Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: F6xZ0kYUFBtzbvh8c2IncTbAWYxuPQ5P1XeVoxXXR9A=
Subject key identifier: 98:ED:E0:D3:6D:14:41:02:48:2D:0D:1E:88:1B:74:B3:C6:54:E3:3F
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019CAC469017E9D168552C520A57A21C44B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 1223
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: gZfx9W13y+NoZSqwiXmBJsnG4/tPFDk17DAXcnbSA/c=)
2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:90:17:e9:d1:68:55:2c:52:0a:57:a2:1c:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=98ede0d36d144102482d0d1e881b74b3c654e33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:f3:f2:fa:a9:2f:57:83:de:65:c8:a9:a7:
25:94:38:25:87:05:77:87:a3:b5:ef:a7:3a:a0:fa:
2c:c0:6c:67:95:70:a4:72:4f:b4:26:d3:6f:6d:34:
3e:23:75:3b:11:89:5d:cd:89:82:81:f3:9a:5e:58:
00:e2:c1:f8:06:83:29:5c:79:8d:b0:32:44:5b:f0:
3f:47:62:25:bf:78:c5:85:3c:17:e1:e6:8a:d4:6c:
2f:47:05:0a:db:71:b6:16:f6:14:d8:46:0a:34:39:
af:b6:77:23:98:68:91:91:50:0a:b2:d2:d3:e7:92:
e1:32:93:ce:8c:ff:08:70:97:f5:0b:2b:31:72:94:
f3:59:f7:b4:54:1c:2d:bd:54:2b:e0:db:e7:e9:5c:
2c:39:ef:f2:e3:7a:5c:35:5d:75:75:6b:23:3f:81:
15:30:bc:d9:82:b3:90:aa:80:e0:9a:8b:d0:88:36:
df:5a:e5:09:b8:d4:10:0c:b3:0f:f8:39:4c:cd:41:
04:b9:a5:b7:10:59:e4:60:2c:81:9b:f5:61:28:84:
b8:87:e7:47:2d:7c:eb:11:b2:ac:2b:9b:5d:7e:46:
37:41:73:d2:6c:2e:98:ff:0a:fe:ea:6f:70:53:3b:
0e:f5:88:d3:96:40:ec:2f:09:28:46:de:69:e1:81:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:E0:D3:6D:14:41:02:48:2D:0D:1E:88:1B:74:B3:C6:54:E3:3F
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:aa:04:37:8f:19:bd:7f:f8:41:3b:94:f4:34:0a:65:03:
4b:aa:c3:e8:00:7c:51:ad:fb:ca:eb:62:a9:79:c3:eb:66:4f:
9d:da:bf:b6:2f:76:b1:91:b9:f1:0a:61:f7:58:9f:c7:a8:22:
83:c8:dc:59:81:df:ee:ad:5a:07:ca:52:44:44:46:32:15:dd:
d1:89:f9:fb:67:8f:ea:09:b8:3c:35:02:22:00:46:85:04:ad:
36:54:ef:8f:4f:e9:8a:99:b6:21:84:e0:d8:e0:a0:dd:28:35:
0f:0e:ba:6c:e1:8e:b5:9d:35:c7:bc:7f:77:98:9d:cc:81:8e:
82:7f:35:13:e6:03:2f:99:6a:9e:43:17:b6:31:e9:af:4b:28:
80:57:53:1d:40:a7:e7:b9:53:cd:9e:d5:60:21:b2:d6:9f:09:
76:eb:75:b3:7e:fc:31:6f:1f:c0:91:03:6a:27:c9:f6:3e:b3:
36:37:ce:0c:76:33:9e:f2:e4:35:60:91:8b:cd:82:66:26:a4:
55:52:f5:54:56:eb:03:9f:8a:22:11:bf:22:b4:26:c3:7a:6b:
97:ac:d4:68:ad:21:39:94:7d:99:9b:ca:e9:33:be:08:cf:1c:
d0:86:aa:d1:0a:e3:74:c3:bb:93:b7:67:68:32:90:8c:42:8a:
d2:16:e8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpAX6dFoVSxSCleiHES1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg5OGVkZTBkMzZkMTQ0MTAyNDgyZDBkMWU4ODFiNzRiM2M2NTRlMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6nz8vqpL1eD3mXIqacllDglhwV3
h6O176c6oPoswGxnlXCkck+0JtNvbTQ+I3U7EYldzYmCgfOaXlgA4sH4BoMpXHmN
sDJEW/A/R2Ilv3jFhTwX4eaK1GwvRwUK23G2FvYU2EYKNDmvtncjmGiRkVAKstLT
55LhMpPOjP8IcJf1CysxcpTzWfe0VBwtvVQr4Nvn6VwsOe/y43pcNV11dWsjP4EV
MLzZgrOQqoDgmovQiDbfWuUJuNQQDLMP+DlMzUEEuaW3EFnkYCyBm/VhKIS4h+dH
LXzrEbKsK5tdfkY3QXPSbC6Y/wr+6m9wUzsO9YjTlkDsLwkoRt5p4YHl7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjt4NNtFEECSC0NHogbdLPGVOM/MB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS++qBDeP
Gb1/+EE7lPQ0CmUDS6rD6AB8Ua37yutiqXnD62ZPndq/ti92sZG58Qph91ifx6gi
g8jcWYHf7q1aB8pSRERGMhXd0Yn5+2eP6gm4PDUCIgBGhQStNlTvj0/pipm2IYTg
2OCg3Sg1Dw66bOGOtZ01x7x/d5idzIGOgn81E+YDL5lqnkMXtjHpr0sogFdTHUCn
57lTzZ7VYCGy1p8Jdut1s378MW8fwJEDaifJ9j6zNjfODHYznvLkNWCRi82CZiak
VVL1VFbrA5+KIhG/IrQmw3prl6zUaK0hOZR9mZvK6TO+CM8c0Iaq0QrjdMO7k7dn
aDKQjEKK0hboMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:31 2026 by rpki-client