Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: R7r/40Q16UT+/T/GnjlyXNyxJ1myE0tWcU0Ndb+5a6I=
Subject key identifier: D2:6E:00:CB:31:F1:38:95:8B:29:69:A3:00:D1:8A:47:5A:0A:8A:3F
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 019D37C06FCF0905D2F25A8CB7F7B355A6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: ER7043w15E5TfxjID-TYUpdQDx0.roa (hash: QCEnuybWNl7OwdBInx1m2/kcO9FbiGhdTyF0PQgFlqg=)
2: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: 40jaUTR9Gf8JNOfdyQL+3H64RU8i6X34tduvLx1objw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6f:cf:09:05:d2:f2:5a:8c:b7:f7:b3:55:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=d26e00cb31f138958b2969a300d18a475a0a8a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:94:ce:e7:ee:3d:bf:da:5b:11:6b:d1:47:
27:d4:1b:15:83:2d:3b:ef:71:3e:6a:13:7f:42:da:
6a:30:0a:ca:03:b3:df:5a:9d:d3:1b:a3:82:dc:26:
4f:fc:b4:2a:7c:f1:39:b9:7e:e2:f1:5a:c9:65:82:
4b:50:6b:87:5f:7a:87:e9:0b:7b:48:fc:fe:0f:f2:
ae:c7:b4:99:69:90:48:de:e4:80:28:14:c8:d8:a6:
88:1e:88:aa:7a:e7:00:c8:a6:66:06:1b:92:b6:ff:
0f:c3:9f:65:bd:a1:e9:ff:2b:ef:db:f0:3d:d7:7b:
b3:f1:95:01:b6:08:43:0d:31:11:db:7c:8e:ba:41:
d2:33:ae:39:f3:ce:f2:d9:d8:f3:fc:d3:5e:44:55:
2b:19:67:cf:20:ce:7e:75:5b:a2:20:20:2a:cf:d4:
f6:23:71:ab:e1:d1:34:ee:fe:2b:89:fc:c5:ae:f6:
08:a8:53:f1:d5:d0:aa:0c:57:0d:46:e2:19:43:c3:
bc:dd:b2:71:e6:ed:f5:f2:f1:48:58:0e:7e:d7:a6:
ad:d8:6c:30:7b:ef:80:3a:81:5a:63:3d:e8:76:b6:
e8:f1:81:f7:8d:1e:43:bc:67:3a:7a:05:7b:29:dd:
18:7b:15:26:30:42:ba:cc:bb:8d:f0:37:4a:3b:07:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:00:CB:31:F1:38:95:8B:29:69:A3:00:D1:8A:47:5A:0A:8A:3F
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:02:ff:df:da:67:9e:ba:e4:f1:6c:65:18:66:6f:36:74:
02:4e:2b:e4:16:ca:6d:28:84:db:80:47:79:a2:48:1b:49:27:
5d:9d:7f:ac:09:ab:ed:b4:84:91:f7:e2:07:28:3a:e8:96:58:
cd:57:00:b2:5a:1f:10:4f:e5:f1:72:6e:51:a6:ec:c1:75:d7:
fd:6d:99:48:be:7c:39:b0:92:98:bc:aa:3e:44:8c:92:d3:23:
1e:13:19:5f:f7:b6:9f:57:40:56:f0:f5:dd:21:0f:30:27:26:
f1:66:82:5f:71:da:81:ba:2e:3b:76:cd:23:e2:23:6f:4d:68:
af:31:62:fa:8f:89:1b:63:1c:a9:74:3f:17:aa:c7:28:de:09:
71:e0:3b:0e:2b:8c:6f:68:1f:0d:92:6b:0d:86:34:fa:d2:f6:
53:5d:7d:68:c1:97:35:a4:a1:83:1b:d3:73:d8:bc:2e:b7:ae:
01:e9:0b:51:2a:41:1e:7f:53:bc:7c:34:7c:ed:68:7f:24:3d:
92:8f:e7:8a:1e:c2:a9:b3:fc:fe:85:be:65:2b:b4:f9:42:19:
84:fa:89:57:bc:c6:40:e0:ce:1e:46:1c:4d:2d:2e:1f:3d:d7:
9b:00:34:30:19:1e:14:d6:9f:1a:53:2c:39:a8:5e:a1:82:3b:
ea:c0:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:35 2026 by rpki-client