Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: 17ykFQpE+NpMuDUIG4B50EL77CzKJkvO2C82SSES0Bc=
Subject key identifier: 81:AA:E4:07:11:5D:6F:29:C3:01:CF:5A:2C:45:E2:30:0C:7D:5F:4B
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 01A1DA266B8AF601A461AB1E11FAC61081F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 11DC
Signing time: Sat 14 Nov 2026 13:01:53 +0000
Manifest this update: Sat 14 Nov 2026 13:01:53 +0000
Manifest next update: Sun 15 Nov 2026 13:01:53 +0000
Files and hashes: 1: Ay8bkrrQ4W8en6WQA0oZqxfliDY.roa (hash: eQ24k3su4taaH0Z4GfAAZBwUKUzpQjLgnBxCtBNBzyI=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: 6oSXVi7bB8L8cOwmzJrh0T1X5uPHA2CLkqS4jsGu6ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:26:6b:8a:f6:01:a4:61:ab:1e:11:fa:c6:10:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Nov 14 13:01:53 2026 GMT
Not After : Nov 15 13:01:53 2026 GMT
Subject: CN=81aae407115d6f29c301cf5a2c45e2300c7d5f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:fb:09:7a:3e:a9:be:01:fd:c6:7d:06:c3:
46:7f:5f:49:82:b2:57:4c:16:86:30:4f:b7:9a:d5:
d2:cb:c5:77:26:d7:7a:39:99:b4:fa:69:e7:b0:1e:
24:ec:b6:fa:ea:6d:35:b1:42:6b:7f:82:71:49:0c:
f1:fe:09:5c:5a:f0:2a:5b:b0:d3:b9:d7:2c:70:b9:
ef:f2:e6:14:0e:b1:d2:79:cb:78:3f:bc:9b:8f:a1:
f7:9e:3b:87:45:d0:e9:b8:60:d0:af:da:2f:dd:69:
83:74:22:8f:9e:6e:c6:bc:c0:75:47:59:f6:f1:c4:
48:84:24:f1:2e:51:15:6f:1b:84:47:5d:47:c1:e1:
08:23:ec:d1:18:51:00:e7:81:f0:94:18:43:a8:ac:
55:bd:08:4b:94:51:f3:a1:72:24:5d:2e:e6:05:15:
29:38:60:fe:58:47:a0:95:e5:e7:97:86:6e:07:0a:
bc:c1:c8:92:90:7a:37:8d:d4:13:19:b8:6b:fa:ba:
1e:bb:86:90:c3:3c:51:2c:e5:8b:db:97:17:18:b1:
ee:e5:64:6f:78:f4:ed:26:25:16:3e:59:4a:2f:17:
a7:ab:0c:8e:c9:9a:ce:c6:0b:61:24:7e:1b:36:26:
f2:5e:ec:15:44:9a:5a:8e:52:fb:b0:b7:ee:4a:7f:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:E4:07:11:5D:6F:29:C3:01:CF:5A:2C:45:E2:30:0C:7D:5F:4B
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:c0:3d:95:10:78:1c:e5:1c:e4:64:c9:de:6a:bb:3d:15:
53:f8:eb:68:aa:f6:f7:2d:b0:81:98:8d:6b:21:8d:a0:3e:ba:
12:61:90:87:8d:fc:9f:9a:23:be:27:c5:c4:9a:58:2d:df:4e:
59:e0:6a:79:da:57:fc:82:c9:92:7d:65:3b:73:df:4d:cb:86:
68:4f:4d:a9:8f:1e:74:a0:45:9c:ed:07:59:02:e3:49:48:2b:
7e:7f:72:2f:36:e5:e7:de:e8:16:a3:eb:0a:31:8f:87:a8:af:
41:c8:58:6e:21:60:69:c9:b3:0a:1c:89:d3:07:c5:4d:b5:c9:
36:d2:7e:62:62:d3:b0:58:4f:a5:a7:9b:b7:83:ca:d8:90:8a:
38:2e:fb:2f:4b:bc:5f:2b:ab:54:26:2e:67:54:27:bf:46:92:
1e:09:b5:45:4e:54:01:6c:05:63:d7:fa:32:83:5d:af:69:55:
92:5c:05:8b:e7:ba:c1:f6:c5:c4:5f:c6:38:11:9e:32:6d:f5:
43:c0:20:c1:d2:51:2f:d5:0c:e9:4b:9c:52:9a:c4:63:e7:24:
1c:b6:1e:72:51:11:ab:6b:ff:49:cb:b6:62:3f:c1:28:c9:6a:
13:b0:7b:97:90:b1:97:27:c5:86:c8:72:eb:60:67:cb:94:9b:
a1:de:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:58:07 2026 by rpki-client