Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 8ttISjGXrc3wC92tPBP/uJ2iPtO9JN1PnLdBmeuUgE4=
Subject key identifier: C4:2D:9E:6A:77:37:8F:5A:EA:5E:FE:0E:20:C3:32:4B:B8:4D:24:36
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 019F91A397A014BB17CE313F94685FD540EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 07F3
Signing time: Fri 24 Jul 2026 01:00:45 +0000
Manifest this update: Fri 24 Jul 2026 01:00:45 +0000
Manifest next update: Sat 25 Jul 2026 01:00:45 +0000
Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: 6tAQ/iZKSiJ+fIg/z/AlKG67yigH1DzPzMmvy+PSqm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:97:a0:14:bb:17:ce:31:3f:94:68:5f:d5:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jul 24 01:00:45 2026 GMT
Not After : Jul 25 01:00:45 2026 GMT
Subject: CN=c42d9e6a77378f5aea5efe0e20c3324bb84d2436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:05:ba:6a:df:ae:6b:46:77:2c:bc:3c:a8:
23:87:77:2d:36:0e:95:67:5e:64:ae:d3:56:b7:13:
8e:4b:d7:ea:cb:0c:40:aa:d4:d4:e5:10:66:b4:d4:
64:e9:6b:ad:38:e5:26:ba:77:de:cb:c8:b3:ea:5c:
31:f9:5f:ed:ac:b0:ce:f0:58:d5:e0:ae:d5:1d:36:
52:2f:5c:4e:72:0e:74:2f:f8:2d:75:95:ad:bf:6b:
92:1f:e6:13:7e:e6:83:4a:1d:3a:33:b4:73:d4:43:
cd:d3:2d:2f:d8:10:06:19:71:ef:73:2e:f9:a9:90:
c1:33:d9:f7:09:71:86:bc:ab:84:43:1c:56:cf:e3:
c7:d7:85:73:67:ad:e4:62:7f:0b:a0:0b:c2:10:d1:
56:36:ce:89:e4:03:4a:d5:ba:63:ba:d2:04:77:6a:
e6:7f:bb:2d:2c:07:75:08:de:4a:97:01:a3:2d:8b:
37:6b:cc:1e:0f:d5:0c:f9:3d:fa:2b:15:7c:8e:e8:
55:56:0a:92:13:f6:2f:c7:b7:f4:9a:df:e1:f4:b2:
11:3f:dc:8b:ec:d4:20:93:8c:1e:78:1f:8b:86:6b:
99:e6:08:b8:e9:c7:eb:1e:93:ee:b1:00:8b:4b:20:
fe:af:4c:03:6c:5d:61:87:0b:42:15:e5:47:34:24:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:9E:6A:77:37:8F:5A:EA:5E:FE:0E:20:C3:32:4B:B8:4D:24:36
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1d:be:e5:85:e5:b6:2a:07:50:0e:33:5a:26:2b:7a:3d:cb:
3f:23:6d:6c:8a:db:02:e9:8b:26:fa:c7:93:31:88:3d:d6:1e:
3e:28:1b:7d:55:2f:6a:1c:b7:7a:b7:ee:60:a8:55:82:6a:2f:
6b:73:b2:52:a8:92:32:6c:dc:56:83:f5:cf:32:c3:3e:f9:4f:
75:42:91:e2:ac:02:ec:60:44:ac:68:c0:2e:2a:7e:e0:ea:37:
4d:06:dd:ba:21:be:b8:b3:6b:81:c2:b7:83:5b:83:71:81:95:
7e:9d:fe:3c:27:ee:54:07:36:31:25:f3:b7:4d:6e:cd:7d:2a:
12:ce:3f:3a:96:98:2e:dd:fc:9b:17:e5:13:86:21:5d:50:3b:
47:15:a1:c9:e2:5e:1c:ec:54:61:03:76:83:1c:16:84:87:32:
a7:3c:73:ec:47:30:e1:1b:5c:f5:10:b3:ac:ad:c1:b5:0e:b5:
7c:b3:31:c4:42:22:78:45:98:64:aa:50:bd:83:55:14:02:d1:
9e:05:b5:0f:23:8b:33:69:b7:17:3c:bc:1a:5c:31:1e:18:74:
b7:b8:23:e6:fe:71:82:63:47:5d:10:9f:45:ac:a3:5b:04:58:
b4:e9:48:4a:5a:49:1b:ef:5f:c9:a3:d8:e8:68:f4:14:94:12:
2f:4d:dc:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro5egFLsXzjE/lGhf1UDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm
YWVjN2YwHhcNMjYwNzI0MDEwMDQ1WhcNMjYwNzI1MDEwMDQ1WjAzMTEwLwYDVQQD
EyhjNDJkOWU2YTc3Mzc4ZjVhZWE1ZWZlMGUyMGMzMzI0YmI4NGQyNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveoFumrfrmtGdyy8PKgjh3ctNg6V
Z15krtNWtxOOS9fqywxAqtTU5RBmtNRk6WutOOUmunfey8iz6lwx+V/trLDO8FjV
4K7VHTZSL1xOcg50L/gtdZWtv2uSH+YTfuaDSh06M7Rz1EPN0y0v2BAGGXHvcy75
qZDBM9n3CXGGvKuEQxxWz+PH14VzZ63kYn8LoAvCENFWNs6J5ANK1bpjutIEd2rm
f7stLAd1CN5KlwGjLYs3a8weD9UM+T36KxV8juhVVgqSE/Yvx7f0mt/h9LIRP9yL
7NQgk4weeB+LhmuZ5gi46cfrHpPusQCLSyD+r0wDbF1hhwtCFeVHNCRyfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQtnmp3N49a6l7+DiDDMku4TSQ2MB8GA1UdIwQY
MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt
ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj
LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB2+5YXl
tioHUA4zWiYrej3LPyNtbIrbAumLJvrHkzGIPdYePigbfVUvahy3erfuYKhVgmov
a3OyUqiSMmzcVoP1zzLDPvlPdUKR4qwC7GBErGjALip+4Oo3TQbduiG+uLNrgcK3
g1uDcYGVfp3+PCfuVAc2MSXzt01uzX0qEs4/OpaYLt38mxflE4YhXVA7RxWhyeJe
HOxUYQN2gxwWhIcypzxz7Ecw4Rtc9RCzrK3BtQ61fLMxxEIieEWYZKpQvYNVFALR
ngW1DyOLM2m3Fzy8GlwxHhh0t7gj5v5xgmNHXRCfRayjWwRYtOlISlpJG+9fyaPY
6Gj0FJQSL03cvQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:27 2026 by rpki-client