Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: Q/df7iSL4O8ld3J0L+XWqvW4h87frRMUDOdXyfmDgOU=
Subject key identifier: 1E:42:DD:50:CD:B9:2C:9F:E9:63:13:B7:05:3B:06:7D:DA:D5:EE:BF
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 01A08BD65C7CA637889BADA6A2F5ED5B2B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 15:01:16 +0000
Manifest this update: Thu 10 Sep 2026 15:01:16 +0000
Manifest next update: Fri 11 Sep 2026 15:01:16 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: OxJX7cq9nTqeoRO8VPZ7HiH4z2JJUQNxElaOeZdrYWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:5c:7c:a6:37:88:9b:ad:a6:a2:f5:ed:5b:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Sep 10 15:01:16 2026 GMT
Not After : Sep 11 15:01:16 2026 GMT
Subject: CN=1e42dd50cdb92c9fe96313b7053b067ddad5eebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:64:d4:b2:83:b3:80:95:20:05:e5:c3:70:
89:04:a0:17:b3:ab:35:c3:4a:e2:68:27:9c:c1:32:
39:30:4c:59:80:57:95:42:6d:80:9f:0d:47:ce:b9:
1c:8e:ab:6f:80:b2:8c:d2:9d:c5:fe:5d:5a:cd:ef:
1d:fa:4e:1c:ec:25:25:d5:c8:87:a8:79:df:c8:21:
b1:b4:18:36:b0:84:b6:4a:9f:26:fd:9f:91:d3:f4:
f9:cb:a0:90:da:b7:2a:1d:d2:f5:3a:ab:65:4b:29:
d0:cc:8f:21:11:f0:db:d4:90:48:68:82:d6:9f:7f:
28:a4:e3:7c:35:25:49:cc:8d:d4:b6:8e:67:27:e2:
19:ee:9d:bf:15:22:dc:38:62:9d:6a:a2:e5:0f:03:
45:ff:3c:51:af:09:f9:8f:59:0c:1f:f4:ce:3c:08:
96:53:6c:48:a7:cf:ea:08:93:0f:e8:f3:c7:ca:f9:
53:a3:b0:ec:e6:87:39:58:cb:3f:c2:03:bd:23:86:
85:e7:03:2d:60:73:d6:ca:7e:8c:01:17:54:98:e9:
e2:67:8a:c6:f7:4e:a5:86:e2:d6:bb:26:29:04:ed:
7f:11:42:aa:78:77:60:a2:7d:00:ca:71:6f:a7:05:
eb:62:9e:c6:f3:6b:85:e4:0c:34:6e:ec:8e:1a:63:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:DD:50:CD:B9:2C:9F:E9:63:13:B7:05:3B:06:7D:DA:D5:EE:BF
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8a:0f:e9:3a:bf:9a:a9:d4:79:04:e2:12:32:a4:74:95:75:
68:7e:58:a5:80:d2:64:a4:71:76:3f:8b:85:65:11:48:6b:6f:
e7:3a:25:87:71:25:b8:ed:1c:4e:8a:80:77:57:a6:b1:f9:59:
a5:02:ba:34:47:fc:31:53:29:29:79:8b:c5:b2:3c:82:91:3d:
4c:43:5b:bd:ea:e8:30:0a:2d:97:28:ec:6e:f2:de:14:bd:32:
2e:df:8a:f4:7d:93:bc:f4:28:fb:48:21:b1:cf:41:97:10:b2:
8d:56:da:08:e6:44:be:12:26:8a:16:45:16:6e:b9:9c:29:fb:
aa:44:23:9b:47:1b:4f:5c:37:95:c4:bd:f1:e8:02:1f:3c:5e:
fc:1c:ab:2f:0f:7d:38:37:57:1f:9c:42:a0:b3:21:72:20:e9:
ca:42:3a:87:62:8c:ea:6c:ab:32:68:11:bb:3e:93:0d:74:6e:
03:75:8a:1b:cd:d1:49:72:66:53:eb:22:2c:d2:0b:14:25:01:
95:10:1e:0f:4b:a8:37:04:2e:ec:cd:ae:0a:e6:4f:6a:5b:50:
d4:d6:0a:5a:13:31:2b:44:0b:07:0a:25:a0:a7:65:36:a0:24:
72:c1:df:01:de:79:d1:de:00:36:cf:17:11:0e:79:1b:8c:ef:
0d:a5:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:39 2026 by rpki-client