Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: NtqCHiGqs+k0X/KbPJBWAtJWE3iNcmlIMUJwITBq+lE=
Subject key identifier: BE:66:D9:01:F0:C5:6E:22:14:84:75:7F:F0:CB:52:45:9E:82:DA:3F
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019EC1EDF73A02027F8A0F65684105E83C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1661
Signing time: Sat 13 Jun 2026 17:00:58 +0000
Manifest this update: Sat 13 Jun 2026 17:00:58 +0000
Manifest next update: Sun 14 Jun 2026 17:00:58 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: ZVT024DoIdmOCFAaTZUyD1a1bPP/iompEyJS/y1LoQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:f7:3a:02:02:7f:8a:0f:65:68:41:05:e8:3c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jun 13 17:00:58 2026 GMT
Not After : Jun 14 17:00:58 2026 GMT
Subject: CN=be66d901f0c56e221484757ff0cb52459e82da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:4b:63:ca:ac:1b:c6:84:b3:93:a0:44:42:
81:9c:62:f7:20:6a:11:d8:04:c1:bf:34:9a:04:1a:
8a:f6:f6:d0:cb:c2:11:0a:ba:d0:f3:6e:be:89:dc:
ee:fd:51:a5:4c:5b:31:7f:c4:ae:e7:85:42:9a:08:
16:e1:59:1b:a7:ae:ce:ec:f7:a3:ed:45:21:a5:b6:
99:1e:13:0e:2f:f7:f7:aa:a9:54:4f:37:89:d2:7f:
65:b9:5e:61:9b:99:3d:02:31:dd:4f:86:48:5c:0e:
c7:f3:7c:e1:d6:49:ba:e8:9c:5c:aa:18:cf:ba:5e:
49:fe:34:d7:aa:b2:56:e6:49:f3:89:e9:9c:f9:69:
48:93:3f:88:74:35:27:8f:ef:14:b4:0f:82:eb:a7:
86:03:3c:68:b1:87:ec:5a:1d:ef:14:7d:f4:c7:37:
6f:f7:03:86:28:45:9b:ba:89:5b:ff:53:7c:1e:fe:
39:23:40:67:e4:ea:e2:c4:0e:6b:36:b4:86:c7:29:
bc:53:f8:e8:9c:df:10:c5:b1:dd:34:00:c8:51:1e:
c7:0c:ba:c1:29:e4:97:0d:14:b4:9a:ec:ae:60:6f:
98:f4:ff:4c:1e:37:ac:a7:fc:e0:f1:05:f8:17:d6:
a8:18:77:b5:19:22:76:b3:eb:1d:98:cd:f9:bb:3c:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:D9:01:F0:C5:6E:22:14:84:75:7F:F0:CB:52:45:9E:82:DA:3F
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7d:38:8c:6f:ef:c3:2f:91:dc:dc:52:27:ed:cc:d9:b6:e9:
35:30:1c:62:72:e1:a5:9d:9d:75:ca:ef:a8:2c:71:0d:16:53:
03:93:97:5b:67:1b:a2:60:d0:cf:a3:f4:4c:4b:eb:0a:04:7f:
62:4c:4c:69:eb:8f:08:32:7a:dd:8b:50:87:a6:a8:6b:05:0e:
35:b7:ed:49:35:4f:bc:f1:97:0c:4d:f0:2f:16:0d:cb:36:2d:
75:84:4b:58:99:a7:e9:9b:33:82:9d:ed:24:45:72:a6:87:d4:
d9:7b:c0:83:fc:ed:59:68:36:e4:10:d8:4a:3c:56:87:41:1a:
2e:59:38:3b:fa:3b:b4:77:60:12:0e:90:6f:44:70:d6:75:26:
51:c3:30:4a:c8:32:41:40:b8:43:71:b9:40:8e:fa:d0:42:ea:
af:a0:c0:c0:17:34:d2:66:a4:02:28:fe:28:c8:45:35:3c:1e:
1e:f4:ee:0e:88:bc:7e:b7:1f:38:f9:bd:ee:c6:7e:6d:71:a4:
d0:da:44:91:52:4b:e5:51:dc:2f:67:49:03:df:bd:38:e8:7c:
74:bd:98:26:a4:63:d1:d4:f6:f6:c4:9c:54:8a:6a:b5:d0:e0:
bd:2d:68:24:2c:c0:92:6f:34:90:38:e2:37:53:68:65:05:f5:
64:a2:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:05 2026 by rpki-client