Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: vGmctYcFe+24GExUtEvJLcGluHsEAq3BI6jiVV62qNc=
Subject key identifier: 33:E0:83:34:9A:FF:1D:7B:0D:42:36:58:C2:58:67:D3:CC:A8:82:BC
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019F93C88A06FF9C9A64D47D8764E0A4B5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 10D7
Signing time: Fri 24 Jul 2026 11:00:20 +0000
Manifest this update: Fri 24 Jul 2026 11:00:20 +0000
Manifest next update: Sat 25 Jul 2026 11:00:20 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: n2U1qvyf9tf96nPa18QBpbzaoPfIyi6IVtRTuGWS4LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8a:06:ff:9c:9a:64:d4:7d:87:64:e0:a4:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jul 24 11:00:20 2026 GMT
Not After : Jul 25 11:00:20 2026 GMT
Subject: CN=33e083349aff1d7b0d423658c25867d3cca882bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:37:3c:0c:23:43:10:95:ca:28:ff:7d:f6:
34:16:59:57:78:79:53:0f:d5:ee:e5:c9:61:26:9a:
38:20:8b:0e:94:e9:a8:e9:82:f0:e5:3d:62:60:81:
8d:bf:48:3c:69:f6:8c:27:ee:e7:93:65:b7:e3:e9:
cc:e4:68:a6:d8:a2:a6:3e:42:54:1c:e0:ce:c0:1a:
c6:07:86:53:50:12:3d:73:76:fc:25:db:ea:11:f1:
a5:18:b0:3f:17:70:07:db:17:2f:e7:a2:4e:c8:7f:
71:a6:7d:28:37:20:49:10:c8:15:d2:aa:2e:96:b3:
12:bd:9d:2a:89:13:9b:76:33:b0:04:49:de:ad:75:
ee:ac:4a:c7:08:c7:85:cf:c4:61:90:e6:05:8a:5f:
f8:7a:5e:fc:c1:34:af:4f:99:f8:e9:e6:7d:d8:e4:
14:9e:04:0e:7c:74:f6:ae:54:de:b1:80:7e:e8:45:
89:93:7c:09:d7:7a:2f:db:6e:ec:a9:4b:d7:b7:42:
88:5d:44:52:80:61:a3:93:a6:07:f5:07:29:e1:4c:
4c:8a:70:1a:b9:5b:20:34:05:42:aa:31:f6:9e:6e:
e9:96:eb:75:15:c0:93:7e:50:d9:4f:f3:48:a6:5f:
d2:26:75:e6:2a:8f:14:7d:38:4d:76:94:95:96:05:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E0:83:34:9A:FF:1D:7B:0D:42:36:58:C2:58:67:D3:CC:A8:82:BC
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6a:b7:52:3c:55:4e:24:08:07:25:d6:53:50:63:33:3a:a5:
aa:cc:6c:91:8c:ca:61:dc:9c:a4:d5:7f:09:be:79:0c:93:a5:
88:6b:55:de:b8:e1:54:d0:46:ba:8b:22:7e:e6:93:c8:0f:75:
33:a2:1d:57:29:ac:f2:e4:0e:8a:77:90:65:0c:99:7c:73:15:
13:71:38:65:38:dc:9e:5d:98:b1:72:dc:92:e9:a9:6b:8b:ab:
56:87:20:42:9d:c8:c8:ed:9b:b0:df:4b:24:02:9c:d2:1f:84:
f6:bc:31:c9:a2:78:81:0a:f1:da:89:69:bd:af:56:7f:93:58:
e9:f7:66:1e:20:c0:f0:a4:ca:c1:6b:58:d4:4d:bb:d1:5e:6d:
3c:eb:c8:f8:ef:92:de:0f:0d:7f:e1:1c:08:6d:26:f6:47:77:
25:6c:ba:48:84:37:19:ae:44:4f:ca:56:95:13:7b:9f:8b:c8:
96:e5:45:d5:6a:36:cd:53:a0:9f:5a:9e:2e:40:70:cb:86:5a:
83:cf:a9:11:6a:7b:aa:18:c8:26:0a:40:26:d6:27:98:be:81:
86:99:0d:ec:56:2d:82:fb:e0:be:9a:58:a9:d0:97:70:84:4b:
6b:52:f7:66:66:13:b0:6b:38:95:3e:72:bc:c9:7e:63:f2:cf:
6e:31:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:35 2026 by rpki-client