Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
File: ONBDirVthCFxMbwG_jNeTHhD63k.mft (raw, json)
Hash identifier: Pj7RO5BazokISqjI9vv68/53sTjAOT0yegBW2qTrjik=
Subject key identifier: 05:22:63:22:B5:8D:FA:EF:0A:8B:EF:89:A1:62:50:2F:27:6B:2D:59
Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Certificate serial: 01A0FF7E9007CD60708D96DEA0A0C35C6AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
Manifest number: 0789
Signing time: Sat 03 Oct 2026 02:01:19 +0000
Manifest this update: Sat 03 Oct 2026 02:01:19 +0000
Manifest next update: Sun 04 Oct 2026 02:01:19 +0000
Files and hashes: 1: ONBDirVthCFxMbwG_jNeTHhD63k.crl (hash: gW/HbhE3japS/3JRU51vKNBgmzsnfwC5F2a6NCbtm9c=)
2: pSL3Mi5XEdAchUtMULvCKuIdKaM.roa (hash: PIsMvcROTvHOYMP/WBLkPzqoyaR6+wBcYymEnJhYyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:90:07:cd:60:70:8d:96:de:a0:a0:c3:5c:6a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Validity
Not Before: Oct 3 02:01:19 2026 GMT
Not After : Oct 4 02:01:19 2026 GMT
Subject: CN=05226322b58dfaef0a8bef89a162502f276b2d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:57:54:03:5a:52:ec:88:8c:de:af:ea:4a:
1d:c5:2e:b0:2c:89:44:04:d0:7a:f5:cf:06:71:a7:
aa:5d:15:07:08:e5:fc:33:1b:02:c4:dc:36:fb:5c:
45:84:03:c6:d8:f6:ef:02:44:02:e5:e6:4c:d4:d7:
ac:df:de:a6:a6:e8:ba:99:f0:e8:73:42:cc:18:01:
99:b6:9a:1d:2f:4f:29:a5:10:e9:8e:9f:77:b6:76:
1f:f3:bd:37:66:e9:14:5b:d0:c9:1a:28:1f:64:a7:
37:12:b3:fa:3c:97:cc:ad:2f:7e:75:4c:70:60:08:
e2:42:f0:e8:9d:20:46:91:86:a1:f9:d8:f8:67:1a:
d4:02:c6:28:3f:8e:64:29:92:4a:96:51:0d:53:44:
20:90:e2:42:7e:70:a5:2a:63:05:ee:e2:8c:04:ef:
43:29:f9:05:bb:b2:10:15:2c:d1:ad:74:1b:58:2c:
13:7c:ce:22:7c:69:90:8b:84:98:57:fe:93:f3:cb:
c3:10:0f:db:ad:f8:7a:ad:88:9b:ad:58:a4:14:0a:
ec:14:c2:10:1c:51:fc:96:fe:49:d8:ed:62:da:05:
3e:48:12:46:4b:95:a8:59:f5:b1:c9:45:62:32:ed:
29:3e:9f:da:4d:d3:fd:94:ad:88:14:74:6c:af:ba:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:63:22:B5:8D:FA:EF:0A:8B:EF:89:A1:62:50:2F:27:6B:2D:59
X509v3 Authority Key Identifier:
keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:05:d2:1b:1b:e9:7a:77:55:7e:96:61:0b:5d:f2:f8:08:
f4:57:0f:3c:3c:ad:59:98:1a:ae:be:fc:73:38:69:f3:49:b4:
9c:73:28:56:9d:9b:1e:75:f2:36:9b:e3:52:85:af:63:05:b8:
6b:f9:0d:7f:b3:f7:9b:4e:e4:f8:30:bb:55:8e:a8:10:90:1f:
c6:ad:80:ce:f0:e3:7b:80:48:ff:fc:71:9c:48:e0:e8:97:95:
c3:bf:8c:72:17:b8:fa:19:a9:97:98:1d:59:7e:d4:95:29:4f:
fa:16:ac:57:ff:05:85:13:e5:fe:0d:9b:ba:38:59:66:0d:a4:
a4:e6:74:a8:0f:e3:7e:50:f0:d8:9c:b4:bb:2b:92:bd:d8:15:
87:0f:39:85:45:b3:17:08:35:f0:58:9c:58:b7:9c:be:55:7f:
f4:7a:ad:2c:02:c5:7d:c2:1d:9e:91:49:7e:c3:88:e6:14:fe:
84:c5:c7:1a:bd:e4:ca:58:bd:cb:cf:ef:6f:72:04:9e:d7:31:
f7:0d:c9:0a:7e:b6:62:6c:f0:85:ba:7a:f9:d3:1a:a2:3b:69:
ab:20:7d:a8:4e:22:06:dd:3e:6a:5f:cb:7d:90:29:a4:1c:0e:
60:60:7d:87:ff:0c:ff:ba:57:56:87:aa:c0:2b:4e:fa:f2:42:
bc:de:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:40:01 2026 by rpki-client