Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: l1FOr/4SshaGjGywnn5F6uguOC+db/S7VdMBaaTqvJE=
Subject key identifier: D2:27:F3:AB:D4:5D:67:70:4C:31:5D:89:EF:B0:AC:A0:A7:43:E8:67
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01A0DCBBE1DBB360BAA1F89D50FED9C8083A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1778
Signing time: Sat 26 Sep 2026 08:01:35 +0000
Manifest this update: Sat 26 Sep 2026 08:01:35 +0000
Manifest next update: Sun 27 Sep 2026 08:01:35 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: LMbPMJXLc7TbPtWv8xAxj1yC/TtSvMoljvcO9gSwrEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:e1:db:b3:60:ba:a1:f8:9d:50:fe:d9:c8:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Sep 26 08:01:35 2026 GMT
Not After : Sep 27 08:01:35 2026 GMT
Subject: CN=d227f3abd45d67704c315d89efb0aca0a743e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:66:aa:dc:a6:b8:be:da:42:d2:0d:47:be:
e8:39:32:5c:b0:c6:09:c8:1d:0e:81:14:39:a0:bd:
5e:7b:30:b5:45:42:ad:da:5d:00:54:7b:6a:42:15:
2c:85:65:1b:35:39:03:d2:f7:f3:ed:1f:3c:e8:36:
6b:92:c3:e8:18:de:3d:6a:61:c5:d2:1d:a6:d2:c9:
7b:a2:31:f6:3d:9a:7b:33:6b:87:12:4c:b7:3e:73:
05:8b:98:c9:76:a3:b7:a4:ac:5f:76:f8:13:0a:75:
ac:7c:66:e7:b0:47:5a:ce:ee:f4:0f:94:d0:c4:38:
7b:b4:3f:04:8d:84:c0:2b:d5:9b:3f:46:88:5c:dc:
a0:93:db:85:8d:32:7a:f8:e3:04:4a:eb:11:c5:80:
7b:19:3f:90:e5:38:07:48:3a:13:11:57:7c:1e:30:
d2:af:37:0c:87:11:b3:a6:bf:c2:37:12:0b:b0:0e:
ff:df:d0:0a:39:92:c8:c4:65:d3:11:c8:4b:b2:e9:
12:96:51:4e:d8:c8:79:81:42:2f:55:a2:47:5c:8c:
9a:58:35:e1:39:37:e2:34:2f:67:99:91:8b:f5:bf:
5d:47:32:9f:f2:bd:72:a5:f6:4c:56:8f:8c:b9:fa:
e6:f5:2c:47:c1:1b:ca:11:b0:8d:83:26:8e:ca:b8:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:F3:AB:D4:5D:67:70:4C:31:5D:89:EF:B0:AC:A0:A7:43:E8:67
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c0:1d:b4:dd:3c:83:80:76:40:84:5a:1e:1f:1c:91:47:c4:
32:8f:1d:87:6d:68:a6:ca:02:2b:d4:47:9e:bc:23:14:65:39:
ee:7d:60:66:94:d4:47:d6:6c:f6:05:4c:ad:13:b9:21:48:ee:
51:46:b7:54:79:88:ff:82:a5:e2:e9:5a:5a:21:44:54:44:e7:
56:01:2a:8c:ff:34:45:2e:81:e5:04:1e:fe:04:1a:62:f0:60:
05:bf:60:a0:48:d7:9c:0e:87:2e:ce:82:7e:82:09:28:c9:9f:
24:8f:cc:59:6d:2f:c6:49:21:51:36:a0:73:ad:d5:60:2e:0d:
63:7c:2e:5d:81:26:52:d5:76:d7:7b:9c:66:ce:7e:2f:10:33:
cc:1d:bb:e2:72:87:e4:4c:f9:9b:a3:52:b9:79:39:cb:6c:c7:
2d:ca:11:98:4b:48:48:dd:ba:25:31:71:8b:a2:13:5a:ff:b9:
6a:ed:64:1c:f7:9b:ad:b1:f1:47:63:7d:aa:75:d9:d3:dc:18:
b7:56:92:5c:df:72:e9:52:8d:06:00:7e:3d:84:d1:34:68:b4:
53:fa:b7:a0:b4:f6:67:18:6c:16:9c:c7:31:4e:84:89:e8:a5:
65:19:e2:11:e6:71:74:da:89:4b:0f:34:fa:c0:9e:26:09:d2:
e5:35:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:59 2026 by rpki-client