Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: GpYFs4cvViOoow3HMXtc1V1orwIzu0gU9Iv3yFT+k6k=
Subject key identifier: 73:89:DF:E6:3B:F5:64:08:94:25:08:C0:96:A4:2A:86:E4:60:9F:E5
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 01A0C1B155D765437A024E45103FB443718C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 02E7
Signing time: Mon 21 Sep 2026 02:00:19 +0000
Manifest this update: Mon 21 Sep 2026 02:00:19 +0000
Manifest next update: Tue 22 Sep 2026 02:00:19 +0000
Files and hashes: 1: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: 3nbvAD+lcNX40fOBc3ZRTfBio0hXdvtreOZKmhD6S+E=)
2: cIR14ZPXsA0HmQMTw9YNMMBAeRs.asa (hash: O/reBmezMF7kq6Up//CTG1eVLWtKnHodnkm/BbGZrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:55:d7:65:43:7a:02:4e:45:10:3f:b4:43:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Sep 21 02:00:19 2026 GMT
Not After : Sep 22 02:00:19 2026 GMT
Subject: CN=7389dfe63bf56408942508c096a42a86e4609fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:66:b9:07:11:f1:7d:ae:2b:86:57:73:2e:
07:b4:6e:f6:49:88:71:ae:58:27:78:79:14:8d:41:
b6:28:84:ab:49:8d:cc:49:95:1f:12:a1:ad:11:81:
91:a5:ce:6f:6b:3a:1a:03:79:37:73:bd:8a:f3:0e:
7f:48:47:6d:bb:f8:cb:de:3e:94:f4:77:50:4f:ef:
1e:30:37:6c:14:2f:eb:f3:22:b8:59:4b:3f:a0:a5:
6a:09:0d:a7:38:78:ca:a5:cf:cd:48:66:a0:e3:f4:
57:70:3d:f6:f1:23:e7:bc:ce:65:0b:8e:eb:b8:7d:
a4:c7:ac:9b:5f:48:0c:3a:65:1e:5c:41:e3:98:b4:
e1:96:dc:a3:92:74:25:c9:a2:77:9c:2e:86:a0:82:
d0:cb:fc:c6:e2:0a:f6:69:28:d4:52:bc:10:10:75:
e5:74:bb:e6:1b:36:10:cc:1f:6a:68:2d:b0:88:09:
dd:87:68:bd:92:f0:2c:93:3a:e4:15:a7:7e:87:19:
5d:f5:01:62:c2:7a:45:3a:5f:91:97:68:74:ec:ec:
cd:1e:df:1e:2d:08:9b:87:78:bc:80:28:fe:03:3f:
7f:db:ca:4e:52:01:4c:5f:ca:c9:33:0d:b7:21:97:
2d:cc:8e:fc:d4:6b:5b:62:bc:74:8e:87:98:b8:eb:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:DF:E6:3B:F5:64:08:94:25:08:C0:96:A4:2A:86:E4:60:9F:E5
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d6:87:92:62:cd:58:04:db:4c:fd:3b:89:e7:bb:8e:8e:00:
7a:4b:10:f6:b7:90:2f:11:7d:45:8e:25:b3:88:18:26:8d:2c:
3c:ee:97:38:d6:83:60:e3:89:f0:53:bf:96:24:12:dc:4d:86:
01:dc:27:28:e4:88:5d:63:e6:2d:5f:c3:e4:6f:51:09:32:08:
c9:f1:72:21:c5:f7:93:a9:f1:05:c1:b7:64:c5:d7:25:fb:ab:
b9:17:61:df:42:09:7a:e8:3e:65:ed:1c:45:dd:29:f2:3c:44:
42:5b:af:8f:72:84:ea:e4:51:3a:26:b2:76:76:fc:b8:f0:d4:
4d:16:40:ee:45:b7:57:d9:38:cb:c6:8b:92:72:4b:93:dc:6b:
06:95:a7:9a:9b:84:39:3a:40:76:d3:75:e5:2e:18:37:63:0f:
44:0e:b1:65:bd:ac:20:e6:78:79:77:a8:f2:4d:c7:d6:29:c1:
64:ff:a0:8e:a9:4d:b0:d9:09:7c:13:2c:bf:b7:b9:77:4b:ff:
ba:b1:8f:24:d2:c2:40:68:fb:e2:f3:be:e3:c8:ab:8c:76:d8:
89:d5:8f:b1:85:5f:77:bb:69:87:d2:fa:fe:e5:19:88:19:31:
7c:8b:40:77:3f:b8:da:bb:76:aa:b3:bf:fa:ff:c2:df:9d:fb:
f4:b6:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:59:46 2026 by rpki-client