Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
File: onxkG1MKfGuiNAIuMyckYjI2cQA.mft (raw, json)
Hash identifier: FgP5rOPXVV8Q8uxgLSmftxbxpdaQ8H1cD4+Sr4LWxuQ=
Subject key identifier: 23:5B:BA:5F:6D:75:AC:E3:AD:00:4C:3D:3E:FB:37:47:6C:3F:20:24
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 019FFC11729F7F19913FD587F621840B92B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
Manifest number: 0F44
Signing time: Thu 13 Aug 2026 17:00:29 +0000
Manifest this update: Thu 13 Aug 2026 17:00:29 +0000
Manifest next update: Fri 14 Aug 2026 17:00:29 +0000
Files and hashes: 1: H3RmjMDhi-VIQKw953O9EUU-NrU.roa (hash: u8dYTQtYNEtT+hfaZbOUxQvhTTWTaktw3famZ+VPWSU=)
2: KHZ6X050RQpN8C-zU6JBaEYg3FI.roa (hash: TDPzA+FjAhUQy2Fbl/oOlKCfde+8XwBa4JB9fFqOvmY=)
3: onxkG1MKfGuiNAIuMyckYjI2cQA.crl (hash: sC0i9ZYmMCqJZXtYzBK8vKKH67wjYl+8KNt/1Av8tlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:11:72:9f:7f:19:91:3f:d5:87:f6:21:84:0b:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Aug 13 17:00:29 2026 GMT
Not After : Aug 14 17:00:29 2026 GMT
Subject: CN=235bba5f6d75ace3ad004c3d3efb37476c3f2024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:f1:2d:87:53:ad:8a:c3:22:f8:99:4f:33:
89:0f:e8:21:ff:45:c0:60:e6:c9:2d:7a:b5:18:fc:
ae:dd:e2:e5:39:3c:f8:15:1c:c4:62:c5:be:c5:49:
7a:69:73:1e:4f:96:2a:a8:84:45:aa:36:57:c2:98:
bc:15:71:d2:c2:16:53:5d:b1:a9:8e:8e:04:62:b1:
e4:c4:82:96:aa:21:42:0a:f0:8f:35:ad:06:4a:fc:
43:a0:3b:7b:37:1c:7c:8f:49:b1:ed:9e:b9:0e:87:
af:63:19:fc:17:7c:c9:15:fd:91:fe:a3:c0:92:85:
db:af:14:3f:bf:46:a4:dc:1f:2c:e0:6c:42:82:e7:
1d:23:89:c6:f1:34:6e:9f:a6:2a:3e:d0:7b:eb:df:
9d:62:45:88:5c:fd:a6:26:36:5d:19:9f:bc:c0:6c:
b7:c7:b8:cc:27:3e:83:bb:9d:9a:de:5d:44:72:9c:
dc:61:33:53:a1:04:b2:32:bc:1c:b3:cf:ba:b3:ef:
3d:ba:0f:9f:2c:ed:ed:11:2e:b3:20:28:ae:60:f2:
bc:af:e8:df:cf:f5:70:2a:f1:13:e6:12:79:bc:82:
dc:62:cb:1d:65:c8:27:f9:10:48:e2:f9:e1:d6:57:
da:a7:f1:a4:47:d7:14:06:e2:19:75:bd:92:1c:73:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:BA:5F:6D:75:AC:E3:AD:00:4C:3D:3E:FB:37:47:6C:3F:20:24
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4d:21:3f:6a:16:23:58:74:1e:c8:b1:a7:69:98:78:6f:ac:
af:48:91:fc:da:a0:88:53:4e:1c:83:cd:6f:93:91:83:cb:6b:
e8:d3:70:44:5b:41:1c:2b:ad:a8:6f:2d:f4:12:1b:ff:b4:3a:
ec:33:07:8a:da:bf:2d:99:dd:77:42:b6:ab:2b:77:47:c3:0c:
5f:a4:42:36:fd:de:98:52:01:74:2f:93:af:1e:fb:54:05:39:
e3:af:9e:14:ef:a6:84:65:af:c9:c2:ea:9d:5f:22:bb:2a:11:
f4:fd:dc:23:11:20:0f:8e:77:5d:c5:28:6e:e0:84:19:74:77:
96:86:09:42:84:cf:5f:c6:4d:fe:69:ac:20:9b:76:7e:d7:76:
eb:16:bf:6f:22:ee:15:3d:6e:90:4d:b5:d0:9a:18:a4:8b:36:
ae:28:1f:7a:a2:bd:40:91:1b:f1:7a:a4:30:27:c3:fa:62:2f:
c2:3b:0f:72:7a:f5:7d:52:2d:53:69:74:35:f0:ad:a6:f5:f2:
47:94:13:0a:b5:84:0c:86:f4:e0:da:4d:e7:65:52:fd:9e:da:
ae:50:3c:55:0b:0e:2d:4d:60:ae:db:cd:51:2e:72:a8:b9:d4:
f6:14:42:d8:71:fd:1d:9d:07:d1:4c:48:dc:42:01:ab:1b:a1:
a1:9e:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:06:04 2026 by rpki-client