Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: R5VMp3EnZtNfNiati6DHJeSjW4BDuqMjQoKvZzlnUpY=
Subject key identifier: 91:CB:EB:46:02:63:BD:2B:09:6E:7A:28:88:35:75:D3:A6:68:2D:D2
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01A0DBE032BB02DBD7C0CD2B0FAFDC8092E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 089E
Signing time: Sat 26 Sep 2026 04:01:38 +0000
Manifest this update: Sat 26 Sep 2026 04:01:38 +0000
Manifest next update: Sun 27 Sep 2026 04:01:38 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: HTlkWT2FFU5MNRk3uZHOLvcGDZWP0NC6JNLECNmDPKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:32:bb:02:db:d7:c0:cd:2b:0f:af:dc:80:92:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Sep 26 04:01:38 2026 GMT
Not After : Sep 27 04:01:38 2026 GMT
Subject: CN=91cbeb460263bd2b096e7a28883575d3a6682dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:1a:fb:38:af:c7:72:f9:ea:ca:f2:91:b6:
1a:2c:18:1d:f9:5c:d5:c9:da:25:09:69:7e:a0:d0:
6a:46:ca:ad:f7:50:56:0e:d5:a3:f1:82:65:07:c3:
a0:21:4a:ce:6c:13:98:10:34:40:5d:66:2d:bf:3c:
fb:fc:f3:74:62:29:fa:0d:f2:55:0e:3b:5f:c8:c3:
16:99:41:46:1d:69:e7:9b:13:30:43:26:ba:f1:94:
c0:e7:06:f0:1a:84:2a:47:a3:e9:27:0b:83:8a:70:
4c:5a:56:a4:d8:52:5b:57:c5:13:6a:3c:72:f9:77:
e7:f3:af:ef:01:87:0d:03:a9:c7:de:8f:12:2f:20:
9b:a3:79:54:c3:f4:24:3d:19:9b:6b:ec:c3:f2:2e:
15:db:26:d9:20:25:c7:c1:1f:c0:a7:24:ad:5a:3c:
d3:10:04:31:c2:b7:e3:a7:c0:2b:57:df:50:f0:07:
6a:c3:6e:47:94:fb:46:a0:e2:da:bc:f6:dc:3c:31:
3c:07:fb:21:5d:7d:f3:ca:22:80:2e:7b:31:bc:a5:
c9:a4:4a:46:82:9e:3a:e6:44:8e:da:a3:37:b0:48:
3f:39:c1:41:2f:af:01:51:da:96:0b:aa:8c:25:46:
e0:b0:dc:b2:eb:76:ef:06:ba:fe:c0:af:61:0a:38:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:EB:46:02:63:BD:2B:09:6E:7A:28:88:35:75:D3:A6:68:2D:D2
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7d:b2:41:81:9e:62:cb:1c:12:03:2e:dc:57:e1:a8:f3:f4:
e5:a6:7a:e4:98:21:29:eb:d8:ca:e9:ef:6c:a9:17:36:6a:d3:
d6:49:86:2b:f6:15:9f:8a:9e:e9:0a:a5:46:f5:db:9f:c8:0c:
c3:47:98:f6:eb:e7:1f:e1:79:1c:15:0f:51:8c:6e:c8:db:b1:
c7:f4:ad:ad:ea:7d:c4:56:6c:ee:10:f9:b4:46:5d:ca:5a:11:
ef:84:d0:5d:1e:03:ae:a5:f4:4a:2e:f8:79:e3:e0:2c:82:37:
2b:41:f5:19:88:82:18:f5:af:0e:25:d9:8d:94:75:8a:85:60:
d4:27:6d:39:fb:63:51:90:20:f4:33:c8:ee:1f:17:49:de:ba:
2a:20:00:09:8a:e9:63:0a:f9:5b:12:69:d2:8f:1e:50:ea:c2:
c6:0f:19:b6:2a:6a:bd:65:da:0b:1f:d7:d1:88:28:a8:c7:67:
8c:ea:6c:84:ee:24:30:70:42:62:c9:ff:2c:c1:b1:cf:8b:5b:
3b:dd:cf:86:10:3c:b5:cf:54:aa:40:c7:b7:5b:b2:8e:6d:46:
d5:47:d0:d3:69:97:e6:5d:6d:50:83:9c:b3:92:49:48:f0:92:
4a:03:f3:8d:f7:d7:9f:97:c0:d6:f6:2c:7a:97:8b:80:38:5b:
c1:21:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:41:45 2026 by rpki-client