Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: BwyS9oPwbYOAL/6NLMAK0PhoHtzkg/yU0kLnn3J+kBQ=
Subject key identifier: 85:E4:6A:52:D9:C0:3E:77:E3:B3:F7:5A:04:50:AF:51:DD:BA:69:47
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 01A0C031C8BE6544F11C44D8BE53FA7EB346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 114A
Signing time: Sun 20 Sep 2026 19:01:23 +0000
Manifest this update: Sun 20 Sep 2026 19:01:23 +0000
Manifest next update: Mon 21 Sep 2026 19:01:23 +0000
Files and hashes: 1: Ay8bkrrQ4W8en6WQA0oZqxfliDY.roa (hash: eQ24k3su4taaH0Z4GfAAZBwUKUzpQjLgnBxCtBNBzyI=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: gti9xdbZ62vErZl5Ct5FzlPLxwk58PcFl8Be2jXgQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:c8:be:65:44:f1:1c:44:d8:be:53:fa:7e:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Sep 20 19:01:23 2026 GMT
Not After : Sep 21 19:01:23 2026 GMT
Subject: CN=85e46a52d9c03e77e3b3f75a0450af51ddba6947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:bf:06:7e:40:e9:28:b6:fa:20:f1:92:58:
80:7d:bd:92:f6:72:5c:4a:7d:17:7a:62:f7:bb:a7:
a3:ee:95:11:d1:bf:00:4a:12:77:47:e6:14:9a:ee:
6a:d3:7c:74:2d:ae:50:9f:f5:50:e8:eb:ec:96:00:
13:ad:21:d7:59:53:cc:0f:52:f9:27:9d:66:0f:21:
a5:66:4f:53:b3:f7:74:59:89:09:19:39:14:1a:21:
6b:56:5f:b6:0d:6a:3d:a6:05:8e:6f:dd:1d:fd:a0:
00:d9:78:18:25:01:10:cb:a1:ce:1e:89:e9:9c:f4:
32:93:13:89:b0:d5:8f:b1:8a:54:98:fc:df:ac:4a:
d7:89:eb:c6:cf:62:d8:58:9d:50:e4:8a:03:97:4e:
d9:19:f7:6d:85:f3:a6:a7:1c:14:fe:7f:e6:14:11:
8c:8f:18:88:96:69:e6:c1:5e:cb:76:b9:ab:70:94:
55:4a:f1:54:c8:9f:3d:f2:f1:21:93:61:e6:cb:f9:
50:43:b9:ad:77:59:9b:14:40:59:21:cb:4d:63:25:
28:f8:6e:27:7e:3d:de:00:02:4b:c4:b8:6c:a5:30:
82:80:51:af:58:06:0c:84:8a:55:15:99:4d:e5:ce:
8c:d8:b2:64:ba:7a:f2:76:50:d8:55:15:c6:6e:5d:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:6A:52:D9:C0:3E:77:E3:B3:F7:5A:04:50:AF:51:DD:BA:69:47
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ad:3f:f2:48:2d:b8:65:7f:1c:b8:e3:8c:59:f3:01:c2:59:
af:f1:fa:da:94:57:b7:53:a1:57:f7:f7:08:f4:0d:b2:30:73:
53:69:fa:95:79:39:13:57:69:48:da:09:54:99:f8:1e:db:2a:
90:7c:36:a4:1b:fd:74:4e:26:4f:65:bc:d1:40:60:81:e4:a7:
3e:a8:56:b8:ee:b6:4a:26:49:29:bc:0b:36:eb:82:11:f0:d7:
53:cf:92:c4:69:eb:87:d7:41:8d:6b:ae:4b:8d:83:d5:06:90:
df:88:9f:4f:d6:90:18:ca:f0:ca:01:52:ef:5f:41:da:3d:6d:
43:2f:6a:da:9d:1e:8f:1f:42:7a:35:b1:be:fa:46:74:6c:1c:
81:d5:d7:6c:0e:6f:3b:fe:e5:f3:d2:03:62:ff:d3:8d:2a:7f:
1e:8e:ed:e1:bb:aa:46:c0:a1:91:a2:23:b1:1b:06:26:94:19:
58:d8:b2:77:64:db:ee:0b:e2:6f:0c:2e:1e:84:78:0a:94:51:
3e:ae:de:b3:7d:5b:c2:87:1f:55:07:ce:d2:1a:32:c5:be:8d:
aa:3e:72:fc:07:86:28:52:bf:55:de:0a:77:b3:f3:8e:a2:4e:
74:61:b2:14:af:2b:0d:51:a4:ff:b8:49:af:d5:34:3e:d6:38:
cc:8f:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:36:48 2026 by rpki-client