Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: hMF1U0MkFxFGDcGeO4dxHX9ux0/L2gE2b6TTOqIRCsw=
Subject key identifier: 31:5B:23:BE:DF:BF:27:24:CD:96:AB:AB:35:96:66:CC:52:7B:3D:E7
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 01A0DCBBB1C202C7ECEAD48285DA98439F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 02F5
Signing time: Sat 26 Sep 2026 08:01:23 +0000
Manifest this update: Sat 26 Sep 2026 08:01:23 +0000
Manifest next update: Sun 27 Sep 2026 08:01:23 +0000
Files and hashes: 1: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: 5+Ld+vbAO5p990VELIRRd+HlM5Im2HOfCddSEc/f5GA=)
2: cIR14ZPXsA0HmQMTw9YNMMBAeRs.asa (hash: O/reBmezMF7kq6Up//CTG1eVLWtKnHodnkm/BbGZrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:b1:c2:02:c7:ec:ea:d4:82:85:da:98:43:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Sep 26 08:01:23 2026 GMT
Not After : Sep 27 08:01:23 2026 GMT
Subject: CN=315b23bedfbf2724cd96abab359666cc527b3de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:af:d2:17:5b:88:dd:84:09:d0:9a:65:fd:
03:a0:7d:d7:62:92:b9:d4:01:21:d9:f1:d9:ce:ed:
ed:ab:b2:4b:5f:ec:74:aa:b8:c8:d9:aa:b1:64:c0:
e6:62:ba:45:91:2d:46:e1:28:2c:b8:7e:a1:46:d1:
63:b1:c8:3e:20:fd:36:cc:bc:84:c9:16:7d:04:d6:
7a:50:1b:c4:d1:c9:47:51:1d:30:cf:b1:4c:20:f2:
60:fc:53:0b:83:21:32:7a:87:eb:6b:21:14:57:45:
a1:5a:c1:a9:c8:dd:f5:56:e1:d2:0d:9e:b1:88:ae:
79:52:2b:c5:82:5c:35:4a:08:13:65:1e:cc:69:b3:
62:ce:4a:10:76:35:80:74:fa:94:33:58:7b:ec:65:
5f:ca:66:37:80:25:2d:30:d8:af:20:b1:5d:60:09:
f1:aa:2d:e7:7a:3e:c6:fe:43:c5:f3:4f:ff:62:42:
a4:16:cf:76:25:b3:c7:a2:70:20:21:19:7f:10:9d:
fd:85:db:10:24:36:5e:b8:0b:82:86:6a:ba:d1:b8:
a1:f4:54:f1:1e:9f:f7:52:07:71:9a:b6:b4:ba:eb:
f8:06:43:3b:75:cf:4d:3f:17:31:29:14:6d:52:05:
7b:4c:94:c8:f5:0e:f9:27:df:9b:2d:c9:69:cc:cf:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:23:BE:DF:BF:27:24:CD:96:AB:AB:35:96:66:CC:52:7B:3D:E7
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f2:df:59:68:7a:3f:f1:a2:48:b4:19:cb:fe:5b:fe:0b:eb:
19:c6:00:5c:8d:63:09:24:61:33:1a:fa:49:06:62:b9:67:cc:
2e:8b:76:30:fb:8e:6b:63:78:33:b3:e7:3c:92:f3:5e:fd:1e:
5e:97:f8:b9:33:12:95:e4:ac:94:18:e7:7f:84:de:f5:ea:2c:
e6:db:f3:22:dd:30:bd:b4:c4:e5:99:95:b1:35:70:f1:ed:50:
02:e5:58:c6:9a:e2:32:2d:a2:fa:68:33:4d:f6:ee:de:11:f4:
ce:ca:36:ff:6e:b7:ee:5b:9f:54:5d:09:56:38:02:73:24:70:
51:fd:d1:8b:44:8c:b3:08:0d:5b:5c:fc:22:8c:e1:b1:e5:d9:
29:3e:a5:8e:39:10:0f:70:00:bd:28:c7:6a:b9:3a:35:3a:fa:
dc:12:cb:e1:7e:be:7b:81:3a:07:7b:60:f8:f8:b5:b6:89:43:
45:2c:d9:e1:17:de:b9:b0:e1:0a:54:2c:9f:79:7f:d5:0a:bd:
cd:4e:24:a2:23:65:3c:3c:8f:a5:58:61:6f:2f:10:8c:6c:6a:
bb:2c:82:ac:01:fd:71:cf:54:60:a6:8e:5c:b4:5c:c4:79:05:
f3:a3:6a:46:e6:a7:6b:5d:3c:31:5f:a1:5f:1e:4c:2a:b3:29:
0a:27:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:23 2026 by rpki-client