Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: CAOTz9xRKE6eMlSVvwjniLYr+rctuxRXfJPTfDgzlNo=
Subject key identifier: E3:64:6E:B7:3F:C5:62:06:8D:2B:D7:DD:83:B3:9D:16:05:CB:97:95
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019D97E207559EA2AA7F9D9F52F06F71A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 129D
Signing time: Thu 16 Apr 2026 20:01:05 +0000
Manifest this update: Thu 16 Apr 2026 20:01:05 +0000
Manifest next update: Fri 17 Apr 2026 20:01:05 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: PAJkdYWMONcDBCwk//N8wO5h1Y+gbnc+KcMUMIUyZXQ=)
2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:07:55:9e:a2:aa:7f:9d:9f:52:f0:6f:71:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Apr 16 20:01:05 2026 GMT
Not After : Apr 17 20:01:05 2026 GMT
Subject: CN=e3646eb73fc562068d2bd7dd83b39d1605cb9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:d4:27:6d:07:bb:b9:e3:a0:93:34:08:11:
2a:80:5c:4b:77:44:86:61:df:24:d5:fe:34:1b:ba:
16:d0:aa:b3:de:4c:0a:7d:e5:98:e3:8a:24:90:5d:
83:1b:04:be:df:ed:99:21:26:63:2a:d9:47:46:26:
a9:dd:00:58:87:1e:85:38:63:3d:e2:ab:a7:90:ed:
58:0e:7c:00:f8:45:12:f7:ac:88:e1:64:d1:ce:ef:
b2:1c:1b:5a:ec:4e:dc:c1:45:c5:56:8e:7c:2e:86:
0f:2c:32:04:18:27:67:06:44:a8:bf:74:49:1b:37:
36:65:9e:ca:9b:5c:5a:5e:4c:c7:a6:93:a9:80:c5:
b0:d0:03:14:e0:4c:87:c3:67:5a:3c:26:b5:3a:60:
f8:0a:50:23:db:0d:7b:a4:7f:f4:4e:d0:55:a4:11:
25:36:29:5b:1d:02:2c:61:17:33:59:2e:04:21:41:
78:8d:ca:19:45:3b:9a:aa:60:a5:9e:7f:b3:48:1e:
33:01:69:86:f6:25:84:eb:64:7a:ca:9d:08:a6:46:
c9:7b:3a:d8:38:4c:5d:9d:db:7d:92:bf:03:29:40:
9a:89:9b:28:5a:35:8f:2c:ee:a9:a4:b8:2f:64:19:
02:4e:fd:4b:84:dc:07:b5:6d:0e:22:38:40:20:4e:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:6E:B7:3F:C5:62:06:8D:2B:D7:DD:83:B3:9D:16:05:CB:97:95
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6b:48:38:63:5b:75:c8:db:83:f5:8f:84:1f:bb:0b:0e:41:
3b:a8:0f:c4:ef:02:4e:36:3e:0a:52:44:b5:a0:88:33:da:3c:
12:1f:1d:c3:2b:57:b6:4c:3e:c8:da:9e:d9:98:1e:1f:56:d0:
c6:51:ca:85:a5:6a:38:85:50:18:f9:df:9f:df:e7:9a:5f:e0:
c8:34:23:ef:48:93:69:a8:67:08:9e:95:e7:48:dc:0a:0b:ef:
d0:b5:85:78:43:9e:fe:b4:4b:7c:04:78:44:a1:58:de:db:8c:
2e:d6:01:92:bc:ff:42:1a:dc:cf:bf:01:01:e1:c3:6e:dd:dc:
41:18:0d:62:02:cd:2d:a6:06:cc:5d:6f:49:5c:1d:c3:80:06:
02:6a:0d:39:b5:e3:95:eb:d6:9f:6c:0b:f7:e7:14:5b:0b:83:
e7:c4:07:6a:53:95:1d:d8:51:94:7f:7c:7b:83:1a:c4:fa:20:
55:7a:16:f5:3b:08:dd:a0:2c:1d:4d:9b:6a:55:f3:14:6f:0b:
75:3a:9d:db:15:00:05:0e:85:88:8c:25:44:2f:81:ac:18:f9:
3a:e6:64:e3:57:9a:0c:d3:1e:b1:07:17:14:10:65:bb:6d:00:
80:6d:aa:13:d9:03:3b:e4:a0:e7:e4:72:97:7f:a7:f3:81:24:
67:5b:48:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4gdVnqKqf52fUvBvcaY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjYwNDE2MjAwMTA1WhcNMjYwNDE3MjAwMTA1WjAzMTEwLwYDVQQD
EyhlMzY0NmViNzNmYzU2MjA2OGQyYmQ3ZGQ4M2IzOWQxNjA1Y2I5Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq73UJ20Hu7njoJM0CBEqgFxLd0SG
Yd8k1f40G7oW0Kqz3kwKfeWY44okkF2DGwS+3+2ZISZjKtlHRiap3QBYhx6FOGM9
4qunkO1YDnwA+EUS96yI4WTRzu+yHBta7E7cwUXFVo58LoYPLDIEGCdnBkSov3RJ
Gzc2ZZ7Km1xaXkzHppOpgMWw0AMU4EyHw2daPCa1OmD4ClAj2w17pH/0TtBVpBEl
NilbHQIsYRczWS4EIUF4jcoZRTuaqmClnn+zSB4zAWmG9iWE62R6yp0IpkbJezrY
OExdndt9kr8DKUCaiZsoWjWPLO6ppLgvZBkCTv1LhNwHtW0OIjhAIE7H2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONkbrc/xWIGjSvX3YOznRYFy5eVMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2tIOGNb
dcjbg/WPhB+7Cw5BO6gPxO8CTjY+ClJEtaCIM9o8Eh8dwytXtkw+yNqe2ZgeH1bQ
xlHKhaVqOIVQGPnfn9/nml/gyDQj70iTaahnCJ6V50jcCgvv0LWFeEOe/rRLfAR4
RKFY3tuMLtYBkrz/Qhrcz78BAeHDbt3cQRgNYgLNLaYGzF1vSVwdw4AGAmoNObXj
levWn2wL9+cUWwuD58QHalOVHdhRlH98e4MaxPogVXoW9TsI3aAsHU2balXzFG8L
dTqd2xUABQ6FiIwlRC+BrBj5OuZk41eaDNMesQcXFBBlu20AgG2qE9kDO+Sg5+Ry
l3+n84EkZ1tIDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:05 2026 by rpki-client