Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File: Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier: iWHic+MZzIcq+++kqEs+m+LYAvFvbqNGa7O21ZEJufY=
Subject key identifier: 04:46:6D:AD:DB:0A:73:59:44:3D:50:A8:BC:66:05:CB:E8:7B:2F:9C
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial: 019DDD9EDEDC7AEA4F9F31AEC85B300C2CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number: 0167
Signing time: Thu 30 Apr 2026 09:01:09 +0000
Manifest this update: Thu 30 Apr 2026 09:01:09 +0000
Manifest next update: Fri 01 May 2026 09:01:09 +0000
Files and hashes: 1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: fY9+YR9uHYL1RkJ8mgs9KZCZ4dmum7wF3tBpaEnIH70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:de:dc:7a:ea:4f:9f:31:ae:c8:5b:30:0c:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Validity
Not Before: Apr 30 09:01:09 2026 GMT
Not After : May 1 09:01:09 2026 GMT
Subject: CN=04466daddb0a7359443d50a8bc6605cbe87b2f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:ba:9f:e8:cc:c2:fe:73:9a:d6:0d:e1:d8:
48:13:b7:ab:64:9d:c8:ff:a3:a5:67:52:a9:2b:9d:
71:82:69:4f:dd:ad:7c:dc:f0:6e:be:a8:f0:99:93:
6b:f7:b6:36:4b:61:b2:5c:64:08:ec:c3:96:d5:3d:
00:4b:61:34:36:08:28:6d:b4:e9:d3:7f:eb:5f:0c:
93:9d:45:d0:13:57:ab:bb:12:4f:b1:d1:9b:98:51:
7a:0c:96:a4:6b:97:6e:61:5f:1a:44:44:1f:f5:ad:
a1:38:47:f2:2f:3d:1f:d1:28:de:85:5b:5a:df:70:
49:86:53:07:76:b9:f1:8f:78:95:f8:9b:34:de:33:
24:39:5a:76:93:79:03:51:16:62:11:be:9e:33:64:
93:42:1c:67:1e:9e:20:1f:55:4d:f2:63:e2:6c:cd:
3f:80:a8:28:8c:c8:cc:94:2e:ca:97:b4:41:15:d0:
67:96:04:6c:bf:d4:8f:4b:4c:6b:f7:39:da:0c:4d:
84:28:67:16:b5:8a:6e:60:06:87:68:b3:af:b0:70:
cd:33:07:5c:6f:b6:61:e3:d2:ff:15:1e:56:9b:37:
fb:bf:1c:2e:49:23:b8:06:75:33:73:62:f8:f8:86:
8d:4f:c6:ab:79:d6:54:b7:2b:9d:58:39:b0:26:21:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:6D:AD:DB:0A:73:59:44:3D:50:A8:BC:66:05:CB:E8:7B:2F:9C
X509v3 Authority Key Identifier:
keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:2d:de:ae:cf:d0:fd:53:b4:d5:e4:b4:da:27:e6:28:86:
ba:80:59:f3:54:ad:1a:ea:c8:0d:be:bf:54:86:b1:5f:11:b2:
4b:ec:22:05:d2:2c:5e:bd:5d:0c:07:1e:35:ef:30:fa:2a:a0:
ee:59:c8:ac:4a:a1:74:db:ee:f8:75:e8:58:a9:54:5c:b1:2a:
ab:a0:3a:60:90:f0:a1:b8:e0:37:40:ab:b5:fd:3b:4d:b6:3d:
f2:fe:04:71:18:b9:76:a6:76:83:cf:92:8f:8e:49:54:01:fb:
99:6b:4b:99:77:a0:1e:ae:d5:79:77:52:a3:ba:fb:9a:e9:2e:
61:7c:bb:03:ef:0f:76:8b:4c:a6:b8:7b:ea:82:9a:60:22:da:
b3:d5:75:45:95:50:6e:49:cb:88:f3:91:17:3f:ed:64:81:c2:
6c:7e:ab:ed:96:dd:37:9b:1b:de:ed:cf:e8:65:89:bf:5c:75:
79:a6:04:ca:99:b0:3a:67:9a:ab:8f:cd:29:79:bf:6a:3d:be:
07:31:66:8a:0c:46:7f:70:57:9e:1f:a7:fb:b3:2d:44:05:0b:
97:36:fd:31:75:2e:75:fb:55:2a:cf:8f:6c:b8:0b:84:79:cb:
27:42:bf:16:cc:4f:a8:80:21:f7:89:3b:ee:77:a0:02:81:5e:
c4:1e:48:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dnt7ceupPnzGuyFswDCzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4
MDdiZTcwHhcNMjYwNDMwMDkwMTA5WhcNMjYwNTAxMDkwMTA5WjAzMTEwLwYDVQQD
EygwNDQ2NmRhZGRiMGE3MzU5NDQzZDUwYThiYzY2MDVjYmU4N2IyZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vC6n+jMwv5zmtYN4dhIE7erZJ3I
/6OlZ1KpK51xgmlP3a183PBuvqjwmZNr97Y2S2GyXGQI7MOW1T0AS2E0NggobbTp
03/rXwyTnUXQE1eruxJPsdGbmFF6DJaka5duYV8aREQf9a2hOEfyLz0f0SjehVta
33BJhlMHdrnxj3iV+Js03jMkOVp2k3kDURZiEb6eM2STQhxnHp4gH1VN8mPibM0/
gKgojMjMlC7Kl7RBFdBnlgRsv9SPS0xr9znaDE2EKGcWtYpuYAaHaLOvsHDNMwdc
b7Zh49L/FR5Wmzf7vxwuSSO4BnUzc2L4+IaNT8aredZUtyudWDmwJiGjMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARGba3bCnNZRD1QqLxmBcvoey+cMB8GA1UdIwQY
MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt
OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3
LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMAt3q7P
0P1TtNXktNon5iiGuoBZ81StGurIDb6/VIaxXxGyS+wiBdIsXr1dDAceNe8w+iqg
7lnIrEqhdNvu+HXoWKlUXLEqq6A6YJDwobjgN0Crtf07TbY98v4EcRi5dqZ2g8+S
j45JVAH7mWtLmXegHq7VeXdSo7r7mukuYXy7A+8PdotMprh76oKaYCLas9V1RZVQ
bknLiPORFz/tZIHCbH6r7ZbdN5sb3u3P6GWJv1x1eaYEypmwOmeaq4/NKXm/aj2+
BzFmigxGf3BXnh+n+7MtRAULlzb9MXUudftVKs+PbLgLhHnLJ0K/FsxPqIAh94k7
7negAoFexB5IWg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:50 2026 by rpki-client