Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: ZBVCKCxXQRB1wGtV4ekknPU8Rzn+J0DNTKssQIUnWGI=
Subject key identifier: F7:DE:B5:6C:40:71:C1:83:9E:C2:23:91:59:71:5B:6F:86:6A:A5:6D
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 019D9A3E10C85A2AF7B54F30DB9C1FDAA5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 09A7
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: ER7043w15E5TfxjID-TYUpdQDx0.roa (hash: QCEnuybWNl7OwdBInx1m2/kcO9FbiGhdTyF0PQgFlqg=)
2: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: 7ou18GwHj8CTjMslVnhYZMgppOaMZ64jJdgnSpqMnyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:10:c8:5a:2a:f7:b5:4f:30:db:9c:1f:da:a5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=f7deb56c4071c1839ec2239159715b6f866aa56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:ff:50:d4:9a:31:ed:b3:c2:88:05:bf:fd:
cd:81:45:2b:89:16:3b:86:58:c8:9b:84:58:d5:f4:
49:3a:de:24:40:1f:4d:e4:60:58:6c:bd:6a:78:2c:
31:45:a8:75:0a:28:d7:5f:ae:20:90:36:da:44:7d:
ce:ff:77:3f:35:7c:48:56:2a:d3:39:c2:f1:d6:31:
d0:8e:69:8e:d1:41:50:a5:5c:82:d7:7b:8b:89:40:
3c:ac:37:e0:08:8e:82:93:bc:12:23:93:d2:39:94:
8f:c0:85:f7:9c:94:32:29:f9:54:79:fe:85:a9:29:
a0:63:39:9d:2f:b0:8b:a8:19:fd:a3:1e:23:ed:73:
fa:1f:7c:25:16:83:13:d8:9f:8e:11:12:c7:a2:97:
f9:83:ee:72:2d:72:15:69:a5:b2:40:21:a3:32:50:
e2:c2:89:52:5f:b4:72:fa:90:db:2c:98:83:a1:e0:
85:83:bd:6f:5b:09:62:7f:96:64:6f:a6:d2:5a:a5:
a4:81:86:12:c5:9b:4e:ff:21:a8:98:29:82:65:e3:
55:9a:7d:8a:09:38:18:98:35:fd:b2:f5:7f:1d:fd:
08:27:23:39:47:38:e1:c5:f9:b2:80:b6:e1:cb:af:
d6:e9:02:37:0b:77:db:bd:ed:02:c3:e5:a7:3d:e3:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:B5:6C:40:71:C1:83:9E:C2:23:91:59:71:5B:6F:86:6A:A5:6D
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f7:10:cd:19:dd:25:48:df:c2:3e:c4:61:ab:90:f4:d8:7d:
d0:64:72:21:7e:c9:b7:a8:20:db:49:2d:78:9b:90:a6:5b:b6:
7a:fb:d5:0d:ec:1f:88:90:f3:cc:f2:74:79:c9:49:cc:88:17:
83:67:62:4b:43:d9:c3:3d:5d:19:a2:32:e3:2d:e0:39:8e:0a:
e6:d4:6e:e0:84:0f:75:dd:ed:98:28:47:82:d9:38:bd:a2:fa:
34:72:7f:8f:e5:ec:26:d8:c9:3c:c6:69:c9:ee:6c:89:f5:c9:
ec:e3:0b:e0:df:ed:dc:7c:68:67:fc:46:57:88:b5:ef:75:e4:
44:ed:0f:6d:53:c7:c8:9b:be:55:cb:59:1a:c7:81:6b:47:1e:
b4:4e:92:a5:1b:5e:05:23:a8:ea:52:9e:6e:6a:40:1c:7b:81:
bb:59:39:b9:fe:de:a0:47:86:e3:2d:65:30:7f:db:fc:2d:94:
10:82:ae:90:8d:f9:1c:f6:23:42:31:9d:c4:29:f6:1b:6f:9d:
3e:cd:a8:9f:9c:55:7b:b0:cd:ca:a5:8f:4f:19:22:28:3a:ba:
cd:ab:64:5c:ab:ed:ac:6b:bd:f2:a3:de:ea:04:12:14:a2:9a:
eb:12:d0:16:6d:3f:37:31:91:33:31:3f:72:ec:ba:7f:e3:42:
12:20:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:10 2026 by rpki-client