Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
File: onxkG1MKfGuiNAIuMyckYjI2cQA.mft (raw, json)
Hash identifier: 8bHD0vvFwUaAXcj1XCaKe57rkP9NDieluGDC8DNp38I=
Subject key identifier: 3C:48:5F:C7:A1:29:F7:10:AB:69:8D:D6:B5:1F:BD:7C:52:8B:F9:08
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 01A0F34353F3176EB46B6A86F38F2AD0B0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
Manifest number: 0FC4
Signing time: Wed 30 Sep 2026 17:01:10 +0000
Manifest this update: Wed 30 Sep 2026 17:01:10 +0000
Manifest next update: Thu 01 Oct 2026 17:01:10 +0000
Files and hashes: 1: H3RmjMDhi-VIQKw953O9EUU-NrU.roa (hash: u8dYTQtYNEtT+hfaZbOUxQvhTTWTaktw3famZ+VPWSU=)
2: KHZ6X050RQpN8C-zU6JBaEYg3FI.roa (hash: TDPzA+FjAhUQy2Fbl/oOlKCfde+8XwBa4JB9fFqOvmY=)
3: onxkG1MKfGuiNAIuMyckYjI2cQA.crl (hash: cHu75xq9c967XyNul9dyngrjbes1wbT/J65vP2Wg3Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:53:f3:17:6e:b4:6b:6a:86:f3:8f:2a:d0:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Sep 30 17:01:10 2026 GMT
Not After : Oct 1 17:01:10 2026 GMT
Subject: CN=3c485fc7a129f710ab698dd6b51fbd7c528bf908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:4f:0e:47:4f:67:9f:c8:1d:86:2d:de:9e:
7c:a5:90:ab:d5:53:1b:ff:dd:53:94:f1:de:cd:f1:
fc:c1:14:96:37:b8:4b:6d:33:8e:37:0a:5d:0f:12:
4a:6e:a8:96:ae:4d:7d:05:fa:85:19:f7:bc:d0:45:
1b:1c:d1:0d:b7:7c:e8:fe:b7:dc:aa:4a:b6:fb:08:
cd:47:8e:4c:da:8b:50:b3:38:df:30:55:01:da:e4:
dc:33:07:a8:7e:48:fb:db:c0:c0:37:25:a6:10:63:
5d:22:08:da:f7:ce:6f:0e:12:0d:3f:2d:15:93:1c:
e3:d3:07:85:0b:1c:9b:cc:93:03:6a:87:99:32:b0:
04:27:2a:29:0a:52:c1:07:f6:42:38:76:85:3b:81:
ba:0e:f5:22:b3:ce:9e:f6:69:39:32:78:83:1e:3b:
d8:3b:3e:ab:97:2c:23:5c:3a:6a:cd:f1:7f:f9:c0:
58:84:47:ba:0a:26:fd:d4:ed:09:36:be:b7:c6:e1:
de:9d:5f:b3:9c:a9:02:02:d3:1b:34:a4:86:df:f5:
19:b7:1a:c0:81:cf:41:56:bf:57:00:ae:09:42:ad:
df:ac:af:7f:56:4f:d5:d4:fa:a4:be:be:8c:ad:b9:
e8:91:93:ce:10:77:09:6e:d6:9a:47:54:a3:f4:1b:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:5F:C7:A1:29:F7:10:AB:69:8D:D6:B5:1F:BD:7C:52:8B:F9:08
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:8a:db:ba:50:96:ed:c6:0b:2c:ac:45:47:bb:66:00:55:
78:51:89:b2:7d:55:f4:bf:50:21:3b:a2:66:0f:6b:30:b2:5a:
cf:e4:8a:0f:8b:5c:d7:46:6e:2d:43:f1:36:90:45:0a:75:8d:
f9:1d:22:64:d4:b9:81:f5:8f:1a:0d:dd:00:48:fe:a5:ee:a9:
a4:ee:fb:72:d3:55:53:2d:2d:bc:c6:6b:57:1d:39:07:b3:65:
b6:f7:3d:5f:1a:a1:55:86:dd:4a:ab:a4:70:86:8d:8a:68:83:
3c:3b:92:1f:43:a3:b7:c3:1e:8c:ea:fd:02:3c:2c:2b:07:13:
60:6d:a3:e3:e9:8c:62:e3:47:4d:1d:04:f7:a8:b3:84:9e:c7:
cf:22:fd:e9:65:63:82:77:27:0e:65:c9:a8:00:de:3a:34:fe:
d1:c2:86:36:09:c7:ff:79:d1:31:62:76:10:b2:dd:1d:83:45:
15:04:12:83:a3:94:f6:c8:7b:22:a0:93:60:11:3e:54:cb:1e:
cb:a5:cf:49:5d:eb:86:f9:95:53:23:80:c0:dc:ed:13:44:b7:
85:59:b8:41:90:4e:89:51:61:45:99:00:e9:c7:64:40:c6:bd:
56:69:0f:13:02:b1:34:e0:62:61:d6:7f:f3:3d:1b:ad:4f:b5:
34:ef:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:46:24 2026 by rpki-client