Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: qxGfBuxZEkTRS2Z7L8Vbm51xb4PwOZgvEhymWkwZwmA=
Subject key identifier: 2E:A7:59:FC:6B:31:FB:73:4B:CB:46:5F:CD:FE:74:69:B8:05:CD:34
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019E20FFBCD6A92CD6A7A9E9135A5C215121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 1017
Signing time: Wed 13 May 2026 11:01:31 +0000
Manifest this update: Wed 13 May 2026 11:01:31 +0000
Manifest next update: Thu 14 May 2026 11:01:31 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: Roq9hSigGc1PtFDwu2iNMJCFD+arsd4heRBf6m0hIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:bc:d6:a9:2c:d6:a7:a9:e9:13:5a:5c:21:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: May 13 11:01:31 2026 GMT
Not After : May 14 11:01:31 2026 GMT
Subject: CN=2ea759fc6b31fb734bcb465fcdfe7469b805cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:44:e1:ac:dc:4d:79:3f:2b:e0:94:03:a9:
45:68:d6:e2:b7:cd:10:da:58:23:55:84:69:e3:3e:
01:ab:7f:6a:e0:14:79:67:d3:f5:77:be:c6:ba:42:
58:18:fe:2a:96:cf:96:a4:67:d6:65:dd:44:8e:3a:
e0:c6:40:b5:24:12:bc:ed:d6:df:05:b8:c2:01:04:
69:34:78:21:78:29:2f:26:59:24:a0:00:3b:d7:83:
1e:d6:d4:30:71:56:d4:28:0b:e8:f9:e1:1e:1f:1d:
0a:1d:7d:61:28:0c:eb:58:75:ad:e4:2d:c1:17:b1:
b3:82:c7:2b:38:eb:f1:61:fb:0d:70:92:3e:d4:45:
c5:0a:bd:07:fb:ac:1a:58:92:2f:e7:61:c1:19:43:
56:39:e7:54:b9:30:43:95:f9:f9:73:f8:5b:b7:9a:
41:16:03:94:ef:26:10:6a:1e:bf:db:4e:31:2f:0d:
61:3e:93:66:85:1a:fe:34:19:85:eb:64:93:42:ac:
1d:06:ba:0e:53:18:0d:6b:8a:65:c2:4d:27:0f:74:
2d:37:8f:68:c8:72:0e:ac:04:47:f8:54:be:d2:3f:
22:bb:85:34:3f:5c:90:65:52:fb:c9:81:2f:d7:91:
b7:63:33:cb:91:6d:20:e8:30:ef:d6:18:23:88:41:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:59:FC:6B:31:FB:73:4B:CB:46:5F:CD:FE:74:69:B8:05:CD:34
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:41:17:ae:62:31:19:25:aa:c3:a0:56:33:2f:d6:df:39:
58:c8:bc:87:41:36:d4:3d:72:5c:77:72:8a:9a:87:2c:3b:3c:
5f:fc:18:a8:07:12:4f:2d:68:2d:7b:d9:1f:ea:5f:c0:c1:55:
8f:76:c3:69:39:23:ee:af:8c:0f:4d:04:a7:b7:75:be:7c:15:
8a:a7:7c:7b:b4:40:23:0d:30:5c:75:0f:aa:ac:c1:69:3d:bb:
51:de:d6:8b:59:18:33:c9:b1:5e:4c:9c:41:8d:c7:b8:fd:9c:
df:11:7d:f3:ab:a7:c4:89:0a:c1:36:0b:3c:21:56:e2:16:78:
a4:2e:37:57:02:e0:dd:85:56:6f:d9:b2:74:88:fc:51:e9:33:
9e:0e:a1:d7:1d:b3:d9:c9:99:d2:d4:43:e4:ac:08:4f:f0:04:
13:c3:c0:c2:dc:34:12:55:7d:19:58:83:a2:eb:14:85:77:a4:
19:07:62:fd:7e:44:06:b0:a6:bc:4d:70:a1:99:ba:06:41:a8:
19:1c:66:b5:ae:58:73:7c:b5:b7:17:d7:c1:28:d0:72:81:ff:
9c:e1:4c:11:a7:88:42:d4:3a:55:ce:ce:db:01:57:c1:33:55:
6a:cd:07:f5:a5:8d:6f:77:ce:66:44:fb:fb:d9:34:c4:5d:55:
e6:92:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:38 2026 by rpki-client