Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: 2NErbH39qc8tgyIid22HRLfFJI3CKKSvnMPqQFyl050=
Subject key identifier: 4E:63:72:72:75:61:3D:E6:EC:2B:B4:45:9E:74:F6:90:64:C3:5A:84
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019D3752E091975048524FC7076E2042E736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 126B
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: 8ETffafQfm2nMK+klCKEKc0693HjxqdghYJWx6j1yRI=)
2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e0:91:97:50:48:52:4f:c7:07:6e:20:42:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=4e63727275613de6ec2bb4459e74f69064c35a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:4c:ba:bf:79:31:2e:40:c5:15:11:05:46:
5a:05:02:9f:f6:66:7c:81:e5:5a:6c:a3:97:61:bd:
97:1e:8f:8e:a4:b1:a7:9a:f8:4c:67:08:98:04:28:
51:07:a4:07:86:04:69:c0:f3:ab:f1:35:dd:5b:b1:
b1:26:b6:7a:a0:03:be:d9:e3:6d:8c:1c:39:35:a4:
6c:68:20:a6:e3:c4:ae:29:f1:0d:db:b1:ea:77:09:
56:56:e9:2c:59:56:24:06:b6:32:51:0f:1e:77:2b:
bb:b8:f2:fe:75:10:64:5c:56:76:c0:2c:97:de:f9:
ae:78:e1:79:9e:c9:c6:6e:8c:79:c8:24:fb:40:c7:
9c:4b:d3:ff:a9:39:32:86:f1:02:c2:76:06:a6:fd:
84:34:e4:72:71:eb:82:e2:5c:90:bf:e5:e1:25:54:
fc:78:79:d2:fc:e2:17:fa:f7:4d:ec:3b:4d:fa:c4:
90:31:bc:4d:91:1f:f5:cb:23:95:35:d2:02:03:cf:
e2:09:cf:88:b4:2b:33:38:a4:1f:ca:fe:a8:35:fa:
ec:f0:2e:da:02:c6:60:97:02:df:41:a9:bc:26:08:
40:d7:5a:4a:d2:21:d7:8c:6d:81:18:a8:9c:b4:6e:
83:d6:23:77:6e:56:18:46:ad:96:22:17:f9:87:4e:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:72:72:75:61:3D:E6:EC:2B:B4:45:9E:74:F6:90:64:C3:5A:84
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:21:a0:26:cf:a7:f4:4c:4f:9f:c1:df:63:53:bc:7e:ea:
8b:33:2e:be:8c:0c:1d:c0:93:e5:98:3e:f5:f5:ed:3a:24:c8:
c2:aa:5e:de:e5:f0:f3:75:80:3a:ff:20:00:d5:83:82:4a:70:
5a:87:33:52:b1:9b:25:91:5d:7a:ca:2f:f0:23:6f:23:49:05:
73:1a:73:b0:71:10:7f:a3:88:c4:bd:b1:82:e4:29:f0:d8:c8:
72:7e:85:95:dc:9f:40:0d:19:03:03:71:1f:30:a4:36:87:02:
1b:29:36:7c:e9:6c:83:d1:f5:5f:59:fd:15:dd:e7:d2:e5:ef:
b2:bf:41:f8:45:f1:e2:06:f0:09:99:40:7d:15:4a:60:44:30:
3b:66:51:53:c8:59:90:52:4c:c5:ff:e5:ef:0c:45:03:1a:d5:
0c:26:af:be:c1:6f:df:df:46:e2:09:0a:fc:0c:f3:25:ca:7c:
86:f6:0f:73:32:10:cf:21:c9:06:ef:19:ea:76:c3:65:00:82:
5a:2b:31:f2:a3:60:09:46:85:12:af:0c:f7:06:f4:57:40:2c:
53:65:52:c2:be:c9:0d:1b:ad:99:f3:f6:33:67:fe:df:b7:45:
01:e6:aa:30:78:57:db:35:d7:80:d1:33:6a:bb:59:74:3e:04:
57:cc:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:03 2026 by rpki-client