Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: 4CnNMmIuqcGu79tmNXgf4ZfwaeVhAGdnTYG1rEjHcFw=
Subject key identifier: BB:59:69:DA:D0:23:23:20:41:BE:1D:22:72:B9:11:C2:9F:47:4D:71
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019D27E02603A7354C987EA26D5D9FA64141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 1263
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: JDfZxNXJ8YKjc7+3XLznEURs8WuzsXmx7+SAXYBjDJo=)
2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:03:a7:35:4c:98:7e:a2:6d:5d:9f:a6:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=bb5969dad023232041be1d2272b911c29f474d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:68:bc:ab:ed:4e:03:77:5d:a0:a1:1b:ca:
bb:c3:fa:5f:42:7f:18:09:fd:82:bf:78:af:57:b4:
e1:65:11:39:c9:00:6c:db:1f:66:54:5c:56:56:65:
af:70:3f:f0:bc:a5:ef:b5:13:f2:1d:cc:5c:55:33:
0f:9e:17:e0:23:66:75:9a:af:1b:09:30:b3:fb:d1:
ea:b7:2f:7f:02:ef:91:29:e6:01:ad:44:90:20:7a:
03:5b:aa:22:9d:38:2e:8f:91:04:41:59:63:73:60:
ad:45:14:20:8f:8d:7b:41:a6:4c:dd:6f:cc:03:55:
ab:1d:10:e2:12:aa:7d:1e:a0:9b:0c:ba:c1:b9:a4:
05:bc:36:21:36:55:31:9a:00:cd:d7:de:0a:e5:2f:
85:f5:27:ba:b7:de:9f:11:2b:b1:fc:78:c0:8d:69:
72:db:64:4d:66:2d:df:08:e2:a6:b2:a9:14:32:81:
e1:dc:d2:f1:16:7f:f0:d0:22:37:88:42:fe:f8:ae:
4d:43:7e:de:0e:ac:25:8a:f1:89:0f:41:2c:2f:03:
0a:ac:4a:fb:61:d0:f0:fc:8a:28:4e:49:a4:7e:aa:
2e:b9:14:8b:c2:32:c5:21:b7:57:c7:c1:4d:e4:0c:
1f:ee:b6:3e:cf:4b:c6:8a:66:22:40:f8:d5:7e:a3:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:59:69:DA:D0:23:23:20:41:BE:1D:22:72:B9:11:C2:9F:47:4D:71
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:91:99:52:b9:f5:46:31:3d:25:be:8e:47:d1:7d:7c:e3:
76:67:38:f3:10:26:4d:87:bc:76:fd:88:58:06:e7:34:f4:9e:
be:45:47:46:ea:77:39:09:f3:b7:81:10:82:97:09:cd:af:0b:
e5:c0:e2:40:2a:dd:e3:cd:3b:c8:4e:49:a7:b0:8c:ab:42:62:
93:cc:7b:c5:6a:cf:5a:1c:17:42:72:08:e4:84:6d:4d:1c:94:
13:6b:86:b3:5b:d9:18:ad:63:85:d9:6d:f3:11:1e:96:3a:e5:
91:0c:99:1f:85:06:b3:36:2d:cf:22:0e:cb:32:b5:fa:3c:01:
1f:81:7a:bf:89:36:d6:d0:84:10:81:00:3e:6b:97:cd:ff:b4:
bd:86:5d:34:a1:52:09:37:e5:5e:62:5a:a9:b4:af:2b:02:4f:
e9:17:0b:55:21:c8:f0:7a:22:0c:aa:07:31:9b:e2:19:38:70:
0d:97:41:59:27:94:33:7f:d6:02:d0:75:b6:3e:af:b2:37:fc:
9b:02:56:48:9a:62:28:87:1a:66:01:2c:d0:fe:48:47:bd:9f:
a2:a3:0c:bf:79:aa:48:76:e3:90:e2:06:1d:25:19:ce:01:b3:
13:eb:03:a2:c8:8b:9a:67:93:16:55:d7:1a:2f:d5:7b:ba:55:
c7:d8:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:50:24 2026 by rpki-client