Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: LsULXBkCcmO8LdnsM7qHuARnFngw/jcKkOgxg6ETkiw=
Subject key identifier: F5:5D:86:33:8B:EA:D3:96:38:AE:88:36:E7:17:7B:7C:05:47:79:AC
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019FA7BDD1BEF1DABAE269B05FF6258882E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 0255
Signing time: Tue 28 Jul 2026 08:01:02 +0000
Manifest this update: Tue 28 Jul 2026 08:01:02 +0000
Manifest next update: Wed 29 Jul 2026 08:01:02 +0000
Files and hashes: 1: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: kNYVorBYdwJp1RW1t08Nc3UG3nxapfzs0U0BY1O0ScE=)
2: cIR14ZPXsA0HmQMTw9YNMMBAeRs.asa (hash: O/reBmezMF7kq6Up//CTG1eVLWtKnHodnkm/BbGZrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:d1:be:f1:da:ba:e2:69:b0:5f:f6:25:88:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Jul 28 08:01:02 2026 GMT
Not After : Jul 29 08:01:02 2026 GMT
Subject: CN=f55d86338bead39638ae8836e7177b7c054779ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:e5:e8:ca:89:cf:2d:0a:c6:e8:32:67:b7:
2d:95:c7:b1:8a:ff:47:a0:34:0b:f9:18:ee:7e:0c:
02:9a:b8:bc:68:8d:06:6f:e0:d9:27:5c:fa:c1:c5:
ad:df:0d:c1:c7:af:84:b2:15:92:e3:af:d0:a6:ba:
9e:b7:b6:0d:54:74:1e:2d:00:e0:e9:67:f0:e2:9f:
12:e3:dc:f4:55:e1:64:37:7c:e3:45:02:65:23:67:
0c:0d:c9:95:70:2d:b6:3e:d9:a0:d1:82:5b:ce:67:
6c:b4:cb:d1:19:7f:5c:a6:a0:ba:03:89:b3:81:3e:
2b:71:03:2a:dc:ca:45:ba:cc:a2:26:73:d3:b8:25:
bb:90:70:6e:62:fe:9b:41:99:6a:8b:5f:6c:bf:8f:
20:d2:6c:23:90:cd:ed:dd:77:24:10:68:e8:2d:f5:
f3:68:91:b5:23:f5:4d:fa:e0:6e:6f:00:0a:40:af:
fa:0c:04:56:4e:55:62:24:26:41:d7:a8:00:be:1e:
39:4a:97:bb:80:19:d4:92:9b:94:21:d5:7f:e3:aa:
92:b3:6b:05:47:c8:6e:75:95:40:ff:d2:c6:a8:84:
06:50:5d:f2:16:ba:ff:64:01:b7:36:de:56:0d:60:
ae:36:61:cd:3a:8d:30:92:61:ce:86:32:89:62:ea:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:86:33:8B:EA:D3:96:38:AE:88:36:E7:17:7B:7C:05:47:79:AC
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c3:8a:d0:1f:12:49:a6:d9:fc:3f:a3:e3:75:f2:5e:fc:0e:
7c:31:79:4b:e6:7c:8a:65:ba:6a:19:d3:60:8b:22:51:e2:6f:
d4:ad:9c:43:85:ed:5c:3c:d3:53:dd:2d:a7:95:8c:29:c0:79:
bd:3b:37:e3:b9:e3:56:b5:55:0c:67:d3:d5:d2:8a:65:d9:52:
d2:ec:b2:aa:c3:13:13:4d:a2:7a:0a:86:94:25:4b:97:12:f8:
99:f9:22:fd:af:86:47:07:b9:83:2a:60:5e:c5:36:da:b9:1f:
a8:1e:6b:e8:18:a8:37:c9:68:d2:0b:68:15:5c:b3:e4:65:a4:
87:45:75:4e:94:56:91:5f:07:aa:19:fc:a2:07:6e:b9:88:70:
f5:0b:71:52:79:36:66:5b:3b:08:31:60:cd:60:f5:30:04:f7:
70:2e:f2:eb:e0:ee:e1:7b:6c:d9:c2:9b:57:f8:2c:dc:c1:2f:
5a:22:c7:33:11:b9:67:5e:5f:24:a7:da:97:47:6d:87:7f:d8:
9e:17:41:ae:4d:e6:1d:29:44:94:39:29:0d:b1:6b:1c:0a:f3:
e1:42:73:08:84:38:66:c4:d6:e1:4a:35:7a:d0:0c:3f:3e:19:
8b:e5:be:8e:93:eb:af:7b:fb:b9:cc:2e:18:f2:ed:f4:f6:0f:
2a:c0:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:58 2026 by rpki-client