Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: pi9dwxkyRN+rgpile95/UrF4HyvvZ1ctVFo7wr8iDAM=
Subject key identifier: 0F:DC:37:A0:D9:BB:EA:C0:B4:91:DD:2A:8E:9A:72:0E:67:34:AE:A0
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019F8EA2C47A382B04CC4D56575BD61F0D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 0248
Signing time: Thu 23 Jul 2026 11:00:59 +0000
Manifest this update: Thu 23 Jul 2026 11:00:59 +0000
Manifest next update: Fri 24 Jul 2026 11:00:59 +0000
Files and hashes: 1: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: xGGeawdxldcmHEIcuNSPHvYD8nCcYK9Eabwc7J4PKNQ=)
2: cIR14ZPXsA0HmQMTw9YNMMBAeRs.asa (hash: O/reBmezMF7kq6Up//CTG1eVLWtKnHodnkm/BbGZrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c4:7a:38:2b:04:cc:4d:56:57:5b:d6:1f:0d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Jul 23 11:00:59 2026 GMT
Not After : Jul 24 11:00:59 2026 GMT
Subject: CN=0fdc37a0d9bbeac0b491dd2a8e9a720e6734aea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:01:19:13:ec:9c:a4:e8:f8:c1:65:a4:ca:
16:96:16:05:45:f8:ae:d9:20:00:d7:ad:28:7c:7a:
57:13:96:fb:6d:ff:f3:4e:ce:3c:e3:cd:1f:0d:05:
82:6d:53:6d:44:3b:9a:c7:f1:b9:e6:1b:de:c9:18:
f8:d2:29:ac:b9:96:aa:44:b4:5e:6d:15:64:2c:ad:
a9:74:42:db:cc:78:61:02:c5:f4:38:9f:5f:92:28:
8e:fa:1f:0e:bd:cc:e7:43:22:ba:b8:ec:d4:f7:00:
43:a8:32:59:a9:e8:d7:4f:a3:1c:fb:11:be:67:60:
82:0b:e0:dc:78:94:f0:cf:64:91:c1:ed:b6:e5:d7:
fe:46:9a:58:51:53:f3:da:eb:2e:1f:39:bc:19:a8:
4b:f4:1f:8f:8c:00:ab:02:5a:71:d8:aa:4d:5f:11:
a9:f2:68:f6:c6:dc:c6:9d:3c:2d:65:0e:0b:dc:97:
15:4d:dc:52:a7:bb:48:23:bb:e0:f5:15:8d:94:7a:
85:17:dc:70:49:42:d4:0c:ad:f2:9d:82:95:63:03:
2e:01:ce:e9:17:18:f8:0e:31:d1:0c:fd:98:0d:49:
de:3f:f6:61:1d:52:a0:cb:eb:6d:2c:d6:35:20:39:
89:27:5f:ef:f6:25:ce:e6:44:93:ad:a9:07:48:23:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:37:A0:D9:BB:EA:C0:B4:91:DD:2A:8E:9A:72:0E:67:34:AE:A0
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:bb:ea:d5:19:82:6b:e8:4d:cd:1e:5d:ac:6c:76:61:dc:
da:39:1d:a9:bd:b7:cf:92:66:2b:3d:5b:9d:1d:35:eb:10:cc:
b0:4a:73:02:af:fe:ba:00:ab:71:f1:de:34:d0:57:a5:1e:b6:
06:6a:eb:00:94:03:60:92:df:27:a4:80:b0:ba:97:fa:9e:7d:
39:12:45:cd:25:b8:64:86:ea:62:82:01:ff:ef:77:36:c4:cf:
7a:5c:8b:e6:ca:90:15:0b:1d:fd:f6:31:cb:75:d0:9a:bf:2f:
95:10:32:26:70:6c:84:ae:03:23:77:5e:ae:b0:e0:78:13:0c:
17:7f:47:a0:4c:7d:95:82:a5:32:7e:05:7f:65:cd:e0:23:50:
d7:42:16:32:c1:f1:97:4c:b5:25:a7:c4:af:53:63:d7:45:c8:
3d:08:98:72:65:ea:76:cd:29:14:48:34:0f:d1:59:d7:cd:e0:
12:52:41:9c:46:2b:89:d7:56:46:97:02:96:1a:fe:9b:fb:b3:
21:d4:2f:2a:d0:43:85:7c:63:2d:a8:ae:7f:6b:a7:45:f4:1d:
08:f7:8e:44:ff:9e:f4:dc:50:fd:8a:d2:63:f3:3b:2b:8b:72:
a6:4b:59:d4:1c:eb:1d:91:30:cd:95:83:96:a4:4e:c3:5a:f2:
5e:b9:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:10 2026 by rpki-client