Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: 1UCL+Q+Y+LL9B3Pi/JQWMhT27pD64vZyWqWC/C/aALQ=
Subject key identifier: 5B:BC:BD:64:75:8F:40:2F:26:8E:E6:F7:6B:7F:56:1B:2A:DF:5C:8C
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019CAA8FE9CF498B24B76C197381A3B43FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: C8
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: I0REjSnZiJmGAzAEQH4nwznOSkPCIfLXdTzsu5gzVRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e9:cf:49:8b:24:b7:6c:19:73:81:a3:b4:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=5bbcbd64758f402f268ee6f76b7f561b2adf5c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:e9:58:a6:a1:e1:87:b8:45:97:51:eb:90:
f5:b8:97:3a:61:ae:54:27:46:27:26:61:63:17:8c:
39:46:9b:e8:66:ce:2a:12:bb:5b:11:29:e0:ec:ab:
72:90:81:ce:7a:93:af:23:7d:8f:41:fd:ca:23:2c:
6e:b2:6c:00:50:1d:4c:70:9d:4d:9c:17:7b:20:92:
f9:5c:0a:06:7a:3c:88:2d:3a:ec:93:96:0e:33:ca:
90:d1:11:17:e3:01:27:d3:26:97:9e:5e:a5:09:93:
8c:db:7f:26:6a:53:27:17:ea:c5:40:50:ba:ff:3b:
a1:08:85:22:1b:b4:be:46:a2:a9:0b:ab:bc:0d:61:
c3:24:79:ed:4c:f3:1c:8c:8c:a5:28:19:e8:f6:ed:
a4:e9:71:14:1c:b9:8c:dc:24:3c:9f:1b:d9:16:d0:
04:05:b0:f8:f4:1b:43:3c:b3:54:e4:f7:6e:a5:f0:
94:29:5c:d2:72:64:7c:5d:31:1b:be:50:11:e5:8d:
d6:f8:b8:50:9b:81:49:24:2c:7a:b3:25:76:72:2b:
d7:52:b2:73:8a:16:a5:02:14:31:72:a8:fd:75:05:
a0:a6:92:6a:60:58:65:fe:27:db:c7:31:76:a6:81:
ff:55:e3:0f:b2:03:f1:fd:7c:e1:08:7d:f6:aa:e5:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:BD:64:75:8F:40:2F:26:8E:E6:F7:6B:7F:56:1B:2A:DF:5C:8C
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7c:8f:ab:14:68:5e:a8:7c:8d:02:06:ef:3d:83:4e:fd:2d:
cd:87:22:9b:21:02:3a:2f:41:51:0a:ac:23:ed:06:fd:9c:78:
f2:14:d0:72:fb:28:51:11:82:90:7a:5b:5e:31:93:c0:41:bf:
09:5c:37:d7:d3:c6:fa:b6:19:1f:61:30:18:91:b5:26:20:88:
26:1c:42:83:4c:88:78:cb:35:41:02:ff:d7:40:be:e9:7a:0d:
3c:ad:ad:13:65:bf:ff:17:2c:fe:fd:4d:01:2a:fe:cc:af:29:
3f:57:60:2a:4c:28:69:75:68:c9:38:14:d8:60:8e:b9:4c:d6:
9c:d9:04:36:be:cc:b5:ae:66:d8:9f:4c:bf:99:95:f6:a5:b5:
43:4c:fa:de:bf:05:8e:9f:5d:e3:8a:78:32:31:5c:bf:0e:7e:
08:64:73:10:07:6f:cb:2a:40:69:fc:93:0c:99:1d:45:2a:13:
63:9e:f1:72:87:51:06:47:75:c2:d3:28:08:bf:d6:de:b3:2e:
ac:22:1a:d5:53:48:a4:04:10:03:10:19:ad:d3:fe:f6:9e:19:
ab:9f:24:19:24:6c:b2:5b:d9:f5:4c:e4:c9:ef:55:5a:b6:6c:
ec:4c:1f:97:bc:42:82:0e:0c:94:b8:7c:2b:3c:b7:68:d2:d3:
1a:6f:09:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj+nPSYskt2wZc4GjtD+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4
MDdiZTcwHhcNMjYwMzAxMTgwMTI0WhcNMjYwMzAyMTgwMTI0WjAzMTEwLwYDVQQD
Eyg1YmJjYmQ2NDc1OGY0MDJmMjY4ZWU2Zjc2YjdmNTYxYjJhZGY1YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q3pWKah4Ye4RZdR65D1uJc6Ya5U
J0YnJmFjF4w5RpvoZs4qErtbESng7KtykIHOepOvI32PQf3KIyxusmwAUB1McJ1N
nBd7IJL5XAoGejyILTrsk5YOM8qQ0REX4wEn0yaXnl6lCZOM238malMnF+rFQFC6
/zuhCIUiG7S+RqKpC6u8DWHDJHntTPMcjIylKBno9u2k6XEUHLmM3CQ8nxvZFtAE
BbD49BtDPLNU5PdupfCUKVzScmR8XTEbvlAR5Y3W+LhQm4FJJCx6syV2civXUrJz
ihalAhQxcqj9dQWgppJqYFhl/ifbxzF2poH/VeMPsgPx/XzhCH32quVH6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu8vWR1j0AvJo7m92t/Vhsq31yMMB8GA1UdIwQY
MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt
OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3
LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXyPqxRo
Xqh8jQIG7z2DTv0tzYcimyECOi9BUQqsI+0G/Zx48hTQcvsoURGCkHpbXjGTwEG/
CVw319PG+rYZH2EwGJG1JiCIJhxCg0yIeMs1QQL/10C+6XoNPK2tE2W//xcs/v1N
ASr+zK8pP1dgKkwoaXVoyTgU2GCOuUzWnNkENr7Mta5m2J9Mv5mV9qW1Q0z63r8F
jp9d44p4MjFcvw5+CGRzEAdvyypAafyTDJkdRSoTY57xcodRBkd1wtMoCL/W3rMu
rCIa1VNIpAQQAxAZrdP+9p4Zq58kGSRsslvZ9Uzkye9VWrZs7Ewfl7xCgg4MlLh8
Kzy3aNLTGm8JYg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:46 2026 by rpki-client