Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: aPHzfNdqkjItUhvsH9ye72NU1rgNZd5mhbr8A5/Wr/I=
Subject key identifier: 53:01:92:9D:30:AA:33:59:76:12:E5:BF:99:25:DB:9B:85:CE:DA:53
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01A08B9EBD4D162B332085130CB24EF952D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 174E
Signing time: Thu 10 Sep 2026 14:00:31 +0000
Manifest this update: Thu 10 Sep 2026 14:00:31 +0000
Manifest next update: Fri 11 Sep 2026 14:00:31 +0000
Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=)
2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: GRGBenCgaH1eBkfm2iZmGRwAcOAwnkMrJRrUeh3AWTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:bd:4d:16:2b:33:20:85:13:0c:b2:4e:f9:52:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Sep 10 14:00:31 2026 GMT
Not After : Sep 11 14:00:31 2026 GMT
Subject: CN=5301929d30aa33597612e5bf9925db9b85ceda53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:4f:9d:89:2f:c5:4f:72:45:4b:da:b1:c4:
a9:5d:7a:59:48:2f:0a:ee:aa:19:74:d1:4c:25:89:
58:53:67:01:32:ee:2e:eb:b2:64:5b:12:f8:9a:28:
51:17:9f:d4:1f:c4:27:b9:b4:d3:12:b3:08:c5:6d:
bb:af:30:4a:cf:8c:dc:aa:c4:b7:47:8a:ff:d0:02:
db:1a:53:4d:bc:4a:0b:b5:3c:e4:5c:a0:bb:0f:8a:
8d:d8:ba:0d:2e:8b:99:10:7a:9c:cd:71:d6:dc:e7:
7b:cd:3d:81:38:93:2e:08:3b:ba:07:dc:95:36:29:
7a:78:73:54:1f:ae:9a:00:7a:94:0d:94:6b:ef:ce:
8a:79:a4:56:0a:32:aa:55:28:b1:44:33:4f:0d:a2:
bb:40:45:9e:b7:71:92:d7:c9:26:77:56:d2:38:fa:
31:d9:81:e0:86:64:74:fe:99:78:be:27:a6:f3:5a:
c8:d2:33:3a:47:41:89:aa:ec:4e:be:6a:44:06:62:
28:20:02:53:21:5c:a1:06:8f:5f:26:a9:7a:a3:bc:
d3:ff:30:51:91:62:bc:29:a0:bd:66:c2:e9:8c:f9:
6a:0d:41:52:03:e6:5b:aa:23:12:f1:11:26:a2:ed:
9f:99:b0:3a:fb:83:fb:93:c8:65:87:af:cf:ce:cf:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:92:9D:30:AA:33:59:76:12:E5:BF:99:25:DB:9B:85:CE:DA:53
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:4a:7b:d6:6c:8e:10:a3:86:86:44:07:fa:73:db:ad:7f:
15:b0:a8:33:af:9e:78:b0:55:04:95:8a:99:cd:99:e9:d0:79:
99:ac:29:d1:1a:6f:dc:9e:cc:b5:d2:7f:ff:09:c6:68:68:de:
d2:e9:82:ba:58:3c:9f:74:0c:6d:1c:f7:8b:95:f5:68:49:31:
68:a4:3f:6b:b5:74:48:d5:0a:7b:92:49:46:15:3a:03:d2:77:
dc:7c:2d:12:75:73:ca:0f:3f:79:59:31:ea:5b:68:fc:09:9e:
02:1e:2c:6b:df:5d:bc:ca:c9:32:c1:ed:b0:5d:2a:01:52:38:
eb:79:3a:1c:37:9c:77:3b:3c:45:5d:f8:15:fe:e6:1d:37:b9:
f0:00:06:80:4a:86:7b:da:b4:b0:f7:dd:23:bb:19:52:65:65:
0e:c8:96:fb:3a:09:25:0a:19:d6:d0:ee:2a:ff:20:7f:49:98:
da:92:49:0a:c0:37:16:35:52:b8:c7:53:9d:b9:e1:4f:34:f7:
58:b0:80:dd:be:8f:01:4d:f8:5c:a5:c6:4b:2a:f8:5f:fc:49:
7d:cf:34:c3:32:5f:a6:16:25:8e:27:bc:be:f0:55:e2:9a:91:
8e:7b:c2:1e:5f:f6:1e:c5:1e:fa:06:58:a8:ac:f4:44:2c:3f:
a6:00:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:35 2026 by rpki-client