Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: V4Vsqb9/KE39HmedGan5ijh+dMK9WYzFdD1qIJyRndw=
Subject key identifier: B5:B1:74:66:52:28:84:6F:C3:3C:DE:BC:60:76:32:8E:27:2A:71:4C
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019D2696835E8C02597ABE072EBDD6589692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:01:31 +0000
Manifest this update: Wed 25 Mar 2026 20:01:31 +0000
Manifest next update: Thu 26 Mar 2026 20:01:31 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 42AVWrCh2V9Xg1ka2rAxswq+U4+BB0CYYMRv9hRxy1k=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:83:5e:8c:02:59:7a:be:07:2e:bd:d6:58:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Mar 25 20:01:31 2026 GMT
Not After : Mar 26 20:01:31 2026 GMT
Subject: CN=b5b174665228846fc33cdebc6076328e272a714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:4d:6d:63:73:3b:f9:0a:cc:38:84:65:a2:
ba:98:6d:b9:0c:41:e3:e8:3d:4c:2b:da:8e:68:d1:
07:0b:98:fc:cb:39:00:68:42:b6:66:fd:b9:e9:e3:
8a:ec:36:b1:2a:a8:dc:00:25:8e:a9:b5:b9:59:93:
fa:2f:64:13:e4:b2:74:2c:8f:a0:b2:cd:7a:d6:a8:
67:74:15:01:ff:59:d1:cf:c0:f0:66:68:90:75:21:
34:f5:e6:88:9c:73:31:df:46:8d:16:56:7a:e4:b6:
13:3f:9e:b3:8e:b3:f6:3f:33:4c:02:de:b3:75:7a:
12:bf:8b:fb:d4:0d:f9:e7:35:5c:46:ea:a2:87:f6:
ea:2a:aa:4f:a8:94:4d:48:e9:f9:98:a5:89:da:30:
99:61:33:a5:37:6e:12:10:06:0d:d6:54:87:6f:8f:
f8:33:cc:d0:eb:38:0b:11:8c:5d:8a:d9:fe:0c:da:
4d:35:28:2f:63:49:cd:51:7f:76:4d:3e:2a:66:86:
bc:fe:a3:1c:f7:bd:1c:8f:16:19:dc:df:34:19:1f:
fc:f9:aa:fe:65:90:bf:dd:a2:34:27:5a:46:0d:5f:
25:e9:b5:99:5d:4d:b6:4a:73:08:7e:c0:39:42:2e:
17:c2:77:f4:c2:58:f6:94:e8:32:d8:4e:49:78:82:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:74:66:52:28:84:6F:C3:3C:DE:BC:60:76:32:8E:27:2A:71:4C
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:57:52:32:5c:79:ab:61:1b:5c:e8:fd:c9:9d:b6:d4:eb:eb:
56:dd:c8:c5:82:64:a8:96:d4:a5:90:40:1c:6d:6c:e2:f6:02:
e1:32:30:a1:a6:55:ca:e2:4a:30:c6:67:24:25:b3:c3:09:b5:
a9:2f:7f:fc:6a:34:55:83:d7:55:4a:d4:58:ff:39:02:75:db:
50:a2:3b:e7:53:da:5c:13:28:67:72:66:ec:91:2d:78:23:42:
d9:a9:4c:84:5c:f3:52:70:53:70:47:a9:2a:a9:ad:c2:ca:93:
29:43:50:c5:84:d3:f3:33:1d:6c:dd:85:fc:d5:7a:b8:45:a4:
b2:2d:90:5e:58:d7:7c:17:d4:ad:88:ed:f7:48:27:4e:fb:f5:
4a:31:d2:fa:00:b5:2f:16:37:0a:cb:80:01:69:bb:e4:b0:dc:
bd:66:9b:64:36:98:97:47:d3:db:fa:84:48:90:6a:c1:ae:cf:
6c:ba:be:5e:13:9f:f8:7d:3d:e6:81:a8:3c:97:2b:b4:b6:2e:
87:4a:ec:f8:dd:f6:71:b0:85:6a:fb:41:5a:03:d4:0e:0e:d5:
9d:a6:f7:39:cb:f5:2f:1d:d6:b9:b6:b1:4e:ec:6e:9d:0f:8b:
c7:94:a3:32:bc:cd:4e:3a:33:19:02:c9:97:76:86:2e:b8:b5:
ea:3f:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client