Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: qK9ArVEt7YZXoi3OSeRscmaK5Hr0Spprjld68gtQL+U=
Subject key identifier: AF:4C:4E:3A:BC:C1:87:46:EA:31:E1:B5:BC:74:E6:65:34:EB:02:89
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 01A1ABCCDDD9D26EB57F68864F48015423D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 11C4
Signing time: Thu 05 Nov 2026 13:01:32 +0000
Manifest this update: Thu 05 Nov 2026 13:01:32 +0000
Manifest next update: Fri 06 Nov 2026 13:01:32 +0000
Files and hashes: 1: Ay8bkrrQ4W8en6WQA0oZqxfliDY.roa (hash: eQ24k3su4taaH0Z4GfAAZBwUKUzpQjLgnBxCtBNBzyI=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: 5Rzehth3W/VpUYaXLlroxaHfzOpgsQbihhHs0ucmaaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:cc:dd:d9:d2:6e:b5:7f:68:86:4f:48:01:54:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Nov 5 13:01:32 2026 GMT
Not After : Nov 6 13:01:32 2026 GMT
Subject: CN=af4c4e3abcc18746ea31e1b5bc74e66534eb0289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:8f:18:b3:46:a4:88:9b:be:b7:50:43:d1:
6e:cc:81:01:7b:ef:ae:d5:af:e1:34:18:81:ec:10:
21:e2:9b:f9:39:85:7c:27:38:49:bf:1d:e0:27:b4:
a2:01:26:78:8a:f5:65:7c:90:ce:98:bc:c5:0c:d1:
c7:6b:d4:a1:02:a4:0d:53:83:3f:0d:37:9e:18:ba:
d2:d0:44:fa:76:92:0b:3e:12:f4:a1:b3:8b:99:9a:
c7:16:f1:6b:a8:e8:16:18:f5:63:f1:58:82:b8:6d:
0a:f3:ef:3d:0f:9b:32:b9:d0:39:ce:b9:38:6c:28:
4d:db:12:f1:06:5c:8c:6d:5f:88:39:bf:ed:9d:32:
e7:3f:b0:b1:b9:47:c0:a2:0a:85:a5:5c:78:58:c7:
5a:7e:58:3b:f8:50:02:98:ab:b2:52:20:28:1a:36:
43:1b:44:b4:fb:d4:2b:37:9a:50:9c:cf:2c:c4:2c:
9e:1f:1c:5b:1a:d5:da:ca:c4:9e:16:3c:47:84:b9:
0a:85:a6:33:2a:8b:56:1a:da:e9:99:a2:29:4e:46:
31:c9:12:47:84:16:51:f9:66:8f:05:8c:49:1d:a0:
d2:dd:50:eb:43:6c:69:7f:b7:21:f4:45:0d:d4:67:
64:dd:68:bf:4f:69:ad:c2:52:6a:7a:e8:1c:38:fe:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4C:4E:3A:BC:C1:87:46:EA:31:E1:B5:BC:74:E6:65:34:EB:02:89
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:10:42:ef:70:d3:71:46:94:02:6f:5d:77:aa:7d:05:65:c7:
fc:dd:7c:9e:b2:76:dd:8d:22:f1:13:f7:ed:a2:74:6f:43:a2:
39:20:38:97:7d:10:5a:97:fe:fb:8b:4f:03:9e:56:fd:aa:e1:
12:b5:27:f9:42:76:b3:31:34:81:a5:45:28:3c:29:f1:86:3a:
33:0e:84:85:36:ad:53:c9:e1:00:33:6e:47:09:c6:eb:23:8c:
a5:ac:e8:76:67:1d:89:6b:5f:74:24:9b:23:4b:a5:b8:7f:49:
0b:0d:b5:66:0a:8b:47:06:61:46:4a:8e:fe:f4:37:4d:39:c4:
76:df:62:c0:74:bb:19:8d:55:ad:5b:c2:61:04:aa:d9:c6:b0:
70:25:1a:32:55:9c:79:f1:a6:62:ab:77:ca:df:f8:25:ed:ef:
e3:71:70:95:da:78:05:65:16:63:63:a2:03:f4:e9:fe:66:1f:
2d:b3:10:ed:39:d2:bd:a8:a3:84:af:d4:c2:4a:07:5a:a1:4c:
ff:23:84:76:0a:97:35:ac:9d:1d:ec:c9:6a:3c:a8:da:39:91:
95:2b:35:bd:e7:dd:ef:78:9f:4c:9a:3f:96:01:db:5f:cb:a2:
02:a2:12:be:2e:57:17:c7:ca:0f:df:f9:c9:67:9d:42:49:5d:
77:bb:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:50:08 2026 by rpki-client