Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: Im2NvY9OUjd+9HE6maC4HLaWEIbgnrB/CszVwiPS8YQ=
Subject key identifier: 59:35:F1:5B:AC:E0:BE:75:C0:98:32:9F:67:0B:93:D5:37:A7:74:AA
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019D37F72C5F1CE1290CB476E0CF0E440E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1595
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: 5w5/5KqVM5AfSLhGjvfD49IFMFAuUOdgpKEuRc094u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2c:5f:1c:e1:29:0c:b4:76:e0:cf:0e:44:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=5935f15bace0be75c098329f670b93d537a774aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:f5:83:9e:52:3c:7b:d9:de:a7:4a:31:ad:
4f:e0:51:3b:5f:9c:93:b6:67:2b:da:73:57:3b:ea:
c6:ab:70:3b:9c:4e:8a:e3:0d:4b:6f:08:1c:6e:94:
da:c5:0a:86:79:96:33:43:a2:3e:bf:6c:19:39:2a:
79:5f:d8:1a:9d:a0:ab:71:64:1f:6c:b2:d8:d8:65:
e1:d7:ba:69:91:29:77:c5:da:79:60:c0:cf:82:a2:
aa:28:f9:e0:98:d4:0b:a9:d0:58:54:aa:b2:9d:45:
0b:25:58:00:82:b7:5d:75:0b:f8:65:b5:9b:7a:c7:
e6:26:c9:43:f8:20:84:3e:47:61:f4:d9:ff:17:e5:
b0:1f:99:41:a1:48:5a:ac:49:74:86:ca:ac:4a:00:
0a:20:2c:d5:16:67:28:13:c3:95:ba:08:cc:f2:a2:
c5:11:a7:52:e9:4b:e3:07:58:86:03:16:04:d7:d6:
c9:55:ec:2a:18:b5:b2:8b:2c:38:81:01:fd:7d:64:
7f:db:57:2a:82:ab:01:95:fc:f3:ba:da:d8:e9:26:
a1:58:a4:14:2f:71:1d:34:62:ae:af:36:82:7a:3d:
57:59:19:e7:03:36:7d:47:f5:9f:53:a2:55:0f:e2:
08:f7:9d:df:e4:f7:0e:77:4b:05:72:4c:7c:ee:00:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:F1:5B:AC:E0:BE:75:C0:98:32:9F:67:0B:93:D5:37:A7:74:AA
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c0:6a:68:f8:5a:d9:ca:75:2c:9d:6a:78:0b:89:68:87:8e:
7e:ac:ae:31:bd:52:06:88:ef:4a:9d:fb:c6:cb:6d:02:1a:49:
b5:c9:71:e3:bd:bd:65:46:ee:f0:81:a6:54:6a:55:dc:e6:ac:
32:f4:7a:25:87:6f:a1:eb:fd:f9:a1:d8:1d:08:06:f4:fa:c4:
ac:4f:ff:8a:ca:b7:b6:a6:88:65:bc:45:b0:b2:fe:94:43:38:
66:ae:eb:df:a9:58:87:df:ca:49:72:70:26:5a:2f:99:72:2d:
45:52:91:b1:7a:08:b1:4d:11:d8:7f:99:dd:22:26:56:0c:4b:
a8:3d:27:78:ae:68:6c:a5:57:ac:14:35:02:b6:df:30:55:9d:
70:bf:e4:9f:f6:f4:fa:e6:82:40:cc:f4:9a:20:02:69:23:fa:
4f:36:6b:21:88:01:14:02:e8:bf:0f:e6:61:75:5a:ff:87:06:
e4:33:42:00:7f:fa:a2:d3:75:26:26:f3:80:7b:c4:20:ff:e9:
0c:ea:97:ae:6e:70:1e:2a:5e:82:09:0f:aa:fb:4d:e8:87:a2:
3f:bc:28:14:57:4d:92:86:ad:e3:e1:0d:38:c6:be:11:8a:bc:
23:17:8c:3a:40:df:0f:91:a6:40:ed:37:01:20:1d:46:42:be:
c1:8a:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client