Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: mLmkU+ie4ZZmcGJtEsNBeKBki4cDtl4SD1opo7BaH+I=
Subject key identifier: 48:FC:80:C5:A8:86:4F:BE:3D:51:82:A5:46:1D:14:14:F8:27:5D:26
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 01A0EC2EE5B975CF9AD90D8A7FB76423BC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 02FD
Signing time: Tue 29 Sep 2026 08:01:31 +0000
Manifest this update: Tue 29 Sep 2026 08:01:31 +0000
Manifest next update: Wed 30 Sep 2026 08:01:31 +0000
Files and hashes: 1: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: SuxOflP4MUNukU6P2OIPCjRVBSiGgAJ/Kv6SRffGll0=)
2: cIR14ZPXsA0HmQMTw9YNMMBAeRs.asa (hash: O/reBmezMF7kq6Up//CTG1eVLWtKnHodnkm/BbGZrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:e5:b9:75:cf:9a:d9:0d:8a:7f:b7:64:23:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Sep 29 08:01:31 2026 GMT
Not After : Sep 30 08:01:31 2026 GMT
Subject: CN=48fc80c5a8864fbe3d5182a5461d1414f8275d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:af:f6:3b:52:80:52:45:b1:d5:02:b4:04:
8e:a8:1b:46:86:e2:5c:d1:e4:34:b5:3b:20:06:23:
25:db:e2:2b:fd:e6:cc:4e:1b:17:78:bf:a1:3e:3e:
bf:7c:b8:7a:ad:bc:1a:44:b6:33:e6:78:38:d2:75:
f2:7d:73:fb:6a:ef:cd:34:db:fb:4d:fa:a2:de:c7:
bb:10:61:dd:8e:1e:71:9e:6b:8f:1b:f1:40:d2:08:
25:d4:fe:c2:c4:33:42:20:08:be:ab:64:8a:09:9b:
b0:b4:32:2c:00:d1:1d:7a:3d:57:5b:a5:e6:85:f4:
c7:45:44:c2:77:d2:00:54:60:89:4e:2d:15:5f:88:
0e:fb:af:f0:64:60:f4:6b:d3:e3:fa:30:e7:0b:e1:
7b:9d:19:73:98:f5:72:4d:0e:f7:51:94:9e:70:57:
92:3f:85:e3:c9:80:73:a3:36:70:35:35:ad:93:c8:
d2:d1:b5:69:77:8d:a4:b0:ba:2a:0d:3c:67:64:bb:
9c:5b:51:46:00:30:d9:df:6e:5b:2a:80:2b:2e:8c:
25:28:95:93:8b:e8:2b:ff:8f:9f:f0:56:dc:54:47:
0d:f1:2a:a5:7f:d6:90:89:40:ec:f3:bc:e5:0c:2b:
ea:6f:52:7a:a6:98:9b:6c:37:84:85:f5:d0:3a:19:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:80:C5:A8:86:4F:BE:3D:51:82:A5:46:1D:14:14:F8:27:5D:26
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:22:19:f0:21:ee:ec:1d:46:82:6f:e1:40:5c:27:1c:44:
51:d3:a0:d5:fb:0b:09:de:85:3d:38:28:2f:0c:68:80:5f:27:
bd:77:f5:98:a6:f9:25:5b:52:7a:25:2a:fa:a8:0c:bc:08:38:
a2:6f:0c:a7:db:21:9a:44:26:00:30:8b:0e:82:1a:34:ca:be:
e6:f7:9d:db:95:91:53:0a:7e:8d:39:f3:6a:c4:76:50:a5:b5:
9a:a2:35:b9:66:62:65:20:1d:37:de:a8:00:c5:8f:6d:44:ca:
7e:4c:c3:a3:54:68:85:3a:96:4d:2b:b8:25:93:eb:9a:13:a4:
cd:de:31:12:c4:ba:b2:4e:04:77:99:83:65:93:12:84:73:e7:
a7:74:66:57:6d:27:26:28:2e:0e:b1:6d:7e:31:3e:8f:54:94:
01:89:65:b9:06:93:d0:33:03:ad:bf:4a:91:49:0c:35:d3:de:
eb:8d:02:06:74:d8:52:8c:85:c1:5b:49:33:70:4f:17:a8:52:
c1:1a:08:1c:7e:45:66:9f:06:de:fb:1b:07:15:1e:c4:0a:72:
7c:ba:a8:5f:71:6b:a4:68:5f:96:fe:bf:3d:8d:84:b2:1a:fb:
0e:91:4d:99:7f:3b:13:47:cd:e3:97:ee:e9:93:55:19:a3:43:
72:ef:73:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:30 2026 by rpki-client