Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: mBlxc0taoanLpWvbw+qGsLxUurVkn/tGv/kn8C/DbRo=
Subject key identifier: 29:E3:9E:7E:B5:6F:87:4A:5F:3F:F9:63:AF:06:69:59:D4:0F:CB:3D
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019D6650C2CE093C40F8E43953200701C448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 18AB
Signing time: Tue 07 Apr 2026 05:01:01 +0000
Manifest this update: Tue 07 Apr 2026 05:01:01 +0000
Manifest next update: Wed 08 Apr 2026 05:01:01 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: kniz9iAvpIFYv/3cGVdtAQ+U4RNjbbxN4adu642viTU=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:50:c2:ce:09:3c:40:f8:e4:39:53:20:07:01:c4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Apr 7 05:01:01 2026 GMT
Not After : Apr 8 05:01:01 2026 GMT
Subject: CN=29e39e7eb56f874a5f3ff963af066959d40fcb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:92:26:06:c9:5f:74:b0:7d:fe:8a:d0:08:
f1:02:25:88:05:54:8d:ec:71:ad:59:93:06:93:d7:
59:86:cb:2a:c8:57:b1:90:b2:4d:4f:ef:dc:0c:fd:
cb:f3:43:6f:af:da:c8:af:94:81:5b:db:1f:1b:e5:
0a:b6:39:f1:ac:23:de:0f:0f:96:3b:6d:61:1f:22:
4f:61:86:23:30:65:7a:57:4f:70:17:e5:d4:63:12:
45:40:55:fd:f0:6b:18:bd:00:6d:f9:f7:18:87:cb:
fb:67:48:ff:30:ff:67:30:0b:b7:72:9f:64:05:95:
19:fa:72:02:a1:db:ae:a0:92:89:97:06:84:f9:55:
86:a6:7c:66:6c:0e:58:e5:09:2d:dc:9f:35:06:76:
11:4d:fe:26:85:b7:ad:6a:f1:f4:13:80:42:e1:59:
99:4e:d6:cb:41:5b:bf:47:4c:b4:8b:9c:cd:21:cd:
8b:69:76:b3:4b:7c:3a:63:bc:1f:fd:b2:a6:d3:c0:
20:4f:e1:38:6b:ee:77:8b:e7:ed:3c:6a:51:6a:e4:
95:64:65:66:ca:60:6d:b9:79:96:8b:61:c7:9e:f3:
9b:0c:89:17:59:f8:3b:78:d6:9c:94:25:5d:9a:ad:
92:29:75:82:f4:76:56:61:71:7c:ef:3b:f8:c0:b5:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:9E:7E:B5:6F:87:4A:5F:3F:F9:63:AF:06:69:59:D4:0F:CB:3D
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:e6:53:90:69:63:26:f4:d5:62:c3:d0:0d:d3:7d:b2:55:
f3:2f:9a:3e:20:94:c9:62:6d:40:a8:9a:05:d9:70:b9:69:56:
6e:fc:2c:15:f5:06:b9:e7:07:60:4d:5b:5c:b0:3c:d7:11:92:
45:d2:a2:1b:b6:de:92:85:39:53:05:a3:88:d1:4b:19:02:2b:
bf:c6:77:56:60:66:12:4e:9b:ad:3b:b7:ac:c5:e1:42:d7:95:
80:ec:6d:a9:1b:7c:9e:af:d5:7e:e8:a5:88:1f:62:d2:bb:8a:
c7:e1:47:52:a5:d8:90:50:2d:4c:1c:5b:2a:21:b1:30:f1:49:
ea:f4:de:9d:bf:6b:dc:ae:c3:b0:80:5f:15:fa:2a:6c:68:a5:
31:1c:b9:28:17:15:c5:5c:c8:b3:af:87:d7:06:8d:62:76:07:
4d:ac:93:57:14:58:7f:6e:46:d3:57:3b:b9:76:e4:2f:17:d8:
98:c0:9c:49:cc:2c:b7:d9:b7:35:d2:45:b8:d7:37:9b:11:48:
1f:bc:0a:62:f3:02:44:47:57:66:7f:92:47:53:c6:20:3c:a2:
2b:5a:b8:46:0b:be:83:57:53:69:ef:5b:ef:ad:3f:c1:a1:91:
49:45:6d:e4:d8:c9:19:0d:70:7b:0c:dc:ec:65:94:ee:2f:3e:
b8:f2:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:09:18 2026 by rpki-client