
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: ixLSmsiDKC2GGKMFfXGYj4KF6VtHLd7VJh/MKAJtcmg=
Subject key identifier: 88:1D:E3:62:5A:F5:ED:85:1C:0B:E4:88:7B:B8:45:D5:E2:50:B2:ED
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019E4E0F39E915AFCEE9E845751E422E8731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1923
Signing time: Fri 22 May 2026 05:01:21 +0000
Manifest this update: Fri 22 May 2026 05:01:21 +0000
Manifest next update: Sat 23 May 2026 05:01:21 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: n916hPU0Z9kosUA3ub9/X6F1xipFWd9+Xud5lOsoNzY=)
2: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (hash: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg=)
3: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (hash: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE=)
4: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (hash: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:0f:39:e9:15:af:ce:e9:e8:45:75:1e:42:2e:87:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: May 22 05:01:21 2026 GMT
Not After : May 23 05:01:21 2026 GMT
Subject: CN=881de3625af5ed851c0be4887bb845d5e250b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:cd:55:31:bf:72:99:b9:38:a0:79:7f:d7:
06:20:f9:02:63:fd:69:c8:72:f8:02:e5:f4:90:ff:
71:6f:ad:eb:e3:54:1f:44:81:e1:fc:36:a3:85:85:
a8:3f:19:32:e0:fc:bb:92:5d:21:59:d8:19:a2:d0:
d1:6a:26:9c:59:e5:b1:f0:3b:eb:7a:8b:50:06:f4:
fa:7a:05:47:37:2b:d6:0b:d4:38:eb:c6:ba:ef:43:
3c:dc:42:49:4b:10:33:a3:c8:b8:c4:28:3a:a1:66:
39:a1:1e:c3:f5:cd:ca:4e:92:9d:f9:7a:26:91:c5:
35:b9:45:b5:8d:b3:dd:ef:45:0a:78:9f:77:38:a5:
69:a0:aa:89:bf:a2:12:fb:31:7f:af:e1:e8:28:ef:
ab:4f:2c:79:57:53:90:a6:7d:9a:62:66:fc:d6:52:
a2:a7:ea:df:d3:0d:9c:97:4a:ae:f3:8f:d1:b9:76:
65:f7:d1:51:0c:41:89:60:87:ae:ae:76:26:3f:06:
65:f6:30:c0:b5:bf:f1:d9:a1:0c:a2:9d:d4:22:a5:
ec:30:ae:74:80:fa:be:29:23:e9:dc:b0:cc:2c:f2:
21:8e:ba:d9:b7:b5:44:66:ee:b8:93:8c:ff:40:7a:
b0:8e:a3:7f:31:1a:e2:0b:0a:cd:b7:dc:56:a3:44:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:E3:62:5A:F5:ED:85:1C:0B:E4:88:7B:B8:45:D5:E2:50:B2:ED
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:b4:94:ac:65:65:3e:a8:cc:23:4b:0a:43:74:3a:cb:54:
af:51:db:fb:52:74:3a:73:0e:de:e7:91:13:a5:a6:ab:b5:ee:
ea:24:c2:6e:e2:97:84:e4:2e:84:47:9d:5d:ae:33:bf:58:ca:
0e:e5:67:dd:86:26:fc:fe:56:d2:50:d3:d0:9c:13:c6:28:31:
b6:aa:72:60:bd:68:e4:d9:5b:53:f2:ec:ff:cd:d0:9c:f7:05:
1d:d5:88:3c:50:d4:a1:17:78:66:81:9d:46:ab:ac:48:32:4c:
1e:8f:0d:2d:0f:bc:f5:45:52:d9:16:3f:96:90:9f:f4:37:6a:
1e:3e:86:62:3f:51:58:dc:7f:e1:14:47:d5:0c:b9:0d:02:57:
a2:92:8f:4a:f0:94:af:0f:0e:fb:c0:a6:6c:83:0b:2b:45:4b:
ae:d8:de:ab:e8:fc:f1:b3:05:b8:d1:38:1e:32:5c:f3:d5:b7:
08:84:67:6b:49:07:66:6b:8c:97:91:02:5a:2c:c5:68:61:56:
ff:5e:6a:67:43:2e:dd:c6:b0:a0:54:ee:6c:71:04:d0:f6:a1:
0f:57:85:97:e3:04:19:f1:b4:1c:6f:cf:2c:4e:1f:01:f5:6f:
82:ea:63:82:30:d0:6a:a9:92:c3:91:61:b3:f9:21:10:28:a6:
b4:4a:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:18:53 2026 by rpki-client