Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: k9lmIxqQbvz2IRmF5qDg6A68ezQFqBRoO4Bnhn8O+Nk=
Subject key identifier: 91:C6:4C:5E:15:F0:9E:B2:85:A9:A4:8A:44:AE:7D:57:65:A5:B5:3C
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019CAEDA2C29D0662EC360C493F6DF4B6BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 14:00:59 +0000
Manifest this update: Mon 02 Mar 2026 14:00:59 +0000
Manifest next update: Tue 03 Mar 2026 14:00:59 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: HoyndyWWqdfer7THP51JyTn3byMKqyJBTA9yXmclS0o=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:2c:29:d0:66:2e:c3:60:c4:93:f6:df:4b:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Mar 2 14:00:59 2026 GMT
Not After : Mar 3 14:00:59 2026 GMT
Subject: CN=91c64c5e15f09eb285a9a48a44ae7d5765a5b53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:49:91:65:41:ac:d4:42:83:1e:93:9e:48:
1f:c6:fd:16:3b:95:d9:37:7f:02:3f:27:99:80:f0:
e9:47:5b:2c:22:e6:75:48:80:68:ab:f6:ce:ab:37:
f5:14:31:70:10:b8:a5:8d:39:77:d9:4a:ac:46:19:
b3:ff:b2:f9:d4:75:1f:c0:11:1a:71:50:91:07:0f:
18:01:03:e0:a1:7f:3c:00:09:51:30:96:7d:80:45:
30:14:6e:66:2f:0b:2f:cd:5f:a7:64:11:5c:28:1e:
75:32:7f:57:c9:f6:c1:46:a0:51:8b:99:7b:2e:77:
b8:c2:a5:f3:51:2d:a5:1c:d4:d0:6a:7d:22:18:53:
89:14:a7:ac:96:9f:d3:c4:81:db:ad:4b:64:d0:06:
de:2d:a4:91:77:82:3e:02:00:89:89:f8:4a:70:25:
39:36:d5:c3:91:5f:01:0d:99:d7:4b:b9:c6:cc:53:
bb:c1:e6:1b:ea:6c:ce:c5:cc:78:50:b3:ce:96:74:
bb:b5:c2:68:5e:7a:90:d4:5b:13:dc:63:e2:71:4e:
a7:87:2e:f5:b8:30:f1:de:4b:cb:3a:89:ff:61:55:
cf:ce:f9:31:c0:be:6e:ae:9c:1f:9e:34:9a:c1:2e:
6f:2e:0d:0f:17:0a:75:fc:dd:58:9b:ef:85:12:ba:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:4C:5E:15:F0:9E:B2:85:A9:A4:8A:44:AE:7D:57:65:A5:B5:3C
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ed:85:55:b1:8d:b9:e8:c1:83:f0:e5:3a:9d:fc:1d:ac:55:
38:81:5d:7c:93:80:ff:e0:a5:6e:7d:8b:ed:0f:06:70:aa:30:
9a:1d:9b:3f:40:79:1e:1d:d0:08:72:17:5f:b0:87:c8:4a:e2:
52:33:eb:aa:54:77:f5:89:0f:8f:93:cf:5e:d9:ee:2d:5e:0f:
83:1d:e1:c8:e1:01:2c:6e:0d:ba:ec:c6:b8:61:20:b5:26:24:
90:73:91:0e:ac:c2:63:78:25:f3:d0:40:8f:82:0d:19:e5:36:
f4:da:5d:32:95:35:92:00:01:8d:b0:2f:f5:b8:e1:94:c9:24:
32:58:19:77:86:ce:4e:ee:16:e3:b3:6e:e5:bf:ff:44:76:9f:
e3:f8:2a:f2:d3:7f:32:63:52:0f:0c:5e:7e:82:93:68:b2:e8:
a1:d7:bc:a2:7f:4f:af:07:de:8b:f0:d3:72:55:03:8a:ef:7c:
cc:ae:04:dc:68:c1:39:12:a8:97:76:de:7f:9e:26:03:fd:f9:
1e:e0:79:89:7c:89:76:c6:52:18:4b:3e:64:06:e1:ae:09:7b:
f7:fa:da:76:63:3e:da:95:a7:75:3d:8c:6e:68:7c:21:7b:e7:
eb:8b:59:5c:e6:ad:a3:ab:ce:e6:63:52:18:57:0a:2c:21:37:
97:16:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:19 2026 by rpki-client