Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
File: ONBDirVthCFxMbwG_jNeTHhD63k.mft (raw, json)
Hash identifier: mmU4uAzxHQQ7PIuYXCslfYXdj8so+EFptotCVpckLzM=
Subject key identifier: DA:57:15:7B:37:64:96:11:3E:18:CB:F6:D9:D2:94:64:60:C0:34:22
Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Certificate serial: 01A0028222066EDCC069CBD16C3CA51EC75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
Manifest number: 0706
Signing time: Fri 14 Aug 2026 23:01:17 +0000
Manifest this update: Fri 14 Aug 2026 23:01:17 +0000
Manifest next update: Sat 15 Aug 2026 23:01:17 +0000
Files and hashes: 1: ONBDirVthCFxMbwG_jNeTHhD63k.crl (hash: i285Mp/Jzk6T6nx9eN2v9+hD8p0+Dee2wpOE/to+NnM=)
2: pSL3Mi5XEdAchUtMULvCKuIdKaM.roa (hash: PIsMvcROTvHOYMP/WBLkPzqoyaR6+wBcYymEnJhYyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:22:06:6e:dc:c0:69:cb:d1:6c:3c:a5:1e:c7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Validity
Not Before: Aug 14 23:01:17 2026 GMT
Not After : Aug 15 23:01:17 2026 GMT
Subject: CN=da57157b376496113e18cbf6d9d2946460c03422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:4b:d7:47:6b:2d:a1:84:96:1d:ed:04:ee:
28:91:6f:1e:da:f6:7a:ba:67:39:7c:0a:c4:d2:ba:
9c:5d:80:6f:a2:87:58:b4:84:73:d3:26:bc:8b:e1:
69:c4:89:2f:41:ce:a2:b9:3b:6c:6b:a8:57:26:8f:
33:44:fb:1e:06:3a:66:05:88:f4:c7:0b:b5:3d:6b:
bd:93:c7:85:8f:f8:5d:69:31:56:cf:2e:e8:e2:c9:
9c:db:4f:3e:ad:5c:e6:b3:83:3d:57:d4:b3:5f:bc:
c0:f8:9e:39:15:b9:d2:8d:11:d6:5a:2c:52:d2:20:
c1:8d:30:b4:13:7c:1d:72:ce:72:6b:b6:c0:33:54:
dc:d6:98:44:97:b9:f3:9e:78:13:9b:6b:63:5a:d8:
f2:10:21:67:94:cf:c1:58:7d:79:8a:58:ba:71:4a:
59:85:a9:db:6f:e9:1a:9b:d9:fd:2a:0e:cc:6d:9a:
b1:ed:2c:2f:59:a6:de:d7:d2:4b:d5:1f:7f:33:8c:
ab:a7:12:a1:ee:19:45:bb:50:c3:1d:2c:f8:2e:af:
14:a2:1b:f3:0e:1c:18:28:f1:b6:25:b4:d2:ce:9a:
e3:67:93:a8:72:d2:8c:3b:37:bc:87:1b:9c:3c:95:
d7:eb:34:96:25:e5:15:ba:44:32:2b:d5:4f:90:c4:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:15:7B:37:64:96:11:3E:18:CB:F6:D9:D2:94:64:60:C0:34:22
X509v3 Authority Key Identifier:
keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:18:ca:c6:7e:16:02:81:75:38:7d:2e:1a:7d:38:06:3e:
cf:05:fa:08:07:71:31:1e:a5:49:a0:78:89:b8:fd:18:c4:65:
4d:cd:49:fe:6d:6b:68:c9:83:3f:b1:0a:df:df:29:3c:80:cd:
b9:cf:30:e9:b1:74:4d:3a:99:08:3b:cd:c4:19:b1:bb:4d:34:
e8:bf:86:5f:ba:a9:89:06:f9:bd:cd:36:7b:79:89:cc:f3:2c:
b1:53:73:9f:a6:9a:d4:65:d2:5d:b0:1d:28:9f:a8:92:48:6a:
9e:16:6b:92:47:46:6d:2b:f8:97:c4:30:10:3f:59:28:f6:25:
20:ea:50:cf:4d:49:2d:0e:3a:40:02:58:90:c5:f8:0d:d3:a1:
11:a4:76:65:39:29:b3:93:bb:a3:10:2d:78:f5:d6:be:9a:1d:
33:c1:b6:f6:48:4d:50:38:75:94:1b:cd:6e:80:72:6a:32:24:
e0:c8:03:b0:9d:04:ca:04:53:d0:a7:27:51:fa:54:bf:9d:ad:
4b:0d:f5:44:b7:7c:b5:20:bf:58:75:f4:e9:e0:dc:7c:96:05:
94:c5:bf:e8:ba:92:52:56:2d:1b:60:0d:01:eb:ff:d3:a7:21:
1e:c6:fc:dd:92:5c:10:c9:f5:0a:5c:6c:14:17:21:6e:b8:b7:
b3:ac:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:40:21 2026 by rpki-client