5:c3:
c3:d0:3a:39:30:eb:8c:8c:72:0d:2c:f0:ba:f6:4e:
b5:df:b7:03:4c:f5:53:09:af:2b:bd:a7:fe:c8:45:
21:29:52:9f:4f:f8:dc:c8:6a:73:63:0c:39:0f:1c:
83:95:90:8a:62:71:32:d5:5b:a5:83:99:12:21:0b:
95:a5:82:b8:97:1b:c1:ab:d4:43:26:0a:c1:d8:40:
20:5e:c3:25:00:46:00:9c:06:10:8c:b0:d1:5e:2d:
9d:e2:06:e5:88:a9:fa:2b:b3:a7:f5:d5:21:6c:f0:
1e:82:89:0a:5f:be:bf:f9:9c:d1:46:92:47:12:0b:
ca:af:8d:63:01:17:53:71:96:27:5c:55:37:67:06:
52:07:1f:06:fb:8b:e7:25:d6:a1:d2:45:24:4c:f6:
57:9a:80:50:dd:08:5f:42:7e:71:0f:62:85:d7:5d:
52:ef:37:bc:b9:d0:a6:ae:d5:bd:69:24:76:d2:24:
f7:ca:5f:ea:6f:9e:ba:84:9e:2a:81:56:28:05:ad:
9f:ad:65:ba:1e:50:6e:ed:5d:1e:51:da:cc:7f:c5:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:3D:9C:5E:DF:9F:E2:58:36:1C:ED:E0:B5:B1:83:69:DA:F6:18
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:bb:bf:e9:38:4c:10:7d:6e:cc:9a:18:51:14:e9:2c:d0:
33:6c:50:df:f1:38:0e:68:fc:23:b0:b1:32:3c:4b:79:cb:ee:
90:b3:f2:37:3b:69:74:0a:e0:ee:2c:c5:68:03:d0:1a:92:c2:
99:8d:2d:f4:47:75:c2:64:4a:75:cb:99:26:b4:71:56:a4:cd:
28:4a:1f:29:83:ac:99:51:32:ed:6f:2b:72:65:79:67:85:3d:
a6:84:fe:5e:55:b7:87:d6:4a:c0:7d:80:4e:01:e6:fe:a9:07:
5a:63:22:e8:4c:0a:13:27:d8:c4:70:e8:b3:c5:33:70:c1:dd:
ec:f2:ef:ef:01:b0:c3:37:63:ca:b4:5f:8f:83:50:04:90:79:
06:ca:0d:6a:d7:c3:b4:0e:62:ef:ce:0c:d6:ee:3f:c4:c4:a7:
cd:00:88:42:23:b4:9d:82:77:94:02:93:eb:f9:28:79:53:ea:
27:28:b3:f3:48:88:d2:06:b8:43:9e:56:f1:09:07:d7:e7:3e:
83:0c:db:98:75:32:d9:81:80:68:e6:cd:4a:1e:11:67:ac:63:
90:85:19:37:d3:d1:96:0e:4d:18:79:92:11:59:83:02:93:01:
cb:65:0e:45:27:dd:78:f1:cf:43:94:9b:f3:ce:14:4f:d7:6a:
c4:22:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:58:40 2026 by rpki-client