Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: dE/A9ZukZ2R22l7NV9zOK7wE3/XxZFpsdRPm1U8ly4g=
Subject key identifier: 38:23:FE:1C:D6:0A:4F:25:8D:64:55:94:8C:D8:BC:8E:07:24:A7:F6
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019D98867A27B2E84C3DD96B7E8C1C6A8338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 15C7
Signing time: Thu 16 Apr 2026 23:00:43 +0000
Manifest this update: Thu 16 Apr 2026 23:00:43 +0000
Manifest next update: Fri 17 Apr 2026 23:00:43 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: tnTeTUhvdh/HivWcoQZBbVhNdCM9VtTrZy4So4GN3QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:7a:27:b2:e8:4c:3d:d9:6b:7e:8c:1c:6a:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Apr 16 23:00:43 2026 GMT
Not After : Apr 17 23:00:43 2026 GMT
Subject: CN=3823fe1cd60a4f258d6455948cd8bc8e0724a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:e2:b4:cd:6d:a5:31:f3:d5:5b:5b:a6:42:
10:43:d3:98:8c:e1:32:17:6b:69:df:0b:b0:15:99:
b4:e0:b9:e2:f3:19:1f:18:88:13:8d:37:7c:ba:af:
8f:73:7a:6c:bc:26:8c:1a:ae:3a:17:6c:e1:8f:4d:
62:b6:25:da:86:1d:0a:ef:0a:d6:13:ad:1c:81:13:
7f:76:8f:f6:d4:9c:5c:84:3e:c1:d4:53:d4:0b:1c:
ad:be:02:1e:91:bf:d7:d2:52:fe:8b:03:4f:52:eb:
87:b2:aa:29:97:15:a3:90:81:14:6c:80:ca:7c:0d:
3c:8c:98:e3:b2:f4:03:70:e3:f3:0b:25:d2:14:de:
51:d7:68:e3:e0:0c:51:58:6f:79:9f:f9:7c:f9:25:
55:10:45:84:5e:da:08:7d:64:26:2d:33:f7:2a:ae:
b9:07:b0:97:5a:9f:35:17:a5:e5:97:b2:30:92:fb:
8f:23:12:e6:2d:00:b2:d5:e8:aa:3e:04:df:ef:db:
19:31:91:74:5f:17:72:fb:40:8e:c3:1c:24:60:ce:
23:f1:2b:37:5b:dc:a3:14:6a:2b:04:35:07:c7:2d:
95:99:fd:f1:a8:f8:10:aa:99:c0:24:d7:89:e7:c1:
dc:b9:cf:21:9b:ca:d6:48:9e:a2:23:e6:ce:53:6e:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:FE:1C:D6:0A:4F:25:8D:64:55:94:8C:D8:BC:8E:07:24:A7:F6
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:c2:f8:e3:24:40:40:74:af:2c:a9:17:fa:19:03:f7:ec:
5d:95:12:3f:16:8f:eb:e1:87:ea:79:72:e9:2c:6f:a0:f2:3f:
5a:c8:fa:47:be:61:51:3b:db:01:dc:b7:71:ec:cb:3a:43:98:
a6:a9:9b:db:e0:8a:e0:14:fe:b7:e1:8a:bd:54:28:37:db:3c:
3b:03:d1:1e:79:8b:86:50:bb:b0:ec:7c:24:c8:91:91:d2:b0:
92:ad:76:bc:01:91:d5:1e:78:05:4e:5f:bd:92:a6:3a:ce:29:
59:ee:b5:8b:61:01:77:7f:0e:fd:2f:62:73:65:d2:3a:90:5e:
7e:d8:c8:87:3a:a0:16:84:f6:d6:1e:c9:7d:3a:38:54:9c:ef:
df:a6:c8:ec:21:b9:33:59:6a:e0:6f:2f:8e:a1:e9:1a:0e:1f:
eb:d4:be:e9:eb:b1:d0:5e:e5:e2:73:4b:ef:f6:11:be:ea:65:
4c:a0:67:de:dc:ae:28:51:8e:91:4d:d9:34:a2:3f:f7:10:a9:
6c:b1:49:b9:09:7c:cd:b0:5c:95:b2:9d:82:5f:67:fa:42:ac:
42:e4:c6:69:f4:9f:fd:9f:58:de:0e:7b:23:eb:dc:bb:f8:ef:
c2:76:c9:9a:b3:10:4c:7d:b4:66:43:45:dd:9e:5a:11:ba:92:
81:10:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:49 2026 by rpki-client