Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: Bd6UVKd4RvVxtF2aa9ysCLbRcpDVYVxtn9OQvnY3y+g=
Subject key identifier: 99:9A:D2:71:30:FE:FA:5D:1E:32:0E:28:9C:3B:A3:0A:D6:1B:65:A0
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019E1BD896B21507F2870CD074C3E8A66BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 11:00:39 +0000
Manifest this update: Tue 12 May 2026 11:00:39 +0000
Manifest next update: Wed 13 May 2026 11:00:39 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 6LnJDdYHEzcmgyYtatCMQfVrIpvNInj5KS6qib5T5sI=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:96:b2:15:07:f2:87:0c:d0:74:c3:e8:a6:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: May 12 11:00:39 2026 GMT
Not After : May 13 11:00:39 2026 GMT
Subject: CN=999ad27130fefa5d1e320e289c3ba30ad61b65a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:32:85:2b:93:9f:0e:14:ee:41:9e:44:66:
1e:f9:5e:e0:50:52:7c:13:b5:43:a4:65:72:1e:b8:
b0:6c:d0:3f:14:0f:08:56:a2:83:7a:61:f9:27:45:
77:5b:e9:15:64:cc:00:23:0e:d0:90:74:3e:c0:92:
52:4c:70:37:80:ff:9c:66:c4:51:0d:60:28:29:a3:
a6:94:ea:2e:53:51:69:63:61:cf:9d:d2:fd:66:a2:
f6:e8:e8:49:c0:b8:ea:3d:6f:8b:66:b6:35:c4:0f:
fb:0b:dc:cb:32:1f:cd:b9:41:57:7a:64:f6:d4:f3:
ab:3c:55:a4:d8:e8:e8:1b:fb:c6:09:d7:ca:98:8d:
54:53:44:45:e2:9b:35:86:4b:0f:b3:65:e7:1a:5c:
32:97:21:11:24:89:1c:ec:37:3a:b4:f0:a1:88:94:
b3:aa:11:33:af:ea:95:aa:40:9f:40:ac:9f:38:21:
25:0a:89:28:e1:9e:ff:87:77:64:02:5c:d4:f8:4b:
50:4d:79:33:a9:98:0c:31:72:22:82:b1:94:12:c7:
bb:b6:4a:23:54:97:34:b3:54:8e:0d:98:88:ff:de:
1c:02:bb:b4:c5:d6:83:96:9a:50:2b:66:02:f7:86:
d1:8c:c0:b3:d2:83:59:1e:8b:2a:f7:c5:a4:8c:23:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:D2:71:30:FE:FA:5D:1E:32:0E:28:9C:3B:A3:0A:D6:1B:65:A0
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ff:a8:2a:c7:42:2a:65:0d:2e:4f:7c:26:5e:fe:3b:e3:64:
2f:8c:ed:8b:4f:2e:f5:2d:a4:d8:56:47:38:24:bc:6c:95:18:
97:e3:96:33:75:63:75:1d:1c:7f:e0:47:1a:41:57:bf:1b:cf:
2e:78:8e:27:75:72:56:8a:78:d5:ff:27:e8:6c:6a:e7:1f:26:
df:f5:2f:60:8b:04:0b:e1:94:48:4c:98:33:2f:1e:f7:3f:b1:
b9:2a:d1:e2:13:7a:2d:ad:49:b5:64:d0:bc:aa:ee:0d:80:4c:
bc:2a:9a:db:74:47:9d:70:e5:e4:5f:c3:75:42:42:31:d5:17:
27:c7:45:fb:0e:21:86:36:92:b8:a4:59:e2:5a:99:e3:49:0d:
2e:ac:82:b5:1f:96:25:16:73:2d:94:fd:76:15:a3:a4:53:47:
4e:04:69:b3:d5:8b:0a:a4:f0:d2:a3:74:53:61:36:28:3a:80:
77:cc:03:42:f4:ef:da:aa:85:80:4f:b3:ba:65:26:13:9f:9b:
2e:97:bc:f3:3a:36:02:5f:ef:1c:79:93:81:c0:7b:c3:e8:92:
42:43:c9:b8:c3:76:6f:d0:00:c0:77:b8:0b:89:ec:b6:c3:8d:
32:06:1b:23:d0:ef:f2:2c:3d:8a:fc:ce:ba:1d:b8:8a:c7:f8:
64:3e:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:23 2026 by rpki-client