Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: zV7zVCO/l7vQkyhei4Vp2OAilV4DYPZ1BBeGEMM6Jlo=
Subject key identifier: BE:31:8C:9A:26:75:38:E3:E1:95:54:80:8E:54:AA:97:A1:19:18:22
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019CAAFD3E5BCB4B591EAC8D63CB9BB5EB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 154C
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: P63dxolQRIiCypODkBd2qSXAHpPs7W18lybbfU42ECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3e:5b:cb:4b:59:1e:ac:8d:63:cb:9b:b5:eb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=be318c9a267538e3e19554808e54aa97a1191822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:0f:d6:e1:0c:46:54:70:49:d8:5e:3d:9e:
d6:06:43:69:6e:af:b0:c9:b7:b9:80:61:e5:17:a4:
19:7a:0a:67:ca:bd:b5:05:2f:4e:43:73:b4:f0:dc:
1d:53:ea:c9:43:24:a4:29:00:a5:d6:f5:d5:69:67:
d0:b3:3b:37:f7:3e:8a:a4:37:72:18:98:95:42:15:
d2:ab:1e:30:69:c4:d0:86:62:93:f5:ba:a7:f3:79:
54:95:19:33:cb:a8:7c:b5:a4:8d:1f:f7:61:71:b2:
ca:58:21:72:c7:9e:91:e2:9f:f7:83:ba:dc:67:56:
30:2b:bb:68:26:62:11:f2:a3:a3:7d:bf:13:b3:95:
c7:e5:97:d8:e2:91:96:9a:34:b4:90:42:52:91:ad:
77:9d:be:fb:df:cb:c1:9a:25:eb:82:4d:3c:1e:d6:
91:9a:c4:a2:85:e4:ec:bf:7e:16:25:b4:59:df:b1:
45:60:b2:e1:d4:d3:e1:07:7f:5a:ee:45:9e:dd:8b:
ad:82:91:21:c3:0d:d0:54:f9:51:df:59:06:46:39:
dd:c1:f8:60:28:51:9b:74:a5:d1:9a:65:7e:0a:81:
d8:ce:fb:93:5e:9c:4f:c1:67:f6:e4:0a:be:79:1c:
e2:aa:7f:96:0e:68:b8:34:3d:23:e0:fc:00:d5:5c:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:8C:9A:26:75:38:E3:E1:95:54:80:8E:54:AA:97:A1:19:18:22
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1c:4b:43:61:f6:da:53:6c:26:57:d2:f1:fe:48:0d:42:8a:
99:b8:8c:6b:31:b7:1a:06:7c:5a:70:80:c5:4e:18:6a:fd:c0:
0c:75:08:9a:3f:9c:fa:67:d5:d4:81:05:8e:92:9b:b8:f2:32:
36:bb:93:6b:ff:5a:d8:ae:ce:49:f1:cc:4d:fa:d7:5d:d6:ae:
38:2e:99:ac:8e:2e:65:8a:56:22:b1:f0:a2:d3:79:37:98:bc:
25:7b:75:ca:fa:dc:7b:41:a3:9f:4f:79:dc:b7:36:a3:dd:5a:
cf:a9:03:af:fd:24:bb:be:b2:f7:9a:e7:59:62:04:6e:b0:af:
88:5c:9f:16:79:b9:3d:22:60:21:ca:7e:40:32:b9:72:d3:e7:
ba:76:4f:6c:29:53:23:a4:86:d7:d3:65:a0:38:b8:b4:c2:e3:
51:b6:75:a4:ca:05:64:e1:24:2a:fa:ee:16:a0:0b:59:7c:bd:
e8:93:ff:37:ff:75:75:b7:33:82:97:c9:09:6a:be:c2:bf:e5:
ad:4f:83:21:36:f7:af:44:78:46:12:ef:49:02:a7:e0:5e:a4:
20:7c:af:bc:c5:f2:62:68:cd:51:c7:9e:f6:aa:df:c4:6e:1e:
8f:ab:e1:4a:c7:25:9f:dd:b5:fd:fb:9c:c3:6a:8f:f4:5e:66:
b3:d4:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:04 2026 by rpki-client