Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
File: onxkG1MKfGuiNAIuMyckYjI2cQA.mft (raw, json)
Hash identifier: i/liQ5nZsMQ2AZT0GSHQZfXJ4YnX3B7j4XjDlrapyHA=
Subject key identifier: 0D:EF:53:64:8D:B4:70:FA:4A:E1:6E:7B:8C:95:A4:93:A9:5B:CC:E9
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 01A1238B1ABBC1AB3F9B834120CEDA5AE144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
Manifest number: 0FDD
Signing time: Sat 10 Oct 2026 02:01:21 +0000
Manifest this update: Sat 10 Oct 2026 02:01:21 +0000
Manifest next update: Sun 11 Oct 2026 02:01:21 +0000
Files and hashes: 1: H3RmjMDhi-VIQKw953O9EUU-NrU.roa (hash: u8dYTQtYNEtT+hfaZbOUxQvhTTWTaktw3famZ+VPWSU=)
2: KHZ6X050RQpN8C-zU6JBaEYg3FI.roa (hash: TDPzA+FjAhUQy2Fbl/oOlKCfde+8XwBa4JB9fFqOvmY=)
3: onxkG1MKfGuiNAIuMyckYjI2cQA.crl (hash: gA365ZFQ83+zErM1lavCYv4B/zGtdlVv8fDZtn7C+D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8b:1a:bb:c1:ab:3f:9b:83:41:20:ce:da:5a:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Oct 10 02:01:21 2026 GMT
Not After : Oct 11 02:01:21 2026 GMT
Subject: CN=0def53648db470fa4ae16e7b8c95a493a95bcce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:e8:60:fa:1a:da:00:d4:30:4d:d4:ca:28:
bc:41:d2:91:a9:16:3a:75:56:11:13:76:12:9d:a0:
ed:ed:07:0b:4e:84:70:66:cb:59:e7:70:d9:f5:88:
fe:1a:23:90:7b:aa:28:d3:96:bd:6e:4a:03:e3:9c:
66:d9:f3:f1:ba:f0:e7:9d:d9:5e:18:a8:7f:5c:02:
75:70:0c:82:89:00:f9:c1:dc:36:80:09:a1:b5:86:
68:89:3c:75:58:13:98:85:bd:f2:a5:58:62:9f:5d:
0a:08:d1:73:cc:61:6e:57:98:23:6a:33:71:39:17:
88:24:94:78:3b:f0:0b:90:9a:cb:f2:e7:87:85:c3:
ae:06:c3:46:ce:00:2f:7b:ca:3e:13:fb:43:0c:b5:
23:fd:50:d7:7f:2e:57:c9:05:e8:4f:2a:59:e1:15:
1a:90:8e:b0:9e:cb:57:a2:96:18:ca:4c:4a:24:14:
d6:53:26:d3:e8:c0:3a:be:9f:43:40:00:f4:50:b7:
3a:0b:92:df:47:4f:89:1a:80:58:93:e7:a0:e5:63:
5a:2c:75:22:ba:13:93:f3:e0:d6:08:47:42:f6:fe:
05:62:c3:c2:b4:de:2e:c8:42:97:01:31:ec:9d:6f:
1f:b3:9a:c6:30:a2:a5:98:e6:4f:40:fc:d8:65:e6:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:53:64:8D:B4:70:FA:4A:E1:6E:7B:8C:95:A4:93:A9:5B:CC:E9
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4f:17:8a:50:50:be:23:e5:4b:e7:d7:ba:6e:3e:a2:35:bc:
0b:0f:e0:11:24:4b:76:93:55:27:3e:e6:26:f9:83:e3:dd:d8:
eb:62:37:cd:78:71:33:dd:3e:a0:aa:a4:33:eb:5e:be:fc:8b:
25:ef:ad:f1:eb:14:cb:b9:b3:aa:f1:15:9f:e2:9c:7d:91:8c:
b2:eb:34:47:b6:ae:4b:a5:58:ed:70:5f:d5:ec:dc:3c:b6:07:
ce:f1:46:04:d7:92:11:03:42:32:c6:4c:b0:0c:b0:a5:ff:70:
3c:22:5c:29:91:17:55:d7:50:81:ba:9a:7e:80:a5:3b:42:40:
ca:29:78:b4:97:f4:ee:34:41:c9:7a:07:dd:5d:54:d7:0a:65:
00:d9:f2:07:ff:d0:c8:9f:30:8b:b9:ca:be:3c:e2:6a:53:b6:
4e:55:aa:09:f9:21:78:dd:26:1d:4b:f9:a8:e4:9e:29:23:48:
04:2c:5c:2b:a7:80:bd:43:55:0f:15:68:13:fa:83:0a:46:9f:
f6:30:2c:7b:59:d9:33:87:6f:ac:28:ed:3e:80:b2:0d:3b:02:
f9:fa:f0:07:04:a0:56:cc:06:f6:26:66:f9:e2:27:58:17:e2:
54:08:e4:64:b4:85:6d:1a:8c:b2:e5:bf:00:fe:db:84:f2:0f:
85:2d:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:47:04 2026 by rpki-client