Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: feJRnZujaXf5uhWp9l4tSAtyjSPEsccpLSCaQveJDiE=
Subject key identifier: 5F:B0:F8:19:0A:D3:41:12:D5:B0:71:3A:AC:51:87:4A:BF:20:58:27
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 019CAAC6466B337D43A36539C1816B5BE000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 092B
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: ER7043w15E5TfxjID-TYUpdQDx0.roa (hash: QCEnuybWNl7OwdBInx1m2/kcO9FbiGhdTyF0PQgFlqg=)
2: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: 3DSFSatK4CpFRTy8ofl5yPYOTS4oRYRHNMqVPcTgruo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:46:6b:33:7d:43:a3:65:39:c1:81:6b:5b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=5fb0f8190ad34112d5b0713aac51874abf205827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:65:d3:55:36:6b:1d:d0:dd:4e:48:72:71:
c4:97:54:b6:e1:a4:c5:73:3b:d8:48:a1:41:e2:b4:
a4:99:57:89:17:ce:c7:1a:c7:46:f5:e4:2f:e6:86:
b9:9c:18:44:53:f5:f8:af:ab:c4:c9:b0:0c:58:10:
ec:31:f1:d0:2b:7c:b1:14:5f:14:d6:e5:8d:a3:ad:
85:ef:de:07:96:da:51:c3:53:3b:43:0c:de:7e:01:
b2:c9:d4:33:c7:33:d2:6d:58:86:57:b1:06:49:f4:
37:9b:1c:3a:8b:2a:9a:89:32:be:ef:99:cf:b0:5e:
a0:f2:3a:89:51:e1:4c:53:74:1f:19:bd:57:f2:27:
76:4f:67:4a:17:df:bb:08:ef:5b:35:05:98:49:0a:
50:3f:fb:73:70:81:e4:c9:6e:57:70:2d:1e:80:7c:
07:ce:dd:e7:6b:cd:39:17:1a:8e:c6:68:36:b7:e9:
7e:81:6d:b7:51:32:54:45:64:9f:66:d7:1b:42:b5:
cc:e8:8c:8e:00:3b:17:73:e3:e6:49:0c:5a:1f:f7:
56:36:58:da:e8:bd:45:96:e8:c4:c1:72:a3:c5:37:
18:e8:43:af:db:71:16:2a:48:2d:5d:b5:c7:a2:ba:
ef:bf:7f:6e:b5:02:bc:d9:fb:14:c9:3a:2f:ce:0a:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:F8:19:0A:D3:41:12:D5:B0:71:3A:AC:51:87:4A:BF:20:58:27
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9e:9f:35:38:a8:1b:f9:73:0c:14:a8:7a:c0:d2:aa:2c:d0:
95:fb:cd:4b:8d:37:44:44:79:9a:75:16:4b:2a:79:de:ab:bf:
62:40:d5:5a:9b:44:47:c8:2e:8e:62:df:55:d8:d3:89:a6:76:
a3:95:8d:7f:c8:a4:a7:95:e9:0d:0a:09:4c:1a:74:87:0c:73:
76:1a:6c:0b:52:46:2d:42:4f:7c:54:1a:12:70:78:79:2b:fe:
32:e0:ae:cb:d9:a1:13:66:63:ee:25:1b:2b:65:79:f3:49:67:
66:08:a7:77:d3:0d:1b:36:dd:07:9c:b8:fc:23:22:c4:1d:6d:
8d:19:58:10:d8:b6:97:b3:e0:76:dc:17:40:11:95:8e:8a:6a:
86:6e:58:3b:d3:7a:ed:94:07:d8:19:5a:8f:a5:60:10:76:2d:
a1:c3:ab:d2:e6:cf:f7:85:2a:18:b0:bf:56:fa:37:2b:6f:70:
c1:21:3f:0a:e4:75:6c:6c:e3:6c:2d:8f:3a:43:da:da:54:fa:
f6:72:32:04:3b:85:a6:2c:1c:4e:af:fd:9a:dd:32:d8:62:95:
75:d6:72:5e:16:bb:0d:c8:d0:80:e1:8a:67:01:a7:17:64:05:
6b:65:ec:e8:ce:a1:4a:d9:f8:e0:30:30:ea:d6:25:a6:2f:88:
d3:ef:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:39:53 2026 by rpki-client