Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
File: onxkG1MKfGuiNAIuMyckYjI2cQA.mft (raw, json)
Hash identifier: WKb9rGBLqw9K8fnoztwILaCvE0klxBBi+WZzSWhhQew=
Subject key identifier: 4F:7C:C6:86:CB:56:17:B3:3F:29:C9:53:21:54:E7:C1:5C:AD:FF:59
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 01A0C2FB79EF3F8DF7650A5E44EF76C30FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
Manifest number: 0FAB
Signing time: Mon 21 Sep 2026 08:00:55 +0000
Manifest this update: Mon 21 Sep 2026 08:00:55 +0000
Manifest next update: Tue 22 Sep 2026 08:00:55 +0000
Files and hashes: 1: H3RmjMDhi-VIQKw953O9EUU-NrU.roa (hash: u8dYTQtYNEtT+hfaZbOUxQvhTTWTaktw3famZ+VPWSU=)
2: KHZ6X050RQpN8C-zU6JBaEYg3FI.roa (hash: TDPzA+FjAhUQy2Fbl/oOlKCfde+8XwBa4JB9fFqOvmY=)
3: onxkG1MKfGuiNAIuMyckYjI2cQA.crl (hash: PcohgnZbJojpXlJSdNgFjyjTNuQZeoGiIoiNyDm5z3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:79:ef:3f:8d:f7:65:0a:5e:44:ef:76:c3:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Sep 21 08:00:55 2026 GMT
Not After : Sep 22 08:00:55 2026 GMT
Subject: CN=4f7cc686cb5617b33f29c9532154e7c15cadff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:cc:33:e4:2f:0d:08:77:db:1a:fd:86:00:
7c:93:22:7e:11:83:ab:7a:3a:52:6a:e3:4f:b1:69:
67:28:a3:61:9e:25:2e:e9:47:a4:d5:7e:c3:ea:87:
6c:c4:cb:cb:54:7e:43:59:20:34:67:4b:13:d8:14:
fe:c0:01:ba:dc:f7:dc:d4:8a:c8:52:25:45:d3:a4:
f3:02:8a:3c:c5:ed:0a:4e:d1:6f:93:a0:52:8e:a0:
18:44:b9:1f:7e:3a:25:20:6b:e0:48:82:e8:cd:3a:
22:dc:11:0f:cb:1f:87:e7:14:bc:12:ea:16:3d:a3:
5f:77:b8:ee:ba:d6:cb:08:a5:d1:aa:0a:e8:69:c3:
74:98:bc:c0:b7:49:69:54:31:38:7a:df:74:38:f0:
40:9b:a2:45:bc:dc:a9:85:47:4b:89:55:9b:82:d2:
86:a9:ee:ac:10:7a:83:a4:ea:58:66:c6:6c:d6:47:
30:e0:db:43:5d:5b:83:c8:32:08:3d:ef:19:e2:c6:
9b:a3:80:96:26:7f:3a:7e:87:a2:7f:a3:5c:36:19:
a4:6a:3c:59:84:3a:15:3f:55:35:19:39:ce:f9:1a:
7c:6b:26:71:f0:5a:8e:e0:8b:f7:55:ae:7a:b2:d7:
97:c7:f0:bd:b5:df:8b:49:72:f3:ce:1f:06:72:70:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:C6:86:CB:56:17:B3:3F:29:C9:53:21:54:E7:C1:5C:AD:FF:59
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:da:5a:ac:65:3c:81:e0:62:e4:ee:20:12:dc:4c:d5:cf:
c5:65:95:5d:ee:90:5c:13:f0:95:7c:0b:f9:22:f8:a0:a2:6f:
84:fd:76:15:65:d1:c2:05:3e:ab:8e:ab:65:b2:9a:8b:a7:ac:
21:6e:91:46:ab:b7:a8:43:aa:bf:8a:e5:49:63:85:fb:0f:89:
ea:fd:f1:52:fa:0c:ce:a6:bd:60:b4:5b:8e:e3:2c:aa:7c:d7:
0b:18:b8:1c:8d:f8:f6:bd:1c:fe:6e:14:10:2f:2f:f2:63:4a:
e2:51:32:0e:80:ac:06:7d:88:f8:69:b6:d8:44:e2:6f:f7:91:
fa:d2:40:d5:7d:80:97:e1:92:54:86:bb:03:f9:03:41:d8:79:
9d:8e:34:65:09:4a:2c:93:79:5b:b4:f9:f1:4f:ad:80:5e:72:
8a:33:88:e9:85:c2:e8:1a:b4:72:51:68:60:e4:ef:1f:13:df:
c9:00:a9:91:77:2c:33:00:10:b3:cd:4f:36:c6:dd:88:e7:5d:
fa:c0:5a:30:f5:e5:a4:e9:05:e0:8d:d5:a3:f0:f5:e4:5b:3c:
53:18:a3:46:74:14:7f:0b:2d:be:41:bd:da:e3:4c:7c:9d:81:
35:dd:cc:92:70:56:8e:29:bb:96:e6:54:46:28:08:df:c4:ee:
30:3e:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:19:20 2026 by rpki-client