Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: TgKxM41ysJHAy9roTc15LCJguP4g3lSDGmQLvoeao9c=
Subject key identifier: 0C:0E:E6:76:32:EB:2B:41:7A:59:F8:34:27:ED:A1:8E:4B:25:C1:3F
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 01A001386C25847405027E2B044D6F8F215E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 17:01:09 +0000
Manifest this update: Fri 14 Aug 2026 17:01:09 +0000
Manifest next update: Sat 15 Aug 2026 17:01:09 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 7MjerOtGhB0z9Jc96CUf5djkR+wKDxbfBqdb/SUFi0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:6c:25:84:74:05:02:7e:2b:04:4d:6f:8f:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Aug 14 17:01:09 2026 GMT
Not After : Aug 15 17:01:09 2026 GMT
Subject: CN=0c0ee67632eb2b417a59f83427eda18e4b25c13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:18:46:ee:3e:d2:7d:58:f8:95:9c:a1:02:
ed:4f:39:a6:aa:a4:70:92:e9:08:3c:8c:d1:64:58:
2e:66:1b:c1:97:23:0a:14:4a:93:81:71:ab:d3:24:
80:dc:9d:dd:8e:d4:d2:de:8d:57:95:22:6a:e7:e3:
19:73:2a:10:a3:77:eb:ce:13:a1:51:35:06:5c:0f:
0e:a0:92:7a:09:79:4c:64:a1:8c:05:94:b9:63:09:
5b:3f:42:5b:9c:2d:f0:37:c9:1e:8b:ef:a0:07:c8:
2f:16:3d:d1:b0:5d:22:55:d1:fd:06:be:e7:25:8d:
40:42:6f:eb:4a:02:97:bb:a7:59:42:4e:26:b6:f5:
c2:5f:92:94:66:3f:1d:0b:fe:e3:35:95:2b:90:5c:
06:d3:00:1f:84:aa:fa:6b:f4:2b:c9:86:90:81:ce:
80:47:29:b9:82:a3:35:4e:ef:c6:de:6d:af:d5:35:
86:08:b3:1b:97:18:21:d2:41:2e:86:7b:e0:2a:43:
a8:88:0a:25:0c:4e:ff:4d:1d:05:e5:84:70:ef:b9:
d6:e2:ae:79:1c:22:0d:67:31:0a:6b:b1:ad:30:93:
1f:0c:4e:df:f2:a6:47:04:62:40:e9:f1:ef:e8:59:
63:52:47:0a:dd:3c:82:7a:af:41:2c:48:88:8f:f3:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:E6:76:32:EB:2B:41:7A:59:F8:34:27:ED:A1:8E:4B:25:C1:3F
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:43:da:f2:39:45:e2:31:0d:70:b6:19:de:2c:b6:19:2b:
c0:b5:fa:33:43:1d:cb:8c:bb:57:c6:3f:c7:ca:76:75:0f:ce:
69:c5:d3:fb:91:79:27:fe:39:33:b0:bf:04:89:1a:7c:d5:96:
cd:75:4b:9c:a3:fc:20:43:ec:81:0b:bc:02:5b:e5:08:37:53:
d7:63:1b:f9:f6:b4:a3:39:91:fe:bd:03:fc:8a:bd:b0:34:80:
57:4b:be:e1:79:10:de:02:eb:a9:37:bb:5f:f3:fb:96:4f:e1:
76:8b:c0:91:96:b2:bb:e2:e7:56:77:44:45:42:42:19:51:e5:
15:88:cc:c6:3f:26:73:3f:a2:d8:70:d1:47:44:68:37:9b:4f:
26:aa:8f:9d:0f:cd:ce:02:5f:71:0b:b9:6a:2e:22:1a:37:86:
70:85:e5:93:04:aa:90:0f:e4:9c:f2:b1:54:0c:c7:6f:5c:68:
45:ab:1f:90:91:06:93:e1:92:ce:82:5b:e3:a9:a1:87:c8:39:
21:23:cc:58:91:1b:81:a5:70:ad:8e:c7:2b:fd:57:f7:f2:35:
34:e8:bb:52:11:4e:1a:22:63:b4:1f:1e:3e:15:1c:08:40:f5:
d9:ba:88:89:a8:2f:99:9e:71:1b:47:a6:7e:cb:5a:a0:1b:60:
e1:9e:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:57 2026 by rpki-client