Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: QmRTIStRUjK9/m1gfEvEAt22lZIAaBlk8hOaSAr41G0=
Subject key identifier: 8E:7D:7C:18:06:B0:C9:72:75:A4:41:0A:63:B2:08:CB:19:80:D7:15
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 019FAA1A67B61959857A2AE7013FA00BEE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 10BA
Signing time: Tue 28 Jul 2026 19:01:24 +0000
Manifest this update: Tue 28 Jul 2026 19:01:24 +0000
Manifest next update: Wed 29 Jul 2026 19:01:24 +0000
Files and hashes: 1: Ay8bkrrQ4W8en6WQA0oZqxfliDY.roa (hash: eQ24k3su4taaH0Z4GfAAZBwUKUzpQjLgnBxCtBNBzyI=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: PoZ8NK10B2IcIppS554bkMW5kNuLviVR1yCnm77jFcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:67:b6:19:59:85:7a:2a:e7:01:3f:a0:0b:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Jul 28 19:01:24 2026 GMT
Not After : Jul 29 19:01:24 2026 GMT
Subject: CN=8e7d7c1806b0c97275a4410a63b208cb1980d715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:b5:c2:00:31:bd:9c:b0:60:4e:ef:a8:f7:
26:61:4a:45:56:f7:95:59:1d:a4:69:f0:20:7c:fd:
30:57:78:12:a5:3e:ed:7c:63:03:a4:88:ed:07:38:
93:8b:0f:e2:92:d6:0e:69:f6:14:c1:47:7c:a3:a1:
29:90:f6:67:1e:74:b1:01:17:f1:8d:01:54:0f:89:
b9:ac:93:6f:e4:0e:09:77:48:45:3e:14:b8:4a:7a:
56:a6:07:0e:b6:06:ab:5c:7c:d7:05:ff:34:22:41:
74:4b:91:03:de:e5:9d:16:69:ab:22:28:91:bd:b1:
13:9f:75:2b:52:7e:19:d0:b2:7e:55:f2:d9:34:08:
cb:93:b2:55:69:ac:fc:65:4e:b5:23:2c:2e:45:31:
53:17:ff:0e:60:e6:5a:65:55:77:50:bc:5a:af:8f:
49:a8:a5:c1:91:99:e3:6a:18:00:83:86:0c:3b:bc:
ca:54:eb:3f:9f:8a:08:3d:85:0b:a5:43:93:90:05:
02:ec:7e:d7:0c:fb:b2:a4:8a:b9:ac:0c:55:8a:ec:
2a:bb:8b:28:04:26:53:f0:e0:b8:68:37:f3:a5:9f:
cf:fc:3c:26:0d:5f:a7:df:94:2d:4b:16:16:39:1d:
93:96:03:19:5e:7d:48:64:16:8f:d4:7e:d0:75:62:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:7C:18:06:B0:C9:72:75:A4:41:0A:63:B2:08:CB:19:80:D7:15
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:98:2a:97:cd:42:39:c1:3f:a9:75:09:f5:fd:99:82:3a:90:
76:78:ab:1b:c0:68:15:8c:1c:a6:33:a4:f9:54:f8:c7:da:5d:
ef:d7:1f:77:0b:43:51:74:18:b7:40:8e:a3:cb:2f:29:ad:7b:
b3:02:d8:cc:ab:5d:68:a3:2e:68:ae:28:4f:44:b1:2b:72:de:
5e:c0:81:9e:84:be:2a:cc:01:45:f3:2c:5a:6d:de:b2:6b:91:
50:c1:a3:1e:8b:a5:de:b4:a8:58:ba:35:f6:2a:5c:23:74:2a:
c6:61:da:d7:68:d2:e4:2b:f1:63:90:2f:43:af:61:c5:74:22:
36:70:9f:50:eb:5a:36:17:c2:6f:f6:6c:df:b9:99:6e:5b:aa:
9b:68:31:5b:bb:ee:b3:50:4b:ab:f2:9d:e5:a2:6f:d1:92:22:
bc:69:d9:9d:78:87:f6:d4:1f:f3:79:55:44:1c:fe:5b:e5:a7:
81:78:5d:e1:0c:0c:63:b0:d1:be:bb:fd:32:d4:c2:74:15:2b:
19:a3:ed:5f:2a:95:be:77:7a:75:d9:97:a7:06:ad:35:2c:3d:
dd:c6:cb:45:2b:93:c9:75:52:bd:05:78:34:ac:06:c6:19:02:
33:7c:86:8a:28:6c:aa:65:f6:4f:39:ba:94:4d:54:0f:8b:60:
35:25:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:03 2026 by rpki-client