Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: B4AZ9lPigdtAtsmuo/LAB3EYUkAnIB5/UmZtu6JL/xc=
Subject key identifier: 7C:CE:F3:18:1B:4E:79:FD:E5:90:CE:23:63:5A:3B:A3:53:2C:16:26
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019F8F473F1CC3542060FFF3815C551EA16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 14:00:38 +0000
Manifest this update: Thu 23 Jul 2026 14:00:38 +0000
Manifest next update: Fri 24 Jul 2026 14:00:38 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: OaB/cJogfKzf0X8cZrsWgzEo4URBpYkXDlEXtuHM0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:3f:1c:c3:54:20:60:ff:f3:81:5c:55:1e:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Jul 23 14:00:38 2026 GMT
Not After : Jul 24 14:00:38 2026 GMT
Subject: CN=7ccef3181b4e79fde590ce23635a3ba3532c1626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:df:35:9c:99:9c:3f:5e:38:4d:69:f5:de:
f5:76:0b:68:2e:3a:6d:2a:0c:b9:43:0d:2a:d1:4a:
b0:33:f2:34:f9:39:a0:9e:cf:1f:55:be:5f:44:1b:
72:5c:25:32:bd:5f:07:9d:82:81:de:fb:e7:9b:e5:
9c:ac:73:e0:a8:26:05:c3:92:e2:ac:04:dd:7a:45:
af:c2:57:eb:2c:de:f5:f3:54:fd:bc:5d:c7:e4:fb:
65:64:25:a6:a6:90:c1:2a:b5:22:4b:4e:0a:86:35:
93:8a:3b:d6:ad:7f:24:8b:d5:96:8b:f9:7a:07:db:
4a:25:ba:f2:84:33:d6:54:ca:e7:0b:9b:dc:51:a4:
9d:56:01:1f:e8:e0:6d:71:ce:48:08:2d:98:b6:dc:
d7:a7:85:51:29:9e:e7:7d:07:9e:93:d2:75:88:25:
5c:8e:2b:b2:7f:a2:76:c0:d8:f8:06:d2:aa:1e:e2:
64:6f:c1:ad:be:73:56:b7:22:09:48:89:ac:3a:00:
16:8b:a4:3b:e8:31:f5:cb:d6:3c:39:37:45:c3:3d:
43:36:8a:83:82:40:44:dd:b6:a2:6a:da:f7:0e:0c:
d1:97:3a:b3:d0:fe:c0:9c:aa:2e:a1:5c:59:63:b2:
67:17:93:63:b9:5f:79:dc:f8:33:26:87:98:bd:c2:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:F3:18:1B:4E:79:FD:E5:90:CE:23:63:5A:3B:A3:53:2C:16:26
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a4:53:5b:ee:9e:7c:12:0f:87:3a:ae:1f:c6:c6:78:b2:d1:
82:c2:ce:2d:bd:ad:f9:9b:4a:d1:55:d8:79:55:89:2d:df:bf:
f0:91:0d:4f:2a:1c:5d:26:88:42:6b:03:06:dc:68:b5:d9:a5:
c3:1a:a4:72:b7:4f:9b:f3:77:d0:ca:dc:e4:55:95:30:0f:c4:
2a:ab:7f:a5:8c:0f:88:b9:57:ed:7b:83:b0:28:ff:27:79:5b:
bd:64:45:fc:fa:15:84:14:d8:d0:da:1c:0b:2d:8f:a9:fc:1a:
7e:a4:aa:c5:a6:d6:0f:69:c5:84:74:da:cb:45:8f:98:28:17:
9a:76:a0:32:f2:55:d9:67:03:7b:e4:a1:62:09:85:b5:ba:a2:
2e:71:c6:2e:0f:b1:3a:af:a5:04:fb:8c:ea:43:02:4c:3c:46:
34:6e:3f:21:56:a1:ee:c9:08:33:06:93:02:19:35:6b:61:50:
7a:d6:0e:db:fe:11:7d:4f:01:4f:e1:5d:1c:53:19:de:99:15:
ec:22:fb:85:4d:1b:b5:b2:f7:1d:7d:12:c3:de:2e:e8:94:13:
8b:a7:3d:9e:10:10:af:d7:b9:b2:38:a0:c0:db:62:62:24:59:
2e:98:58:b6:7c:df:fb:1e:18:72:59:e7:1d:89:9c:b0:c9:9f:
66:95:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:16 2026 by rpki-client