Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: RPd8LC6jeohjlousUnCjysJkRtU4UG0i2b5GfGFGRmI=
Subject key identifier: C7:2C:BD:55:3A:A4:18:7D:F7:C1:35:B0:2B:2F:76:53:77:72:B7:9F
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019CA8A0E4FBAD6061247FF6AF8D4660A87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: C7
Signing time: Sun 01 Mar 2026 09:00:42 +0000
Manifest this update: Sun 01 Mar 2026 09:00:42 +0000
Manifest next update: Mon 02 Mar 2026 09:00:42 +0000
Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: yt3dKJFZjTvr+T+L44tnGL7N7xIJVA+AmuCzZPTOZso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:e4:fb:ad:60:61:24:7f:f6:af:8d:46:60:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Mar 1 09:00:42 2026 GMT
Not After : Mar 2 09:00:42 2026 GMT
Subject: CN=c72cbd553aa4187df7c135b02b2f76537772b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:09:2d:87:ba:bb:2a:b5:25:e6:d7:89:19:
05:c4:bf:b0:04:a5:a1:74:d1:7b:93:e9:0c:aa:68:
6a:f4:7a:45:f3:e2:e9:42:47:8e:df:dd:0a:40:0e:
a1:62:d9:97:f7:43:fb:89:43:de:56:19:b5:39:42:
81:6b:0d:3d:39:1a:62:69:22:4f:02:5f:93:46:89:
29:bc:70:2a:0e:ca:e7:26:e9:bc:af:b1:b2:ad:ad:
0b:c5:4c:d3:f2:61:53:89:a9:72:ba:52:59:ed:30:
a8:8f:c8:4c:f6:54:bd:e7:c5:b0:9c:e0:54:3f:e2:
21:85:71:cc:e4:9f:9b:36:64:8f:a7:f2:e2:24:32:
d5:42:64:79:af:1c:ce:2d:df:f3:93:2b:3e:a0:d7:
9e:02:2a:9b:79:3c:45:5e:80:23:63:8d:d8:0f:8c:
6a:9c:aa:2c:55:d1:79:5c:65:27:77:6d:58:33:0c:
33:44:36:25:b2:84:a0:d5:15:0e:cc:61:8f:02:cb:
be:08:04:19:73:c9:6b:e8:47:2a:a2:a1:8b:2d:31:
44:fa:19:ee:f2:b7:01:10:4d:bf:13:f6:00:5f:f7:
a3:3e:75:78:27:43:e6:58:8d:09:59:05:54:04:87:
e8:dd:00:72:b3:a5:1c:22:2e:38:37:29:b1:e7:ee:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:BD:55:3A:A4:18:7D:F7:C1:35:B0:2B:2F:76:53:77:72:B7:9F
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c7:d2:12:7c:a3:84:da:a0:01:8b:e1:f3:fe:df:d5:dd:ee:
82:bf:93:31:fe:d5:2d:4b:04:67:34:97:7c:50:60:07:34:56:
82:93:8e:66:08:99:29:a2:3a:31:9b:ee:ad:73:5e:30:44:25:
5e:98:b4:d5:64:8b:ff:2c:57:ea:1c:4c:71:06:4b:14:36:f9:
6b:91:73:21:1b:3d:4d:02:3d:3e:47:4c:e5:03:c2:87:0c:e3:
b8:62:eb:3f:23:98:0a:9a:8a:79:d2:95:1a:89:f6:16:f9:5f:
db:3e:ec:7b:99:10:93:c7:18:9a:aa:15:11:83:64:f4:96:6e:
b5:be:17:4b:23:94:bf:e5:dc:90:11:cb:f9:c1:dd:c9:e1:b9:
33:e9:a7:25:f2:b0:82:c8:df:09:2c:aa:02:25:c8:94:ff:4b:
2e:41:9d:e6:60:09:18:6d:9b:73:65:41:97:a1:cf:2b:12:4c:
e9:00:eb:4f:bd:ba:44:e1:6f:36:d6:7e:3d:b0:f2:c0:99:96:
a2:20:c0:7a:45:a0:5d:11:ab:be:c5:c6:cc:ce:3d:6f:9b:aa:
d7:8b:aa:2e:e1:1c:3e:c1:18:3e:93:fa:59:0b:fc:3d:1d:31:
aa:8d:f9:55:81:63:08:90:15:4a:5b:9c:f5:6c:f7:1a:11:ad:
e7:53:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:46 2026 by rpki-client