Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: B4ViN0O6qmWszenpgn1kGuY5iPEvcIMifMyFxgkKVNA=
Subject key identifier: 2B:96:7F:24:78:DF:AC:40:4A:8C:62:94:9E:C0:DD:F7:07:52:87:BD
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019D27A8F230684D39BDC84BFAF833A64BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 06B3
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: FRkQ33m8/Y717y0UhQGWTQ4u4ilXaP3uM/1r4/tkWU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f2:30:68:4d:39:bd:c8:4b:fa:f8:33:a6:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=2b967f2478dfac404a8c62949ec0ddf7075287bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:20:a4:d3:55:82:29:40:21:f7:e8:55:4d:
5b:39:cc:7d:7b:10:95:34:72:c2:88:58:fd:fc:47:
e8:f1:60:60:85:51:07:6a:cb:da:8d:64:54:9d:52:
2f:9a:a8:39:b9:3a:fb:0a:ac:64:45:43:41:1e:1f:
84:07:85:6f:ce:e2:39:f1:a8:78:1c:b9:54:64:4f:
3f:ca:e0:9e:95:63:fd:0f:8e:8d:5a:f5:b6:ce:c8:
d7:66:7d:a0:19:fc:10:b9:2b:ad:e5:b3:74:99:5a:
11:4e:fc:38:11:e0:87:1f:f7:50:26:4a:ee:6c:98:
c0:b2:15:e9:94:16:7f:64:8a:39:c2:6b:40:09:42:
9d:4a:77:2a:16:d7:c2:96:da:b0:18:eb:b8:18:0b:
a2:fb:74:b1:74:fe:94:37:ec:e8:d2:cb:84:ca:f8:
9e:e2:5d:f4:d7:51:a4:4b:45:e0:f2:5e:3c:33:4f:
7f:7b:cc:2d:07:d1:06:3f:28:05:ba:e0:63:24:e5:
b0:af:36:27:62:4e:62:7e:af:3d:8b:29:3b:cf:21:
6b:91:00:74:89:fb:32:75:26:ed:07:40:60:1d:21:
59:34:58:7e:65:6e:41:78:e4:12:b1:75:cc:51:22:
66:6a:c9:24:1c:55:b8:95:e4:f1:11:8f:42:31:f8:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:7F:24:78:DF:AC:40:4A:8C:62:94:9E:C0:DD:F7:07:52:87:BD
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6e:19:21:46:1a:3e:ad:62:b7:57:5b:6f:98:3b:b8:40:f7:
75:e3:d2:ee:10:53:4e:79:fd:a2:dd:a6:33:c0:92:44:ed:62:
f6:b6:b4:b6:d0:b0:cb:07:f0:52:f7:35:3d:cf:10:80:91:4e:
79:63:10:d4:67:84:c3:2b:b4:34:03:64:40:4a:72:33:58:f4:
d1:99:e2:71:04:eb:5b:7b:dc:f1:27:7f:c2:51:27:01:47:ad:
af:e1:29:d6:b6:0e:86:ce:61:56:7e:58:ee:0a:23:7b:f0:37:
54:cf:10:a9:01:38:d3:09:df:d2:a4:fb:fa:e5:8b:65:97:0b:
53:ef:27:6d:6d:d6:52:35:ce:fe:5c:88:77:9a:f8:9f:e0:d4:
66:97:db:03:40:29:f1:50:72:d8:a8:0b:0a:7b:03:a1:cf:ad:
c9:04:ab:a4:8b:6c:fa:fd:59:87:81:b0:0c:d1:ea:32:89:fe:
27:eb:5c:91:47:40:c7:db:bc:75:ca:7f:b2:f8:bc:71:4f:df:
99:2e:ab:d5:0f:12:c6:c7:7a:47:ef:94:c8:15:73:6c:df:f8:
89:92:65:d5:2c:5c:21:09:9a:e5:4e:ae:db:6f:44:dd:80:f3:
f6:dd:3b:60:b0:6e:d4:f4:26:a0:9e:9b:4e:4e:eb:7f:be:b2:
7a:74:94:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPIwaE05vchL+vgzpku/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm
YWVjN2YwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
EygyYjk2N2YyNDc4ZGZhYzQwNGE4YzYyOTQ5ZWMwZGRmNzA3NTI4N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1EgpNNVgilAIffoVU1bOcx9exCV
NHLCiFj9/Efo8WBghVEHasvajWRUnVIvmqg5uTr7CqxkRUNBHh+EB4VvzuI58ah4
HLlUZE8/yuCelWP9D46NWvW2zsjXZn2gGfwQuSut5bN0mVoRTvw4EeCHH/dQJkru
bJjAshXplBZ/ZIo5wmtACUKdSncqFtfCltqwGOu4GAui+3SxdP6UN+zo0suEyvie
4l3011GkS0Xg8l48M09/e8wtB9EGPygFuuBjJOWwrzYnYk5ifq89iyk7zyFrkQB0
ifsydSbtB0BgHSFZNFh+ZW5BeOQSsXXMUSJmaskkHFW4leTxEY9CMfi1yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuWfyR436xASoxilJ7A3fcHUoe9MB8GA1UdIwQY
MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt
ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj
LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG4ZIUYa
Pq1it1dbb5g7uED3dePS7hBTTnn9ot2mM8CSRO1i9ra0ttCwywfwUvc1Pc8QgJFO
eWMQ1GeEwyu0NANkQEpyM1j00ZnicQTrW3vc8Sd/wlEnAUetr+Ep1rYOhs5hVn5Y
7goje/A3VM8QqQE40wnf0qT7+uWLZZcLU+8nbW3WUjXO/lyId5r4n+DUZpfbA0Ap
8VBy2KgLCnsDoc+tyQSrpIts+v1Zh4GwDNHqMon+J+tckUdAx9u8dcp/svi8cU/f
mS6r1Q8Sxsd6R++UyBVzbN/4iZJl1SxcIQma5U6u229E3YDz9t07YLBu1PQmoJ6b
Tk7rf76yenSUNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:27 2026 by rpki-client