Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: M5Py4tTzHUt4vs0ptfU4/f5QeEjg48MiX6ua2kd2oDo=
Subject key identifier: 1A:2B:98:23:49:66:28:57:B1:B8:96:75:22:54:FC:5B:7A:3D:31:20
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019FAB99EA3DD61C4F06583BECAD6F2EC83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 16DA
Signing time: Wed 29 Jul 2026 02:00:18 +0000
Manifest this update: Wed 29 Jul 2026 02:00:18 +0000
Manifest next update: Thu 30 Jul 2026 02:00:18 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: LoDs6zPOOqZSwXK+rn3Vw1IEfHpVHtu0GiC5IyvC+Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:ea:3d:d6:1c:4f:06:58:3b:ec:ad:6f:2e:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jul 29 02:00:18 2026 GMT
Not After : Jul 30 02:00:18 2026 GMT
Subject: CN=1a2b982349662857b1b896752254fc5b7a3d3120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:a2:96:18:a6:15:e2:ce:bd:98:2b:a8:63:
f5:25:f1:20:71:51:59:f9:8e:87:62:63:8e:b0:21:
ed:98:c0:71:cd:91:df:47:05:80:95:d9:33:bd:0b:
b9:f9:0d:12:25:a3:fa:2e:62:5c:82:f7:03:5c:ca:
54:a5:e3:69:3a:42:6a:43:28:52:06:e7:f5:59:59:
bc:23:fb:70:59:ce:7e:7d:d8:10:40:83:c1:2a:10:
c9:f4:07:63:43:8d:e1:9f:b4:bc:cc:b5:48:33:59:
51:d7:c8:c6:99:78:a9:ec:ed:2d:b3:74:0b:32:20:
c0:9b:f6:79:ed:7f:80:30:44:3d:ed:3e:f1:b1:4e:
cd:3d:5f:f9:97:9d:4c:9c:5c:a9:09:2d:2e:c2:2a:
d4:2f:6f:8c:40:25:22:92:38:0d:22:46:eb:30:c8:
c7:af:dd:46:f3:0e:07:a7:0c:d5:ff:d0:0e:45:23:
c7:0e:10:c7:ae:46:4f:3c:42:ac:32:62:67:16:9f:
6b:55:00:2b:26:d7:11:6b:0b:3e:10:ca:73:d4:48:
16:2a:19:7b:77:32:bd:47:53:11:94:6e:5f:15:5d:
05:55:3e:3f:ea:3e:d3:d2:23:30:97:f8:60:ed:c9:
9b:a1:af:57:58:a0:c4:1f:30:12:0b:63:b7:a3:d5:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:98:23:49:66:28:57:B1:B8:96:75:22:54:FC:5B:7A:3D:31:20
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d5:2c:59:01:d4:fc:28:93:4d:52:46:06:87:20:df:f2:60:
41:0f:4e:37:5e:87:a5:a0:f4:67:6e:6b:cb:19:a7:95:0e:c5:
64:19:b0:80:70:4a:98:66:fb:dc:cb:fb:43:c4:11:aa:d0:7e:
60:61:71:72:d3:6b:d4:a4:28:58:3f:5c:03:aa:fc:5f:77:c1:
c7:54:b2:08:19:1c:3b:76:16:07:6c:de:6b:e5:96:34:b8:2b:
9a:05:74:8e:28:9a:3e:61:a0:7b:b0:ae:2f:6e:a3:cd:01:8a:
aa:81:d9:0e:97:56:2a:1e:f5:9d:15:7e:04:cf:f8:51:d3:ff:
8b:23:f4:c9:25:ee:1a:c4:d9:6a:5f:32:dd:4d:d8:28:da:ff:
9e:ba:56:f8:d2:20:95:4e:d9:24:1f:ba:04:c8:6f:9e:77:8c:
4f:e9:cc:2a:a2:82:ef:74:b8:12:ac:83:33:8c:43:42:30:d7:
fc:9c:f4:de:f2:c8:13:4d:8e:0d:1e:99:ef:41:dd:17:0c:5c:
53:ab:88:bc:40:3c:db:0f:e3:2e:6e:c8:1f:31:98:4a:80:e6:
e2:87:08:6f:62:1b:f5:24:da:f0:e4:70:3a:bb:0e:2f:28:9e:
bb:50:b7:45:ea:80:f1:fb:a2:6e:65:7d:7d:73:a2:29:bc:44:
de:3f:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:09 2026 by rpki-client