Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
File: ONBDirVthCFxMbwG_jNeTHhD63k.mft (raw, json)
Hash identifier: ajgdwTTIqtnC/537t/cseOXTIcjYjhoidkNAwP5td8M=
Subject key identifier: D5:FF:C4:F1:EE:2A:50:4B:D4:89:D6:53:E1:BB:C2:98:59:E1:A5:B9
Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Certificate serial: 019F946E3DE635A0FC5DE3120144AF992E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
Manifest number: 06CD
Signing time: Fri 24 Jul 2026 14:01:20 +0000
Manifest this update: Fri 24 Jul 2026 14:01:20 +0000
Manifest next update: Sat 25 Jul 2026 14:01:20 +0000
Files and hashes: 1: ONBDirVthCFxMbwG_jNeTHhD63k.crl (hash: Jt0c5fugffcWNdwS4N6wxZsVNVs2gt8idfptY2t0Vxc=)
2: pSL3Mi5XEdAchUtMULvCKuIdKaM.roa (hash: PIsMvcROTvHOYMP/WBLkPzqoyaR6+wBcYymEnJhYyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:3d:e6:35:a0:fc:5d:e3:12:01:44:af:99:2e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Validity
Not Before: Jul 24 14:01:20 2026 GMT
Not After : Jul 25 14:01:20 2026 GMT
Subject: CN=d5ffc4f1ee2a504bd489d653e1bbc29859e1a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:3b:38:a6:70:ba:f6:2a:3b:52:fc:5f:24:
31:d1:49:ba:ba:34:b0:ed:62:f5:9b:bd:71:c5:b6:
08:e3:75:ca:6e:b4:41:6e:d8:ab:03:06:49:ac:e3:
5a:04:45:6e:f3:69:e0:bf:c0:7b:8b:a3:7d:4b:f6:
16:84:a8:a2:ce:cc:23:7b:f5:f7:11:e6:95:cf:6c:
8f:e7:6d:53:3c:c0:14:20:05:b0:d7:f5:3e:6a:89:
dd:73:ac:2c:36:2b:7c:34:48:b9:49:39:79:a7:8c:
18:6c:32:8b:89:21:23:91:0d:41:93:75:08:b3:0b:
85:3b:16:73:5e:06:ea:e5:76:69:30:75:ab:59:6b:
cc:aa:88:38:6f:31:83:c5:35:cd:d1:43:75:d3:74:
14:58:c3:66:09:bd:0c:ea:62:b1:be:2c:61:bf:45:
34:57:8b:e8:80:f4:68:04:c1:0b:85:b8:89:89:8d:
2a:6c:42:39:33:2a:67:ec:0e:98:b1:b8:63:2b:ed:
b1:5a:c8:b5:69:fe:af:c4:63:27:51:d5:9a:47:de:
c2:68:1b:63:e4:0c:f6:03:fc:fb:50:4f:fc:16:f2:
24:ce:9f:6b:ea:10:0c:10:6b:0e:d4:09:32:a6:45:
07:66:6a:be:9f:61:58:f5:fd:91:1c:db:58:81:f3:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:C4:F1:EE:2A:50:4B:D4:89:D6:53:E1:BB:C2:98:59:E1:A5:B9
X509v3 Authority Key Identifier:
keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:95:0f:cc:16:ba:34:dc:89:c6:fd:76:e1:11:4c:e3:46:db:
7c:8a:69:88:fa:1b:15:a3:71:d9:7d:77:fc:20:18:3f:e5:b2:
e7:4b:3c:82:6c:11:a6:35:6a:e4:f4:08:49:63:8f:06:4e:5e:
fc:cc:93:dd:7e:4e:a8:40:d9:65:60:84:36:11:6e:82:14:b8:
bf:d9:7f:fd:18:52:d0:55:04:f1:ee:34:77:fa:91:3e:1c:f8:
e2:7d:f3:56:52:6b:51:1c:c8:08:21:98:4c:a3:4f:29:22:22:
44:ab:10:41:05:29:3f:b9:66:ad:44:88:d9:02:5e:b2:eb:4f:
32:69:8f:33:1b:e6:6a:1c:a3:8f:77:b1:02:a6:a6:08:0a:9e:
1b:54:fe:a4:85:4f:01:6f:c8:89:db:ab:7e:3f:d2:a0:2c:0b:
92:2d:15:46:09:5d:a6:8f:fe:80:3b:84:4a:01:f0:52:3b:05:
b7:71:13:fa:35:89:d6:2d:06:a5:a1:03:41:c3:d8:0b:c1:52:
46:1f:71:6f:23:09:9e:74:5d:16:96:39:b4:7a:64:70:f7:be:
d8:08:fa:41:6a:b1:b1:1f:3c:b5:f4:a6:c9:5e:ee:34:50:c6:
d3:30:5b:c5:32:5c:bd:8b:ba:9f:d9:23:1c:0f:ec:41:57:bd:
03:67:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:06 2026 by rpki-client