Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: rzoUwxYpagdpJ+YpjM6vWHJ/ArzXVvaZQKbbI4BKhVE=
Subject key identifier: 8A:FC:3B:21:A7:69:0E:5E:01:12:E2:B1:B4:98:7E:4C:70:C4:25:05
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019EBF91249CA234910C5DB4051472971778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 01DC
Signing time: Sat 13 Jun 2026 06:00:20 +0000
Manifest this update: Sat 13 Jun 2026 06:00:20 +0000
Manifest next update: Sun 14 Jun 2026 06:00:20 +0000
Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: yh8/yTArJ9K+xPJiacq/nB1FO2SewOIDodyLGhoDoqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:24:9c:a2:34:91:0c:5d:b4:05:14:72:97:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Jun 13 06:00:20 2026 GMT
Not After : Jun 14 06:00:20 2026 GMT
Subject: CN=8afc3b21a7690e5e0112e2b1b4987e4c70c42505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:51:3a:23:a0:6b:9e:c1:28:2a:64:d8:22:
e5:cd:d5:b4:f2:97:fb:71:bf:bb:b8:f6:f4:f5:5f:
fd:cd:37:db:bf:a1:a5:f2:25:e7:0f:82:ab:1c:94:
7f:3e:47:0a:13:78:c9:97:66:86:27:19:6c:85:b8:
c6:55:15:69:46:a5:8f:68:0f:9f:26:6e:30:99:94:
20:ec:24:32:cd:2f:70:27:0a:fb:7b:d1:98:5e:0e:
40:16:91:43:f8:20:4d:37:65:e7:f4:84:75:a5:6a:
9f:bb:aa:7e:16:41:47:21:36:27:92:d0:a2:18:07:
40:a8:f0:71:31:57:39:8a:d3:6b:89:80:d8:73:ba:
3f:25:e0:f6:dd:b4:e5:5a:64:05:23:58:11:2b:7c:
01:f9:19:e8:98:4c:e7:95:8c:b5:b9:45:ed:45:62:
86:d9:49:47:c5:ff:a3:03:f7:81:0a:58:d9:d2:b1:
50:7f:e5:e8:1f:48:f8:ee:bb:86:54:68:78:60:e8:
48:fd:02:0f:ab:78:84:21:31:08:a3:05:d8:6a:0e:
2a:c0:a4:45:c9:c0:b4:0d:65:a6:fe:50:4e:83:88:
56:c2:f7:e1:50:d2:cd:20:23:d2:9e:20:33:2e:87:
ef:5e:60:88:2e:a0:f9:2a:c5:66:49:5b:00:90:e7:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FC:3B:21:A7:69:0E:5E:01:12:E2:B1:B4:98:7E:4C:70:C4:25:05
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:d9:77:e9:10:7a:40:68:72:4b:2f:93:90:fb:a7:4c:06:
76:16:65:f0:de:dd:63:1b:42:db:00:52:11:40:33:6a:fc:78:
26:97:0d:e9:d6:09:25:62:c9:5c:1b:ec:ae:07:dc:02:05:fc:
b2:5b:78:7d:a5:2f:7f:81:6c:ae:89:73:60:a2:37:b2:d7:d8:
7f:9d:92:0f:cb:08:e7:0c:47:de:cc:06:6b:9a:96:2d:38:27:
f9:30:88:54:ec:57:09:de:8a:a8:ea:eb:e7:40:a6:d2:f8:d0:
5d:2c:aa:e0:61:ec:0c:49:3e:dc:e7:5b:c9:44:a5:e0:53:49:
a2:45:71:ef:9a:08:fa:98:08:39:7d:77:17:07:b0:64:ca:54:
d3:8d:aa:07:d0:d6:3c:c6:d7:a3:5c:13:be:2f:23:3b:e8:37:
00:2d:07:0d:07:b1:84:52:87:cf:fc:45:ff:38:16:9d:0c:37:
29:05:ff:95:97:68:52:ac:9a:e9:39:a4:0d:68:c4:f1:d9:f8:
4b:73:3a:07:f4:d6:a3:e9:b9:83:b8:fe:d1:fa:df:d4:65:58:
0b:5b:28:a7:2d:8f:06:a3:55:39:9e:99:2c:ae:e9:47:c0:fa:
60:e7:2e:98:de:49:a0:f6:3f:88:81:7d:10:09:e9:17:4a:90:
77:27:e7:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kSScojSRDF20BRRylxd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4
MDdiZTcwHhcNMjYwNjEzMDYwMDIwWhcNMjYwNjE0MDYwMDIwWjAzMTEwLwYDVQQD
Eyg4YWZjM2IyMWE3NjkwZTVlMDExMmUyYjFiNDk4N2U0YzcwYzQyNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJROiOga57BKCpk2CLlzdW08pf7
cb+7uPb09V/9zTfbv6Gl8iXnD4KrHJR/PkcKE3jJl2aGJxlshbjGVRVpRqWPaA+f
Jm4wmZQg7CQyzS9wJwr7e9GYXg5AFpFD+CBNN2Xn9IR1pWqfu6p+FkFHITYnktCi
GAdAqPBxMVc5itNriYDYc7o/JeD23bTlWmQFI1gRK3wB+RnomEznlYy1uUXtRWKG
2UlHxf+jA/eBCljZ0rFQf+XoH0j47ruGVGh4YOhI/QIPq3iEITEIowXYag4qwKRF
ycC0DWWm/lBOg4hWwvfhUNLNICPSniAzLofvXmCILqD5KsVmSVsAkOc5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr8OyGnaQ5eARLisbSYfkxwxCUFMB8GA1UdIwQY
MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt
OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3
LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxzZd+kQ
ekBocksvk5D7p0wGdhZl8N7dYxtC2wBSEUAzavx4JpcN6dYJJWLJXBvsrgfcAgX8
slt4faUvf4FsrolzYKI3stfYf52SD8sI5wxH3swGa5qWLTgn+TCIVOxXCd6KqOrr
50Cm0vjQXSyq4GHsDEk+3OdbyUSl4FNJokVx75oI+pgIOX13FwewZMpU042qB9DW
PMbXo1wTvi8jO+g3AC0HDQexhFKHz/xF/zgWnQw3KQX/lZdoUqya6TmkDWjE8dn4
S3M6B/TWo+m5g7j+0frf1GVYC1sopy2PBqNVOZ6ZLK7pR8D6YOcumN5JoPY/iIF9
EAnpF0qQdyfn6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:26 2026 by rpki-client