Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: NsP2MIexOLMlmRWOStRq+SwlSP0tMIsIsAybgjWjtVg=
Subject key identifier: ED:A0:AD:EE:BD:1F:06:93:92:72:FA:08:22:4D:06:4F:25:F1:36:B1
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019EBA3459C7534DC87E28D971217725839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 165D
Signing time: Fri 12 Jun 2026 05:00:53 +0000
Manifest this update: Fri 12 Jun 2026 05:00:53 +0000
Manifest next update: Sat 13 Jun 2026 05:00:53 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: lI0wp1PSy/QOsiK3UcDyXR6PHsUtAo1+BSP3e3fmAlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:59:c7:53:4d:c8:7e:28:d9:71:21:77:25:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jun 12 05:00:53 2026 GMT
Not After : Jun 13 05:00:53 2026 GMT
Subject: CN=eda0adeebd1f06939272fa08224d064f25f136b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:4e:46:bf:3d:ae:4a:ac:29:87:ba:68:b3:
dd:0e:a3:54:81:97:62:df:1d:5b:0a:27:24:e7:99:
b7:1c:59:7e:ef:bd:84:32:7b:dd:02:20:fa:6c:9f:
3f:d1:c2:2b:65:29:eb:92:1b:88:e6:7f:e6:e5:d4:
20:cb:89:22:cb:77:73:32:5f:78:cd:1c:d5:d7:31:
1e:10:27:27:08:ff:fb:db:38:93:c1:f1:d2:75:28:
f7:c4:67:b1:88:d2:aa:ef:f0:03:dd:5a:06:44:c0:
c5:6a:55:6a:4b:a2:ea:58:f8:a9:40:92:43:2d:e1:
68:bd:a8:d3:b4:62:de:c5:e0:1b:d6:8b:0e:a5:6e:
ad:68:91:68:c9:53:4e:15:6d:d3:31:93:ee:7e:b9:
eb:a1:87:fd:db:30:82:19:c7:90:68:05:3f:08:81:
06:7e:d4:c4:14:da:12:46:a7:14:4b:93:c6:fa:49:
2b:d3:69:c2:f5:02:0f:61:e0:4d:e6:60:6f:05:95:
10:7f:c4:68:b8:b5:7e:90:2e:be:e6:df:37:07:e9:
aa:a3:d3:f2:7a:56:db:a8:83:6e:af:4f:4d:37:57:
9a:e4:f7:23:92:80:2c:ea:ba:07:b4:27:97:87:dd:
c5:f0:55:40:e1:31:6b:3e:1d:c5:da:45:b6:46:39:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:AD:EE:BD:1F:06:93:92:72:FA:08:22:4D:06:4F:25:F1:36:B1
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:de:0a:cc:8d:84:ad:e4:bc:cf:0a:85:bf:f7:ef:97:7d:3c:
5e:60:1e:f3:b5:e2:1d:69:dd:9e:93:6e:d7:7c:9b:f0:90:0a:
a9:44:4a:61:c0:4d:d6:dc:5c:02:9a:cf:a8:37:d1:bb:60:a5:
58:94:13:01:58:ad:c1:a5:90:6e:51:d3:01:a8:e9:14:9a:6c:
f4:b4:4d:53:1c:a1:83:40:42:05:94:44:59:9e:04:a6:9c:41:
00:e0:d5:ea:b3:c1:98:33:d1:ca:6d:5e:26:fd:69:47:2d:85:
83:f3:46:eb:42:c6:85:c2:6a:80:63:f8:12:d7:1f:59:42:74:
b5:0c:1a:68:ef:a9:65:cf:08:13:83:85:ee:bb:24:a9:28:a5:
35:54:ae:b8:05:bb:33:c5:94:53:d9:4b:c0:69:66:91:70:3e:
96:be:f3:e1:3f:62:67:a2:ec:73:ef:86:ae:b7:ac:0a:f7:ed:
e2:22:1f:a1:82:a4:d1:0e:39:32:18:9d:d6:d1:28:e0:fa:3d:
c9:32:4b:cd:a3:7f:1f:c6:a8:c7:f1:ff:a6:e3:bd:7e:3b:30:
88:03:15:e7:0a:27:33:f4:a9:07:79:17:86:0f:c6:94:37:b6:
3b:0b:dd:cd:72:e8:60:af:e0:65:76:36:15:b8:36:e1:71:89:
70:f1:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:41 2026 by rpki-client