Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: foSCkP8oyknLEYPd6OcRHT3OFBc9xFNAJnDdfmcYSIo=
Subject key identifier: 68:93:D2:54:29:00:D9:31:AF:CB:D1:80:17:6F:61:1E:95:CD:E9:BC
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 01A0D193236526B409F6A7666DF70B55C088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 1153
Signing time: Thu 24 Sep 2026 04:01:16 +0000
Manifest this update: Thu 24 Sep 2026 04:01:16 +0000
Manifest next update: Fri 25 Sep 2026 04:01:16 +0000
Files and hashes: 1: Ay8bkrrQ4W8en6WQA0oZqxfliDY.roa (hash: eQ24k3su4taaH0Z4GfAAZBwUKUzpQjLgnBxCtBNBzyI=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: b6BcsLljEnXlud4Rgmr4pTrgjnHEm9p7FnqFdHgcZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:23:65:26:b4:09:f6:a7:66:6d:f7:0b:55:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Sep 24 04:01:16 2026 GMT
Not After : Sep 25 04:01:16 2026 GMT
Subject: CN=6893d2542900d931afcbd180176f611e95cde9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:b0:5a:d0:f7:19:96:41:48:2e:cd:84:79:
33:03:d2:fd:26:89:9e:40:bf:53:80:f6:42:18:b1:
45:93:24:3b:1b:2f:09:e6:e0:04:65:73:09:62:b7:
b1:69:14:07:33:0f:b3:56:4e:d8:ec:0d:d2:7c:8a:
25:8e:01:0f:1d:3d:36:ef:cf:98:81:9d:04:c2:c8:
0f:07:e8:77:5e:2e:39:60:8a:cb:f7:2b:31:e2:28:
06:70:18:3d:b1:75:c1:ae:41:5f:42:83:a2:a7:d8:
5c:85:99:cc:18:54:d5:f6:33:de:fd:a8:c1:47:73:
cd:3e:7d:55:1d:76:b2:f2:9e:8f:42:52:a2:af:fd:
4b:70:61:04:c5:09:da:6c:3f:f3:a6:f4:80:b8:17:
0f:67:16:11:39:20:41:14:da:26:50:82:0d:80:90:
80:57:b1:01:93:73:62:a3:80:28:9e:24:67:69:58:
64:c4:80:96:b3:4f:45:9c:8e:ae:1a:d1:63:cb:a5:
de:4d:70:bf:d1:b1:9e:19:90:7b:df:89:e1:dd:d5:
81:54:77:36:da:08:75:1f:c0:19:bc:f7:d9:b0:f8:
b6:9f:75:48:9d:6d:4d:fc:28:4a:5e:e3:91:a7:65:
a7:69:b8:2a:87:a0:82:4d:2e:02:6f:d7:cc:f6:d4:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:D2:54:29:00:D9:31:AF:CB:D1:80:17:6F:61:1E:95:CD:E9:BC
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fe:0b:15:97:55:d6:ca:14:e0:a1:b0:61:10:fd:c7:59:a9:
b7:22:29:21:9b:74:aa:b5:e6:66:9d:a1:bd:0a:96:d9:8d:ba:
77:44:29:9d:58:e7:b6:78:82:81:85:74:1f:94:79:09:38:25:
24:3d:3b:6a:a0:2d:f5:03:0e:2e:05:7d:7d:90:69:18:47:68:
40:9b:43:2e:82:24:79:cc:50:6e:10:4e:36:d0:97:dd:6e:83:
57:34:9f:9c:a5:02:37:be:c5:bd:06:19:b3:fd:f9:f2:f9:94:
25:77:f5:c8:90:af:9e:b0:b4:9c:95:7d:f6:f2:e4:29:72:5d:
68:6a:8b:91:b9:30:bd:56:e0:38:6d:cd:e9:35:04:bc:21:ac:
e2:f2:39:f3:84:47:46:6d:d9:73:96:da:ca:04:d5:d5:99:73:
7d:d3:de:9a:39:69:2d:18:3c:34:80:f2:f5:1b:b2:9b:dd:70:
23:e9:dd:90:ea:45:0e:87:0b:f2:80:eb:54:f2:e3:fa:4a:dc:
c6:0e:bd:50:3f:a3:d0:2a:39:d8:45:86:40:b4:ab:f8:7d:a0:
91:37:46:c1:d4:17:7c:35:81:34:4b:ab:34:05:dc:be:02:cf:
a6:4f:b0:56:9b:97:d4:dd:65:bd:92:b1:ef:a9:21:66:c5:42:
13:f2:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:18 2026 by rpki-client