Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
File: ONBDirVthCFxMbwG_jNeTHhD63k.mft (raw, json)
Hash identifier: d6DxZh9YRsOTRMa5RTks5z3PmxVSD+mCB2+C/Kv7Lyo=
Subject key identifier: 12:42:5B:A7:10:CD:6F:C7:AD:79:ED:23:A8:11:F7:7A:D7:9C:F5:18
Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Certificate serial: 01A1509A36A4D4BFC1385EFE03C7AF067E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
Manifest number: 07B3
Signing time: Sun 18 Oct 2026 20:00:46 +0000
Manifest this update: Sun 18 Oct 2026 20:00:46 +0000
Manifest next update: Mon 19 Oct 2026 20:00:46 +0000
Files and hashes: 1: ONBDirVthCFxMbwG_jNeTHhD63k.crl (hash: eBQZ9vYGERyqcyQKitmM/y+kCW8w+RaLoEQqFYVYgkI=)
2: pSL3Mi5XEdAchUtMULvCKuIdKaM.roa (hash: PIsMvcROTvHOYMP/WBLkPzqoyaR6+wBcYymEnJhYyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:9a:36:a4:d4:bf:c1:38:5e:fe:03:c7:af:06:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Validity
Not Before: Oct 18 20:00:46 2026 GMT
Not After : Oct 19 20:00:46 2026 GMT
Subject: CN=12425ba710cd6fc7ad79ed23a811f77ad79cf518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:e2:04:3b:57:38:be:48:d6:18:5b:ec:66:
97:51:49:b8:3e:78:5a:8b:e3:80:15:ec:3d:56:0c:
b0:f9:e4:b9:d7:e7:66:f6:89:0f:0e:90:e8:cf:90:
55:2b:6e:28:61:aa:34:e3:bf:6e:29:a3:6d:af:e8:
16:7e:fb:e4:9b:c6:96:21:0a:bc:2f:e3:59:a3:f1:
7a:dc:37:71:07:3d:db:64:a9:75:03:c0:25:65:db:
6a:bc:79:ff:30:e5:56:f5:36:2c:13:7e:76:f7:5b:
a7:0e:00:71:fa:4d:83:63:66:fd:64:3e:ee:ce:0b:
7f:4f:96:06:fd:af:0a:1e:3a:62:ce:73:e5:73:cf:
b3:74:e5:b1:88:91:7f:82:c4:3a:5b:36:2f:7b:e9:
d7:ab:c0:f9:b3:28:5a:d8:aa:0e:5d:db:1b:c5:fa:
50:a9:3d:98:67:40:e7:96:c8:c6:4b:b9:22:a5:f2:
9d:c3:b8:7e:05:8d:8b:8a:bc:e0:85:c4:4f:10:5c:
d6:7f:03:fb:31:9d:60:cd:7b:99:a4:8b:4e:67:03:
a7:b5:a8:f5:d9:19:ec:83:62:78:0a:fc:fb:2a:44:
27:9d:70:04:f3:b3:cc:29:47:66:3a:14:dc:6b:22:
d5:a0:4d:55:46:c8:3d:0c:eb:c6:21:8e:c9:e3:7a:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:5B:A7:10:CD:6F:C7:AD:79:ED:23:A8:11:F7:7A:D7:9C:F5:18
X509v3 Authority Key Identifier:
keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:2e:0e:3a:f4:50:df:ac:7e:00:75:eb:6a:97:63:f4:39:
f2:1e:1f:0c:74:bf:e9:85:2d:0e:7e:ab:98:a4:47:21:0a:b2:
49:ce:83:a4:44:e3:15:e5:1f:6b:58:9f:cf:31:da:e9:28:0b:
c1:63:d6:81:8d:1e:8c:05:cd:70:53:11:23:51:ee:03:ae:c1:
9c:cb:b0:05:e9:70:a6:36:f6:cc:3d:bf:bc:ae:0d:d9:a5:da:
98:fa:7d:51:2e:19:68:e6:e4:c3:d4:ba:26:97:74:dd:01:83:
7c:6f:96:63:0d:72:c9:d9:66:e6:67:d9:e7:3a:b9:43:dd:ab:
89:10:90:6f:1c:d6:0b:c8:d5:30:b5:4a:25:21:98:38:3f:7d:
4f:26:43:0a:88:17:4f:3c:c0:06:fe:32:c2:05:0d:b2:38:c7:
19:bd:26:67:6e:24:0a:18:0c:3c:6d:0d:58:21:42:5d:65:43:
df:9a:a2:a1:2e:d4:8f:9c:4e:91:37:14:c6:f3:27:b4:3d:b6:
b4:15:ab:ef:9d:d1:33:7e:2b:e5:8b:2f:19:83:72:3e:1c:5e:
4f:2f:dd:3e:35:43:7e:ec:cd:8e:3c:54:c4:85:b3:46:65:89:
6b:82:c8:42:b2:b9:5c:53:1e:b3:8a:6e:eb:23:ef:00:3e:83:
3b:60:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:29:11 2026 by rpki-client