Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: 0Z0l0ZWwy7wsCttoAwVUog3gxEBTV91RXR3CwsHzTwM=
Subject key identifier: 9A:55:B1:48:93:15:55:3E:F7:4D:2E:80:81:16:24:8A:B1:97:91:DA
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019D25F188944E5FC8C72C53B3B1DAD0B8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0F95
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: jVj5YZoBHjPh5nwfRQprPy+UM3Xp95+YpRHbsPmO1OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:88:94:4e:5f:c8:c7:2c:53:b3:b1:da:d0:b8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=9a55b1489315553ef74d2e808116248ab19791da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:cb:6c:4f:61:97:73:47:d9:2b:fd:3a:3e:
ed:b9:75:39:02:c0:04:75:51:a9:6b:fe:50:03:24:
91:71:8e:5e:d4:ac:68:50:62:11:b7:d0:f0:67:30:
d8:6c:30:54:b6:a9:56:f7:13:54:ab:f7:4a:72:65:
57:b9:df:b5:a7:64:ae:a7:9e:6a:3d:ad:88:05:de:
6d:81:fc:1a:b9:8e:52:a2:09:a6:a3:9b:d0:69:38:
7a:38:eb:ec:bb:06:26:d0:4f:f4:e9:14:26:c7:62:
91:98:8f:cb:0d:40:81:54:c0:cc:36:a1:05:7d:39:
a6:e4:64:a6:0b:44:71:14:81:ba:c9:4e:f6:d6:14:
89:ca:e4:e4:68:97:a3:53:46:6e:e3:f3:4a:45:d1:
b5:9b:6b:d5:76:8e:3c:fb:2e:41:43:65:3c:d1:19:
0c:9b:9f:7e:db:02:d8:7f:ea:3d:e1:78:41:b4:1d:
2d:56:2f:74:33:8d:21:1e:dc:f6:64:fe:1b:3b:f8:
c1:b6:1f:fc:ea:0b:11:f0:01:d3:cb:9c:32:e8:81:
65:51:d7:39:f6:d4:e9:03:06:68:d1:d0:97:19:b1:
d3:77:8d:27:fb:10:8b:7c:89:d4:32:6d:1d:c9:da:
5b:95:61:34:69:b2:4d:bb:97:d1:54:3d:1c:34:0f:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:B1:48:93:15:55:3E:F7:4D:2E:80:81:16:24:8A:B1:97:91:DA
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:29:69:bc:f2:5e:39:b5:ec:13:48:3a:0d:59:34:4d:2e:6f:
a4:95:ee:32:e8:c1:4c:af:0b:13:c4:1b:32:9b:3d:91:f0:a0:
7b:6e:e3:19:47:7a:12:a5:2b:50:98:3b:b9:38:c8:87:b7:3e:
a8:5f:b8:b7:1e:c1:d1:39:67:39:76:d5:2a:2d:e1:2d:fb:d4:
8d:ad:34:48:0a:c2:26:da:94:a4:81:04:43:ed:43:de:94:7b:
49:3b:8c:cd:04:6e:b4:d2:a5:c6:1b:98:d7:a7:2d:36:68:f7:
62:b1:fe:52:de:7b:64:4b:86:c5:00:53:e3:a4:8e:18:1b:49:
16:b8:5c:fa:f8:e9:3f:f6:9d:26:44:22:01:d2:11:1a:7f:e1:
3a:ee:4b:ab:1e:8f:08:2a:c8:b9:fa:7b:13:73:89:5a:6a:48:
d5:0e:58:c9:4e:5a:5b:09:78:c4:68:92:8d:bc:5e:ff:cb:2b:
19:6e:4e:19:d5:de:26:4b:03:58:55:57:35:55:5a:30:60:d4:
c4:4f:d5:84:55:a0:cf:2f:d0:f6:6b:f7:83:c2:c0:fc:1c:38:
48:a0:be:3d:80:df:f2:cf:94:ab:e4:af:71:66:b5:6b:7f:d5:
d9:31:85:47:b8:dd:7a:c5:30:02:b8:84:79:ff:4a:db:44:b8:
01:8a:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:43 2026 by rpki-client