Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: DCu97oBC38B4PTioHXRRa59WoafhbiDUo3DeQ87z8lg=
Subject key identifier: 27:9E:B3:AE:E6:4B:EE:1D:1E:91:04:E1:11:BF:CB:3A:89:92:20:14
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019E1FB5F77AA2692BBB89D2B495B34721AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 160D
Signing time: Wed 13 May 2026 05:01:19 +0000
Manifest this update: Wed 13 May 2026 05:01:19 +0000
Manifest next update: Thu 14 May 2026 05:01:19 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: oArE/z8iV6RiUFuPXW8p3z3uNOjm50u6dp7Mu9Jl1e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:f7:7a:a2:69:2b:bb:89:d2:b4:95:b3:47:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: May 13 05:01:19 2026 GMT
Not After : May 14 05:01:19 2026 GMT
Subject: CN=279eb3aee64bee1d1e9104e111bfcb3a89922014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:8e:5f:1e:f6:7a:0c:18:bb:64:b7:57:a2:
67:e2:52:78:80:3e:18:d9:f6:dd:1e:bb:9b:62:3b:
49:cf:b2:70:66:93:6f:0b:79:f1:27:69:db:06:90:
e4:73:b2:bf:08:58:4b:09:c3:5e:b1:0c:38:a5:5f:
65:8a:8e:e9:8a:db:c0:44:7c:31:26:17:59:df:08:
86:2a:13:fb:08:fd:d3:2a:76:27:d7:e2:97:ae:5e:
6c:76:9a:a2:26:2b:84:f0:84:65:ba:d5:f1:94:46:
15:99:5c:d2:10:b4:a9:83:87:b7:ef:d1:fd:bb:b4:
50:2f:84:53:28:80:5e:e5:1c:23:f5:38:37:60:8f:
59:53:55:9f:d4:f4:21:49:21:12:6b:38:a3:9a:a5:
17:4d:8d:d1:40:d3:c3:e0:4e:a2:b1:bb:d6:73:5f:
a9:e5:9a:19:49:32:96:a8:66:1c:67:d8:04:19:b2:
cc:34:6e:59:42:6c:13:1c:f8:29:8d:7a:b2:28:77:
02:4c:99:74:ca:cd:8c:ae:25:b3:fa:ae:39:35:4b:
69:a2:f0:f5:18:05:7a:fa:fa:7a:92:d2:de:4e:bc:
9e:9d:e7:04:37:1b:8c:23:74:62:67:1a:62:0a:92:
fc:0b:02:98:1b:95:0e:67:f3:8e:63:8d:77:47:bd:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:B3:AE:E6:4B:EE:1D:1E:91:04:E1:11:BF:CB:3A:89:92:20:14
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:64:09:94:99:a3:31:af:7d:9e:07:c6:4d:c1:2d:79:a4:
89:39:82:d0:44:2a:f8:ce:0b:87:85:4d:8b:05:0c:b4:06:4d:
23:0b:ed:0a:40:a5:60:7a:d1:b8:4f:7f:ea:1f:ca:c6:fc:09:
79:f4:f5:aa:ed:ec:cd:04:61:79:b7:89:0f:cd:e0:f6:97:a7:
ee:c0:81:31:1d:0d:45:81:d8:c8:09:99:43:81:b1:68:8f:fb:
4a:e1:c2:26:ed:a0:d3:be:be:be:94:bb:db:8a:3b:9c:d6:ec:
26:87:1a:03:2d:e9:bb:ae:2d:bb:69:2a:be:9d:d8:97:08:04:
ae:3b:11:cd:24:3c:6a:af:9b:3f:14:f8:5d:8d:a2:e7:eb:ce:
9e:06:2d:53:02:5f:83:ab:c5:23:62:59:dc:4b:9f:50:a6:1b:
a3:d8:4f:e3:bd:e8:2a:62:dc:fa:db:1e:6d:77:be:1e:c5:71:
30:98:cf:4c:39:66:33:9a:70:60:5c:bf:33:a0:53:a7:67:29:
e0:06:24:17:35:41:94:55:1a:90:3e:bf:66:15:79:2e:b3:29:
fe:26:d6:e1:fc:c2:ce:74:70:86:27:4d:0d:ed:b8:3c:51:07:
3f:e2:59:90:6c:e8:0c:6a:ff:12:f7:db:95:f6:33:96:98:92:
88:a8:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:35 2026 by rpki-client