Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: iBzagVKXD22GocTw0oWu5hgXI9u6Epw/LlT2pw/jpew=
Subject key identifier: 4B:D2:D3:4D:9B:CC:91:37:3D:05:04:B7:7C:6C:7E:B7:4B:D3:70:20
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019FA03B1E52FDBEF576B135F1FBA0D1DF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 01E6
Signing time: Sun 26 Jul 2026 21:00:56 +0000
Manifest this update: Sun 26 Jul 2026 21:00:56 +0000
Manifest next update: Mon 27 Jul 2026 21:00:56 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: 4+oH6E9KWkCiV6cDgZuuQjV7G/Wn5VamS6hrlneqw9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:1e:52:fd:be:f5:76:b1:35:f1:fb:a0:d1:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Jul 26 21:00:56 2026 GMT
Not After : Jul 27 21:00:56 2026 GMT
Subject: CN=4bd2d34d9bcc91373d0504b77c6c7eb74bd37020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:a9:c4:05:d2:87:dd:4f:75:a9:63:19:1d:
dd:09:8b:0a:51:cf:67:88:ce:2c:b6:da:4d:f4:f8:
dc:b6:71:96:a4:1b:45:cf:29:2b:8a:4e:e3:62:6a:
b1:ab:33:f7:73:65:86:0a:e7:ca:71:6b:99:e3:53:
5f:8b:f2:da:4d:f8:a1:08:8c:f6:5a:a8:d7:ff:42:
7a:08:a8:c8:dd:84:97:8c:a4:35:94:65:11:3c:97:
c3:76:41:de:c7:9b:08:55:d2:cf:bd:f3:09:da:8c:
e2:4e:ba:20:62:1a:c1:ff:fc:97:c2:c3:cb:ad:6f:
85:2c:01:3e:05:d9:2c:96:74:c0:fa:0c:59:b4:4c:
10:d1:ea:86:2d:0d:a0:06:4c:f7:61:1b:78:20:85:
e4:00:11:4b:6b:85:27:1a:ff:57:a4:e5:4e:b2:40:
46:bf:9e:28:78:b1:b6:e1:1c:26:ed:1a:0f:2d:99:
3f:84:28:bc:12:5c:e5:e2:22:da:89:8f:06:04:8c:
d3:49:99:ca:d8:05:e1:14:d2:a1:e9:ac:18:aa:7f:
c4:dd:4a:ae:f7:0d:6e:6e:13:d7:e0:5a:30:47:e1:
65:b0:36:67:94:eb:c0:38:5c:77:af:e4:21:97:54:
d1:5e:56:26:a6:87:d0:6a:7f:d6:98:7c:dc:83:4f:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:D3:4D:9B:CC:91:37:3D:05:04:B7:7C:6C:7E:B7:4B:D3:70:20
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:2e:f0:68:61:27:68:68:d0:ad:b1:33:6f:97:f5:83:17:
4e:a9:71:65:68:6c:5d:e9:74:14:f9:28:8f:45:bc:0c:c2:9e:
9a:a3:2c:ab:17:5e:31:cf:c5:45:c7:7c:f8:22:a2:7e:50:57:
cd:13:48:28:a1:40:2d:86:12:04:33:c4:46:91:60:7f:a3:88:
80:cc:7e:5c:b6:62:6a:82:8b:9e:8c:ae:56:1b:4d:ae:f8:65:
47:d8:31:60:8f:40:9f:b2:57:36:14:cb:75:6d:33:48:7f:3d:
17:40:e8:0c:54:fc:ba:61:0e:f8:08:d0:99:1b:af:e5:45:f0:
dc:90:19:2d:ea:9a:50:4a:3a:fd:93:d5:0f:20:fa:2b:44:f3:
52:ef:61:ac:a7:47:6e:84:3a:ec:95:e3:0e:ec:ef:e0:3c:ca:
05:89:ff:53:ac:b7:37:bd:8c:a8:72:1a:ce:44:c2:0f:b6:3b:
a9:9c:2a:30:cd:25:c6:67:7e:7c:e1:5a:e5:fd:d9:69:8d:93:
3a:ff:8a:eb:a3:43:1e:73:ee:9b:bc:ef:0c:eb:48:9a:e2:96:
f9:fe:2d:2d:bb:d6:79:fe:96:2f:8e:20:a3:a6:82:33:77:2e:
ac:52:c9:08:c4:df:37:6d:10:61:a4:57:da:e6:a2:bd:69:5c:
88:56:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:55:21 2026 by rpki-client