Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: r6Ghv66GKayotQD8Z0XjA4+XO0BB6OZxr9svDV37jcI=
Subject key identifier: 3D:10:35:95:62:4A:60:C7:0B:9E:1B:24:82:82:30:19:9B:99:D9:06
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019EC2922D8B3DD2955D36FEDD9548C02E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 20:00:20 +0000
Manifest this update: Sat 13 Jun 2026 20:00:20 +0000
Manifest next update: Sun 14 Jun 2026 20:00:20 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: WhEfD9hztR+/ev/OfWZJhlTKByb7lSRh3pSid3lvr8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:2d:8b:3d:d2:95:5d:36:fe:dd:95:48:c0:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Jun 13 20:00:20 2026 GMT
Not After : Jun 14 20:00:20 2026 GMT
Subject: CN=3d103595624a60c70b9e1b24828230199b99d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:e1:79:8b:7c:d4:c3:7f:4c:55:88:f9:12:
e5:1b:2a:8d:fb:22:f3:da:7e:89:ed:ed:7b:3b:79:
97:f6:96:f8:97:7c:4a:4d:57:c2:2b:38:19:ec:2d:
6b:cb:a6:16:45:0b:aa:aa:fc:80:c6:ee:48:46:ac:
4d:34:82:26:c7:77:18:c1:ee:f6:86:07:0f:6d:a1:
22:4e:26:b8:c7:e0:73:eb:d7:69:07:3e:96:02:17:
e0:62:5f:ab:19:61:c4:17:5f:96:3d:10:6d:38:8a:
e5:6c:3f:f9:52:0b:34:0d:fe:f0:1d:fa:ec:6f:e3:
24:b5:28:a9:84:ab:18:37:ec:b3:b2:1a:3f:f1:23:
6a:f1:0e:ca:e3:dc:51:37:08:d3:3a:46:dc:7c:7f:
a1:c3:2c:6d:62:86:83:be:2a:b3:36:37:77:a6:ed:
15:10:9e:f2:eb:d7:d9:52:6a:9d:d1:a5:20:5f:4b:
f9:78:67:86:48:b9:93:d1:a2:3a:20:7b:92:87:fd:
d9:54:cf:98:96:c1:8e:44:b0:f2:bd:90:68:90:c3:
e3:ca:77:69:a8:ed:bc:2f:17:c6:0a:86:62:b7:50:
2e:0a:de:77:6d:88:2b:e7:c7:bc:18:8b:9e:5a:3c:
0a:96:55:fb:c3:3a:ec:41:f2:4e:2c:d7:16:f1:42:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:35:95:62:4A:60:C7:0B:9E:1B:24:82:82:30:19:9B:99:D9:06
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:cc:8f:6f:09:57:d2:b8:a3:26:6d:36:b6:72:77:16:c4:
26:cc:a5:d5:b9:2c:2f:9a:0f:40:10:a4:a8:38:62:58:c1:ff:
c8:50:64:6c:7f:0a:69:21:48:61:0d:fb:e4:29:2a:0f:f8:9b:
6b:2f:b7:25:66:a2:d5:e9:7d:d3:c2:48:b4:97:43:5b:67:b6:
4d:a7:84:e6:ff:7c:b2:03:0c:4f:d9:42:c9:00:23:97:d2:57:
4f:c8:53:16:01:66:57:1f:b2:2c:54:ee:6f:9c:e9:8c:b4:49:
a8:ee:ba:e5:05:1b:c6:23:e9:46:c8:92:68:ee:2b:f9:9e:f8:
fd:aa:cd:d8:1d:bc:4e:da:1a:aa:96:55:fe:ac:67:a5:c2:37:
42:62:c7:0f:6b:9a:28:80:a1:77:c1:f0:a5:ba:07:ca:23:1c:
e0:6c:a3:2b:3d:39:f2:5b:2b:e5:d1:bd:97:57:43:de:68:13:
8f:9a:7b:ba:bc:4f:9c:c2:54:69:11:d4:d6:73:31:3e:41:a2:
70:fc:36:28:9b:27:0f:4a:41:06:47:54:52:50:92:2a:02:3d:
93:23:9b:12:bf:fe:55:b2:9f:6f:09:58:fe:54:57:06:ab:a1:
ca:0e:87:d6:45:1e:1e:dc:ac:0d:5e:5e:2d:b6:c8:b8:cc:87:
b6:4d:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:44 2026 by rpki-client