Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: gkNwRlV56Y6ntP4mo0tRxcTQuDft98BwJNbWk9pSiVE=
Subject key identifier: AF:25:6F:8A:34:BA:B6:04:07:C1:C0:27:8C:A1:BC:F3:FE:3D:91:25
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019F946D3CDE22DAAA9021E3396E754658D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 16CE
Signing time: Fri 24 Jul 2026 14:00:14 +0000
Manifest this update: Fri 24 Jul 2026 14:00:14 +0000
Manifest next update: Sat 25 Jul 2026 14:00:14 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: jB/YHAOAsCMb8QgPLnPrXIYoEYzHBO6dtvJsNi4Y+wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:3c:de:22:da:aa:90:21:e3:39:6e:75:46:58:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jul 24 14:00:14 2026 GMT
Not After : Jul 25 14:00:14 2026 GMT
Subject: CN=af256f8a34bab60407c1c0278ca1bcf3fe3d9125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:31:e6:10:7e:df:b9:d0:4c:aa:a4:d2:4e:
bc:30:f7:4b:ce:b4:a7:06:3c:57:e9:30:f8:81:be:
c0:b2:19:4b:8f:15:eb:90:29:d8:a8:c6:5e:93:eb:
4f:80:ad:ce:6c:b5:f5:e7:fa:78:97:37:30:2a:2f:
86:97:d2:1a:a9:80:d0:86:e8:dc:b7:5f:48:37:d4:
c4:17:e3:c0:e6:0a:64:6b:48:74:00:56:4a:6f:c1:
56:66:da:9c:5f:94:24:ea:ac:82:b3:e6:56:ef:63:
84:8c:91:64:3b:25:36:8d:2a:06:36:8c:85:56:9e:
fc:13:89:87:71:d7:44:ac:40:39:8c:09:46:7e:de:
ab:47:fc:51:74:f5:67:5c:6c:78:d4:73:ae:eb:31:
da:b6:86:80:e9:f9:4c:4d:c6:36:d4:4f:72:63:e1:
bf:bc:7d:5d:3b:4e:ff:dd:49:0f:87:0c:b7:ab:74:
68:fc:6e:04:8a:21:1c:c2:d8:b5:bd:b7:2b:a5:14:
ae:2d:ab:bd:94:f3:1a:1f:b0:d1:45:eb:ff:ee:d3:
92:ca:f3:8c:4d:b7:5e:99:90:0c:fe:d8:e9:74:19:
a1:2a:ca:8e:c3:b4:bc:e5:76:ed:be:84:35:d2:88:
76:6e:0c:5f:90:46:04:55:28:10:84:ea:6f:f2:d0:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:6F:8A:34:BA:B6:04:07:C1:C0:27:8C:A1:BC:F3:FE:3D:91:25
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:05:05:2c:5d:88:21:bf:43:1c:fd:26:14:06:7a:68:7a:03:
7e:92:60:21:48:54:b6:2f:56:26:6c:69:39:46:81:01:78:60:
cf:cc:cd:c1:29:20:06:fc:97:76:a7:7a:95:fa:c0:d6:09:fc:
66:10:eb:97:dd:64:ef:da:12:20:b8:0d:e1:ef:aa:2c:0b:6c:
18:96:f1:39:cd:26:ac:ac:68:59:49:32:c4:88:19:16:86:d8:
09:8c:56:b3:71:1a:89:ea:88:d9:2a:c6:af:b5:cf:5c:86:a7:
23:a9:4b:fd:0b:d6:db:b5:af:fd:41:3c:83:f9:a1:64:42:29:
93:49:a1:67:e4:6f:20:d2:7d:4f:3e:76:5d:a7:0f:85:6d:39:
a8:96:d6:7f:d2:e7:a2:49:95:b3:7a:cc:6c:bd:bb:19:f1:d0:
df:e6:73:19:a9:c5:32:a0:e7:c5:d5:ef:10:2a:07:69:b6:45:
d7:cc:b3:59:b2:99:9e:47:e6:8d:60:d6:87:81:7f:45:70:11:
bb:4a:d8:3f:26:a0:d2:f7:7f:ec:e1:a3:f3:57:d7:fb:ad:a8:
d0:4f:df:12:c6:8c:cd:07:c3:a7:2b:56:2c:44:aa:fb:a7:f7:
f4:2c:02:58:e9:8b:3c:84:3d:d2:3c:71:01:a3:74:17:93:56:
2f:c4:48:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbTzeItqqkCHjOW51RljTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh
MzQ0NjAwHhcNMjYwNzI0MTQwMDE0WhcNMjYwNzI1MTQwMDE0WjAzMTEwLwYDVQQD
EyhhZjI1NmY4YTM0YmFiNjA0MDdjMWMwMjc4Y2ExYmNmM2ZlM2Q5MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4x5hB+37nQTKqk0k68MPdLzrSn
BjxX6TD4gb7AshlLjxXrkCnYqMZek+tPgK3ObLX15/p4lzcwKi+Gl9IaqYDQhujc
t19IN9TEF+PA5gpka0h0AFZKb8FWZtqcX5Qk6qyCs+ZW72OEjJFkOyU2jSoGNoyF
Vp78E4mHcddErEA5jAlGft6rR/xRdPVnXGx41HOu6zHatoaA6flMTcY21E9yY+G/
vH1dO07/3UkPhwy3q3Ro/G4EiiEcwti1vbcrpRSuLau9lPMaH7DRRev/7tOSyvOM
TbdemZAM/tjpdBmhKsqOw7S85XbtvoQ10oh2bgxfkEYEVSgQhOpv8tA3FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8lb4o0urYEB8HAJ4yhvPP+PZElMB8GA1UdIwQY
MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt
ZjM3Y2JhZjdjZTVhLzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh
LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAUFLF2I
Ib9DHP0mFAZ6aHoDfpJgIUhUti9WJmxpOUaBAXhgz8zNwSkgBvyXdqd6lfrA1gn8
ZhDrl91k79oSILgN4e+qLAtsGJbxOc0mrKxoWUkyxIgZFobYCYxWs3EaieqI2SrG
r7XPXIanI6lL/QvW27Wv/UE8g/mhZEIpk0mhZ+RvINJ9Tz52XacPhW05qJbWf9Ln
okmVs3rMbL27GfHQ3+ZzGanFMqDnxdXvECoHabZF18yzWbKZnkfmjWDWh4F/RXAR
u0rYPyag0vd/7OGj81fX+62o0E/fEsaMzQfDpytWLESq+6f39CwCWOmLPIQ90jxx
AaN0F5NWL8RIfA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:10 2026 by rpki-client