Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: ZtWKbUJhP05T6mauaPtia1e9kyJpbLr9fUgzdqlW2ZY=
Subject key identifier: 79:6E:32:CB:F8:AB:60:EE:AE:A2:A9:3E:40:31:26:FF:A7:81:DE:C4
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019D9DE3BBBD7EA5D5FCA78754644D0E7CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 0146
Signing time: Sat 18 Apr 2026 00:00:40 +0000
Manifest this update: Sat 18 Apr 2026 00:00:40 +0000
Manifest next update: Sun 19 Apr 2026 00:00:40 +0000
Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: J7YNa9SOvJ9KW5mTovrtZzS2FHKnGzM1gE4mIDjm/Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:bb:bd:7e:a5:d5:fc:a7:87:54:64:4d:0e:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Apr 18 00:00:40 2026 GMT
Not After : Apr 19 00:00:40 2026 GMT
Subject: CN=796e32cbf8ab60eeaea2a93e403126ffa781dec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:e4:d3:e5:c1:cd:ad:95:9f:8d:db:8c:b2:
24:a2:7e:8d:7f:d3:06:12:13:00:0d:16:06:ae:49:
56:97:7b:d1:3d:f1:80:ce:f0:1b:c6:5d:8b:d9:6c:
73:00:3b:75:24:5d:00:82:15:a9:ab:cb:96:7b:5d:
ce:f6:1f:63:ec:80:7f:70:ee:5e:a0:82:d0:29:15:
18:c7:9f:13:27:45:a4:54:32:95:ef:e1:7d:48:39:
18:ed:14:09:8c:11:fc:b0:6c:a5:46:73:be:b4:6e:
63:7e:91:25:24:45:ad:ec:3f:b7:f1:c0:76:e9:be:
1c:74:e0:e8:1a:c5:2b:b1:c4:c8:5b:7d:d8:c8:b4:
66:44:bd:6e:4f:4e:25:a7:30:b2:a9:65:99:c4:a9:
b4:f7:60:db:ac:f3:04:52:f6:61:61:e3:ea:35:1a:
d6:be:49:f9:f9:8a:e3:eb:1c:d0:87:69:13:eb:51:
2b:d7:30:c1:d2:e9:78:ad:8b:a2:78:af:b0:97:bb:
3b:12:59:8c:06:19:fa:57:fb:93:a3:a0:49:64:26:
a1:f9:6f:40:79:24:5c:ba:5e:17:2d:4e:e9:7d:f3:
10:e4:82:71:f7:14:2a:e8:3c:12:81:c2:8c:23:48:
d8:63:e8:4f:0e:6c:eb:a8:7a:d2:85:c6:c1:71:07:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:32:CB:F8:AB:60:EE:AE:A2:A9:3E:40:31:26:FF:A7:81:DE:C4
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ad:08:ed:ff:ee:cc:62:ef:72:84:8a:48:5e:55:17:84:60:
ce:24:0b:d1:a6:39:da:e3:0d:b4:78:da:3b:9c:1c:5a:24:b4:
21:a3:19:ce:27:6d:19:a2:ed:14:6b:a0:6d:24:7f:cf:9e:5e:
e3:14:7c:4d:24:9c:f8:47:09:30:0c:07:d1:d0:f7:0f:13:89:
df:be:cd:14:e4:02:cd:7b:a1:b6:65:e0:ff:dc:b6:b7:20:99:
cf:78:fc:b9:a6:68:5b:36:52:cd:4b:57:ec:4e:85:76:96:58:
11:75:9c:47:de:53:61:57:b0:2b:53:e6:8e:b4:b3:d6:09:c0:
54:65:20:b0:21:4f:6e:19:41:7f:44:7c:e0:1b:b6:53:ac:a9:
72:34:39:38:e2:07:29:05:23:e6:08:41:8a:56:07:b1:90:47:
1e:99:1c:98:d9:0e:21:85:b7:0f:db:90:13:93:30:4b:e1:85:
f2:91:2a:56:07:fe:bd:7e:b7:9d:85:61:83:92:18:41:3a:fd:
d5:47:a3:c1:8b:ad:84:22:1d:af:c7:18:eb:d9:17:9d:85:51:
c0:0e:f9:4f:7a:5c:4d:5c:86:bd:0d:fd:a6:a6:54:6b:0e:53:
cf:92:dc:eb:18:57:91:fa:3a:b0:1e:c8:8b:6a:8c:7e:d2:2c:
62:33:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:45 2026 by rpki-client