Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 11/Li1SB5+0cEpmX4xxxHUglRznUcc/6PcWCLpoU/B8=
Subject key identifier: 6B:CF:A3:10:96:66:1B:80:23:C4:35:BC:30:A8:5A:73:09:FA:A0:23
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019E1ED9BED8661604EE506B0B155D07DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0733
Signing time: Wed 13 May 2026 01:00:47 +0000
Manifest this update: Wed 13 May 2026 01:00:47 +0000
Manifest next update: Thu 14 May 2026 01:00:47 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: 3bh1a/zR3rOlucsPGx9jFwUa4HJ4rGo/G8OcAxPdE7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:be:d8:66:16:04:ee:50:6b:0b:15:5d:07:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: May 13 01:00:47 2026 GMT
Not After : May 14 01:00:47 2026 GMT
Subject: CN=6bcfa31096661b8023c435bc30a85a7309faa023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:97:e8:e3:06:0b:dd:41:f9:a0:b7:b5:ee:
3e:0c:3d:e3:b6:9a:44:dd:18:d7:fc:b4:8d:02:98:
07:93:80:40:1d:a8:4f:0a:14:ba:3f:f8:5a:a5:8c:
d0:b1:6f:37:e2:83:1f:82:16:c1:1b:fb:b5:a0:60:
39:1f:3c:fe:85:4e:cc:48:1e:17:8f:55:34:73:fe:
62:a1:f7:f0:32:da:53:54:de:de:10:e7:c7:71:cc:
5d:ec:df:19:fd:96:68:9a:51:5a:b5:33:60:fe:5e:
2e:ad:09:62:37:9c:a2:3c:f1:9b:eb:93:36:b9:c3:
94:68:3d:40:23:66:9f:07:19:91:91:1d:7c:23:5f:
07:87:0d:95:f4:6c:72:88:d3:b5:72:b5:f1:99:35:
9a:4a:af:03:23:1a:70:d0:4e:36:45:53:18:3d:12:
e7:b9:74:10:f1:12:4b:e7:43:06:b3:3e:d9:7e:5a:
f3:4e:4f:68:45:82:f7:e9:dd:fa:d7:e0:72:99:6b:
09:9c:44:56:43:07:bb:4a:d4:62:bb:aa:17:3c:b7:
44:50:27:7e:d7:6a:c4:b8:f2:5d:10:3d:c0:5a:26:
16:35:3a:fa:80:e7:a7:00:e9:42:63:1a:66:68:ac:
3d:b7:00:48:04:f4:f5:a0:3e:5e:be:fd:a5:bc:e5:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:A3:10:96:66:1B:80:23:C4:35:BC:30:A8:5A:73:09:FA:A0:23
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:56:12:12:d1:14:3d:b3:8d:59:ff:6e:70:15:3b:bc:af:
8d:26:fe:7a:b3:fa:bd:ee:48:e6:47:17:36:9e:a8:6e:33:06:
0f:7e:ee:42:e5:f5:d3:5c:e1:ba:7d:be:5a:aa:f8:9a:24:49:
af:ee:21:a1:1e:9b:eb:59:1e:85:e7:91:10:76:b2:aa:5f:00:
80:42:72:1a:14:79:05:cc:5b:eb:e1:72:62:27:42:55:31:a7:
4b:e8:4b:54:f0:1a:12:0c:fe:9a:ef:05:0c:20:54:aa:d9:88:
cb:f5:e4:71:93:84:3d:ed:e5:89:28:d1:83:ff:93:ac:9b:e6:
f0:c8:52:e3:bb:7f:6d:a1:73:f8:fd:0b:c7:f0:d0:e2:96:36:
59:9c:db:09:2e:12:64:b0:b0:38:92:e9:8f:b6:39:72:00:3a:
c1:cd:a8:4a:06:de:ca:32:7e:66:3f:fb:9f:26:00:d3:db:d0:
26:05:85:17:cd:44:ad:12:df:1c:70:e5:72:57:63:58:a7:65:
8d:78:a9:db:b1:2a:03:28:f5:37:bc:90:ca:be:63:6c:5c:ec:
e2:db:68:b8:de:75:34:72:1b:ae:09:b4:68:0e:e2:5e:fd:bb:
7c:e2:91:78:18:09:3d:a1:ac:f4:36:c5:a8:4a:bd:06:0a:a2:
c4:f8:74:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2b7YZhYE7lBrCxVdB98lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm
YWVjN2YwHhcNMjYwNTEzMDEwMDQ3WhcNMjYwNTE0MDEwMDQ3WjAzMTEwLwYDVQQD
Eyg2YmNmYTMxMDk2NjYxYjgwMjNjNDM1YmMzMGE4NWE3MzA5ZmFhMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfaX6OMGC91B+aC3te4+DD3jtppE
3RjX/LSNApgHk4BAHahPChS6P/hapYzQsW834oMfghbBG/u1oGA5Hzz+hU7MSB4X
j1U0c/5ioffwMtpTVN7eEOfHccxd7N8Z/ZZomlFatTNg/l4urQliN5yiPPGb65M2
ucOUaD1AI2afBxmRkR18I18Hhw2V9GxyiNO1crXxmTWaSq8DIxpw0E42RVMYPRLn
uXQQ8RJL50MGsz7ZflrzTk9oRYL36d361+BymWsJnERWQwe7StRiu6oXPLdEUCd+
12rEuPJdED3AWiYWNTr6gOenAOlCYxpmaKw9twBIBPT1oD5evv2lvOVFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvPoxCWZhuAI8Q1vDCoWnMJ+qAjMB8GA1UdIwQY
MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt
ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj
LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG91WEhLR
FD2zjVn/bnAVO7yvjSb+erP6ve5I5kcXNp6objMGD37uQuX101zhun2+Wqr4miRJ
r+4hoR6b61keheeREHayql8AgEJyGhR5Bcxb6+FyYidCVTGnS+hLVPAaEgz+mu8F
DCBUqtmIy/XkcZOEPe3liSjRg/+TrJvm8MhS47t/baFz+P0Lx/DQ4pY2WZzbCS4S
ZLCwOJLpj7Y5cgA6wc2oSgbeyjJ+Zj/7nyYA09vQJgWFF81ErRLfHHDlcldjWKdl
jXip27EqAyj1N7yQyr5jbFzs4ttouN51NHIbrgm0aA7iXv27fOKReBgJPaGs9DbF
qEq9BgqixPh0aQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:21:21 2026 by rpki-client