Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: FclzONNGoFUnNUpkPN7vDrqcTuuoiRqW3R0DkNKXjg8=
Subject key identifier: D6:43:98:A2:EC:A3:EB:19:7F:83:1E:86:77:8B:39:A4:E6:80:12:27
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01A0CB591FE5F0805B9B9235D14C89DD9E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 176F
Signing time: Tue 22 Sep 2026 23:00:10 +0000
Manifest this update: Tue 22 Sep 2026 23:00:10 +0000
Manifest next update: Wed 23 Sep 2026 23:00:10 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: ZgxErLwC00MZaQZG4rfS59Rkqv4Y+FT5XIFTgAGH1qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:1f:e5:f0:80:5b:9b:92:35:d1:4c:89:dd:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Sep 22 23:00:10 2026 GMT
Not After : Sep 23 23:00:10 2026 GMT
Subject: CN=d64398a2eca3eb197f831e86778b39a4e6801227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:09:6e:45:bd:7e:a4:53:de:a1:6e:0b:f4:
c3:a6:cc:ab:96:33:1f:97:a3:42:25:2d:4e:5e:e0:
f2:c8:d9:a3:65:25:71:e9:28:2e:f0:70:eb:5d:9d:
b0:33:72:0b:93:e1:64:cf:ab:8a:36:9a:60:95:80:
f4:8c:d8:d6:ac:29:fd:07:e6:11:d6:99:9e:9a:1d:
a4:a5:81:74:b5:9c:0d:69:40:bc:1a:03:b0:6c:7e:
85:15:07:1c:91:83:ab:d5:89:aa:9d:d0:53:9d:77:
98:ff:9c:00:78:9d:56:d6:92:3f:dc:ee:da:f1:56:
4d:73:a8:ae:20:38:d7:7d:5d:ad:35:ad:6e:ca:3b:
25:5d:ed:30:3e:7d:f7:75:21:0f:ff:58:eb:cb:52:
b4:07:ce:1b:28:dc:c1:2c:2c:6e:9a:67:9d:62:af:
03:63:3c:eb:2b:56:83:ff:d7:84:19:05:db:cd:be:
3b:40:9d:85:14:44:a0:2d:f5:52:9d:b5:7c:0b:d7:
14:05:43:ac:b2:02:03:bf:36:14:53:78:3e:e3:e3:
9c:18:49:02:a7:43:9c:6b:72:82:0c:0c:55:9f:dc:
08:2d:b1:85:29:a5:c3:89:7c:ea:05:83:dc:dc:4a:
2a:f8:3c:66:63:82:79:7b:f9:6f:51:dd:e3:2e:8c:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:98:A2:EC:A3:EB:19:7F:83:1E:86:77:8B:39:A4:E6:80:12:27
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:cf:78:13:79:5b:d1:16:da:40:c8:88:86:8f:e2:3e:57:
12:2c:70:02:ef:8e:a0:3f:58:c9:64:79:99:17:5b:56:b6:47:
4d:59:fd:bd:b0:1a:03:70:08:db:ce:d3:cb:2e:fa:c2:62:82:
31:86:bf:19:b6:4f:9e:e0:33:35:74:0f:8d:4b:0a:f6:30:11:
54:2b:be:43:1b:0c:e4:10:d7:b6:d2:f0:f9:88:e2:7d:a4:9b:
ab:e5:30:7c:12:1e:f5:9c:d7:3a:a5:e0:72:c5:bd:18:47:2b:
26:78:16:e9:33:d8:01:ac:78:54:ba:3f:3a:c2:71:37:45:10:
b9:7e:40:97:09:71:80:68:34:21:2e:05:a8:38:dd:a3:0f:a9:
dc:31:ff:e6:9c:8f:89:2e:cc:ed:c0:33:c2:e5:c0:7c:e2:dd:
36:71:85:63:47:91:d9:be:2d:5f:04:ba:15:62:b3:02:ee:92:
8a:82:74:80:06:51:49:06:d9:e8:82:6e:b4:bb:09:52:9e:65:
f8:46:8b:35:dc:aa:25:9f:8f:45:37:6d:41:e7:e1:dd:e7:cf:
bb:56:48:ba:dc:81:ea:85:26:a0:9e:f1:1d:ea:80:3e:f1:95:
fa:2b:a1:fb:57:26:f1:99:f2:de:d0:da:c4:29:60:7e:98:b9:
7e:e1:1e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWR/l8IBbm5I10UyJ3Z6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh
MzQ0NjAwHhcNMjYwOTIyMjMwMDEwWhcNMjYwOTIzMjMwMDEwWjAzMTEwLwYDVQQD
EyhkNjQzOThhMmVjYTNlYjE5N2Y4MzFlODY3NzhiMzlhNGU2ODAxMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxIJbkW9fqRT3qFuC/TDpsyrljMf
l6NCJS1OXuDyyNmjZSVx6Sgu8HDrXZ2wM3ILk+Fkz6uKNppglYD0jNjWrCn9B+YR
1pmemh2kpYF0tZwNaUC8GgOwbH6FFQcckYOr1YmqndBTnXeY/5wAeJ1W1pI/3O7a
8VZNc6iuIDjXfV2tNa1uyjslXe0wPn33dSEP/1jry1K0B84bKNzBLCxummedYq8D
YzzrK1aD/9eEGQXbzb47QJ2FFESgLfVSnbV8C9cUBUOssgIDvzYUU3g+4+OcGEkC
p0Oca3KCDAxVn9wILbGFKaXDiXzqBYPc3Eoq+DxmY4J5e/lvUd3jLoyPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZDmKLso+sZf4MehneLOaTmgBInMB8GA1UdIwQY
MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt
ZjM3Y2JhZjdjZTVhLzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh
LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHvPeBN5
W9EW2kDIiIaP4j5XEixwAu+OoD9YyWR5mRdbVrZHTVn9vbAaA3AI287Tyy76wmKC
MYa/GbZPnuAzNXQPjUsK9jARVCu+QxsM5BDXttLw+YjifaSbq+UwfBIe9ZzXOqXg
csW9GEcrJngW6TPYAax4VLo/OsJxN0UQuX5AlwlxgGg0IS4FqDjdow+p3DH/5pyP
iS7M7cAzwuXAfOLdNnGFY0eR2b4tXwS6FWKzAu6SioJ0gAZRSQbZ6IJutLsJUp5l
+EaLNdyqJZ+PRTdtQefh3efPu1ZIutyB6oUmoJ7xHeqAPvGV+iuh+1cm8Zny3tDa
xClgfpi5fuEeAw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:13 2026 by rpki-client