Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: SyMu5aJ+RsrVZaijgr881WhBKDfG6cq/O3dtPhB1y4A=
Subject key identifier: 48:22:E9:AC:1C:02:EF:45:EA:9A:0E:7F:C6:FE:04:D7:63:F2:98:9E
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019D2884BC640735EDBEE3E3E3F0CE18D969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 158D
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: AW5c/y2ZMiUlcQxsWnR3JoTIeoeqDg3ySyBwIlTi1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bc:64:07:35:ed:be:e3:e3:e3:f0:ce:18:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=4822e9ac1c02ef45ea9a0e7fc6fe04d763f2989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:e2:d3:7f:06:66:ad:f6:39:07:04:31:8d:
12:d1:21:ff:ec:fb:f6:1b:a4:00:8c:25:de:0f:57:
1e:a4:bc:e1:5f:9e:c2:69:a5:73:a0:14:44:74:83:
fa:b1:4d:2b:6a:70:8d:ac:87:26:24:c9:b5:32:cd:
72:ca:27:41:6d:85:54:79:bb:c2:a2:2a:9e:79:84:
db:e5:37:50:4e:ec:76:5d:b2:15:08:5f:40:8a:38:
e4:e0:17:1d:08:55:45:08:6d:e8:f7:88:ed:e7:d7:
f7:0f:c2:05:87:37:4c:1d:17:22:52:2c:33:c7:d0:
55:f2:99:4b:6c:a9:95:5e:6a:4d:75:b7:6d:97:b7:
6f:c6:a2:3e:e1:fa:6a:f3:38:ca:08:c3:dc:e7:c4:
0b:2e:6d:3e:24:03:fe:2a:4b:cb:b3:70:d3:e6:61:
c3:e7:6d:2c:dd:9e:73:2f:fa:5d:2b:00:8c:f4:97:
8e:34:79:c8:7d:46:cf:98:e1:e3:62:fc:ef:0c:29:
b7:7f:d5:52:be:ba:3e:19:c1:51:62:ff:e5:d6:1f:
44:5f:10:c3:0e:3d:f6:3f:db:5c:45:6b:19:f5:2c:
24:e5:3a:cd:83:c8:ef:72:83:17:29:39:b2:11:0f:
e0:74:95:7f:97:7c:bf:48:10:11:d1:d4:75:32:fb:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:E9:AC:1C:02:EF:45:EA:9A:0E:7F:C6:FE:04:D7:63:F2:98:9E
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4a:42:f5:8e:dd:dc:3c:da:8f:8f:a9:1a:1a:1d:7c:44:cd:
3d:1e:30:49:e5:77:68:f5:0d:92:50:46:cf:ad:5f:03:bb:3e:
2d:45:09:a7:8f:c7:19:6f:f3:b8:5f:f4:8c:44:f9:04:72:ce:
f4:33:a0:0b:f1:4f:2d:92:79:e7:d9:f5:b5:70:4d:6d:88:52:
7d:7d:aa:47:02:1e:0f:73:10:e1:ad:77:c3:11:59:b7:56:66:
71:6d:95:b8:5c:80:53:3a:85:52:4d:f8:0f:ad:9c:23:6d:08:
28:0d:c8:0e:a1:5f:bc:22:b5:be:a4:47:92:66:a7:25:bb:d9:
2c:fd:be:77:1c:e4:dd:f7:be:d5:a7:70:5c:24:39:ac:d9:f4:
41:58:b2:38:ee:d2:e0:ee:71:2a:83:aa:57:49:83:d5:39:b0:
3f:a2:39:96:fd:20:dc:bb:21:04:8f:5f:ad:23:8e:92:7e:c9:
a1:0c:6e:6d:b8:6e:07:12:fc:65:c7:7e:9a:a7:28:53:2a:71:
98:3b:8b:e8:63:30:0f:5e:bc:1a:04:bc:ec:bb:ef:c4:ef:3a:
c6:de:cc:e0:8d:90:f0:7a:98:35:e1:8a:24:4e:91:6c:51:dc:
4e:78:94:d8:fb:e6:dd:4e:28:c7:35:34:5e:a8:85:c5:fb:cc:
99:34:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:12 2026 by rpki-client