Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: Fc92kVJjvjMx49jfKKxAZSnOC7s3dvb735OFB9iW2YU=
Subject key identifier: 7C:97:7A:10:7F:76:34:32:C8:87:38:6C:0A:FB:62:6E:CA:C8:C0:C5
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01A17EF3B8AD2C1CD255989CFBC98EAB12F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 17CC
Signing time: Tue 27 Oct 2026 20:01:04 +0000
Manifest this update: Tue 27 Oct 2026 20:01:04 +0000
Manifest next update: Wed 28 Oct 2026 20:01:04 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: aimB9KGqeGB4d+hch6xhmN7q0BHMN05F53w+2p3XgbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:b8:ad:2c:1c:d2:55:98:9c:fb:c9:8e:ab:12:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Oct 27 20:01:04 2026 GMT
Not After : Oct 28 20:01:04 2026 GMT
Subject: CN=7c977a107f763432c887386c0afb626ecac8c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:35:e5:07:fe:b6:80:d1:40:66:7d:db:73:
fa:6d:eb:cd:55:58:d6:f2:22:56:0b:3f:d6:68:e1:
7a:79:89:d4:1a:cf:86:d4:6b:a5:f6:ec:bf:7d:7b:
22:aa:fe:e4:5c:ff:e5:f7:30:51:40:38:28:cf:4d:
87:66:d0:7c:25:ce:7e:59:a2:27:3d:01:1c:44:dd:
0f:43:8b:9e:59:23:2d:14:1f:21:ee:04:6c:45:ef:
74:15:66:46:05:36:6e:d5:1d:50:fa:ee:62:5e:6e:
99:64:b8:d2:ff:bc:93:7a:81:57:1a:ef:e4:ef:71:
a6:7c:c2:46:d0:58:ab:ef:8d:6a:9d:7e:06:55:60:
d8:cd:fa:c3:a4:f2:26:57:83:35:65:14:d1:82:87:
b6:e9:6b:da:05:34:62:27:87:86:72:f8:3d:61:f8:
4f:97:1b:f3:70:81:40:bb:dc:4d:4e:36:6d:2e:97:
a8:cd:4e:d3:c1:dc:9d:76:4e:55:7e:0b:26:fb:e2:
d8:78:4d:42:27:97:d7:57:99:2f:52:06:d4:26:95:
dd:72:52:ea:00:40:5e:ab:d4:b0:b7:35:20:67:63:
9e:04:46:fa:4d:b7:b9:2d:b6:f0:90:6f:71:93:59:
f6:41:7d:0e:5d:b0:5d:e3:ed:eb:47:80:65:20:d2:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:7A:10:7F:76:34:32:C8:87:38:6C:0A:FB:62:6E:CA:C8:C0:C5
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7d:f4:cc:38:a5:44:2e:f7:9b:b1:31:12:23:34:e6:a3:3f:
30:06:ad:66:1a:3c:3c:77:42:aa:54:78:84:ac:5a:77:fa:5c:
fd:a7:2c:f6:a3:dd:91:79:a5:08:35:98:03:7a:a2:b8:a2:3a:
41:f7:41:63:90:91:23:92:ed:db:ec:2a:e7:23:8e:a1:bc:45:
49:22:d5:55:ed:e3:a6:09:67:ca:60:7f:cd:57:e5:9c:62:fe:
ac:4a:9e:dc:fc:d1:25:f3:fe:3e:66:64:0d:a7:eb:0f:d4:5d:
24:81:1e:ab:5d:81:4d:2b:e3:a8:d0:89:2d:16:62:09:f1:b1:
b8:63:49:36:b2:1f:2b:43:10:45:f2:00:79:cb:72:12:58:cc:
2c:b3:29:b7:fc:90:c4:a5:fb:2c:11:7d:c2:76:ac:64:8b:86:
90:ff:64:02:e8:d4:8c:79:17:b5:bf:4b:78:13:d2:77:9f:3b:
b8:ea:a9:3d:b5:f0:ba:95:58:85:2c:f8:6f:67:a2:f8:4a:f0:
ed:ac:d7:45:b6:23:e7:8e:8e:8c:71:ff:87:d4:04:26:95:b8:
b8:ec:f6:9a:d8:e7:dd:50:0f:f0:3c:2b:02:9f:a8:bd:cd:0a:
a3:5e:b5:44:db:9a:98:ac:30:b2:3d:18:95:7f:b2:2b:48:d3:
b9:08:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:31 2026 by rpki-client