Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: RYc3XyavL6YRt4pnWNZOg0S/4lMfhQro0AM/nI0qhHw=
Subject key identifier: D4:6D:21:16:FF:A2:70:07:C6:92:26:24:DA:91:53:31:99:F2:66:5D
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019D9C633EFC1961DC819288D517742DC739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 17:00:43 +0000
Manifest this update: Fri 17 Apr 2026 17:00:43 +0000
Manifest next update: Sat 18 Apr 2026 17:00:43 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: IPF5pww2SzXgJWxJ9SqnNOulDnhU/Wc5XkzjmRhHToQ=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:3e:fc:19:61:dc:81:92:88:d5:17:74:2d:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Apr 17 17:00:43 2026 GMT
Not After : Apr 18 17:00:43 2026 GMT
Subject: CN=d46d2116ffa27007c6922624da91533199f2665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:a1:67:21:d4:e1:7f:b6:76:f9:a7:7f:53:
06:90:d7:63:e0:bc:64:8f:6b:a6:28:47:63:24:f6:
d8:cc:e2:bb:b7:c8:e3:c7:26:40:8e:ee:81:6d:48:
78:19:e2:22:01:4e:47:70:8f:f9:ac:b8:1c:4c:b9:
ac:44:82:c9:de:65:ef:70:d1:41:5c:a6:64:dd:4a:
6f:f5:df:74:1e:e6:c4:15:92:83:f8:59:d3:5c:4a:
ff:9a:a1:c3:77:0b:c8:b2:8e:f0:30:36:5c:a4:b0:
39:7b:b3:38:f5:f9:2a:48:69:ff:b1:cd:77:de:05:
20:39:8b:ba:14:17:f4:dd:c6:cc:e3:1e:11:6d:85:
30:7a:9f:d8:df:a9:09:04:f5:0e:5f:72:5c:fc:08:
4e:7d:d5:13:f8:3a:da:e0:60:0b:e2:6c:c7:2e:be:
50:0f:e3:5e:24:ce:52:f4:69:4a:d8:e7:69:6a:f7:
83:5b:06:7f:72:75:23:c9:1f:e7:3e:be:97:55:6e:
33:42:12:58:60:2d:7d:89:82:1b:2b:36:95:e6:89:
e7:1f:17:95:0b:82:44:2f:54:49:2f:8d:e3:1d:7c:
b3:51:75:89:94:68:ff:ca:34:b7:a9:7a:c1:dc:69:
38:da:f1:a2:84:26:7e:bd:7d:28:4e:c5:a6:05:4e:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:21:16:FF:A2:70:07:C6:92:26:24:DA:91:53:31:99:F2:66:5D
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:53:a4:ab:29:86:d9:fb:c2:c3:02:02:04:7b:ac:24:d9:
15:01:59:48:35:04:8b:75:3a:13:4b:a9:5a:22:3d:34:73:eb:
86:92:fc:72:33:5e:06:f8:c4:70:4b:42:c8:93:cb:4e:58:4f:
ae:10:ee:bf:35:9e:8f:c9:e7:e2:25:0f:6b:9f:21:1b:11:da:
0f:4b:39:29:a8:17:31:e1:0f:7b:6f:63:db:d5:b5:21:86:f8:
c8:42:a1:dc:40:fc:4d:c8:c8:0b:c1:9b:a3:7c:2a:4a:10:98:
1c:25:43:70:e7:05:8a:f6:94:08:e4:14:0f:46:02:05:af:3d:
49:71:b9:2a:0d:fe:a0:82:ad:19:fb:0e:a0:09:90:4a:93:c7:
d0:01:dd:10:70:0f:39:58:7d:ce:cf:0e:c6:e3:19:57:11:94:
0c:df:07:b3:be:46:73:9b:99:ea:22:d1:e9:0d:de:2c:0e:c1:
bb:64:44:20:a3:25:b1:d8:f2:15:06:3a:7f:d5:79:19:ce:0e:
34:74:4b:8b:a4:6c:a6:4f:2f:0f:14:a3:3a:93:cc:ae:9a:e5:
dd:fb:08:5c:72:e5:90:65:bf:26:14:af:a1:95:5e:8a:ab:1a:
8a:dc:b4:ea:4f:4b:97:01:2b:4f:a0:79:8b:6b:d6:d2:f1:7c:
ed:95:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:16 2026 by rpki-client