Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: FGw3mO/RxOhSdg/6Joat0cFT+ZitIlWM3jTTqJahj48=
Subject key identifier: 7B:0A:F5:EA:26:F4:4B:2E:EF:29:D5:59:69:24:A4:5D:36:01:DF:DF
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 01A17B4D7FBFF93D6B57C8A7F8CF30BBC56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 03:00:38 +0000
Manifest this update: Tue 27 Oct 2026 03:00:38 +0000
Manifest next update: Wed 28 Oct 2026 03:00:38 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: JzGs+gDXrG06T700PgJPtVlndfxHwlIUg8TwC10rUPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:7f:bf:f9:3d:6b:57:c8:a7:f8:cf:30:bb:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Oct 27 03:00:38 2026 GMT
Not After : Oct 28 03:00:38 2026 GMT
Subject: CN=7b0af5ea26f44b2eef29d5596924a45d3601dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:eb:2b:82:ea:4d:dc:0f:3b:d0:f2:77:0b:
30:fe:b3:f9:2e:3f:5e:9d:67:33:4d:db:98:bb:13:
03:c6:e5:88:02:cb:c2:a1:7c:cf:e8:92:e1:32:21:
72:f5:51:3b:8b:83:89:29:80:2c:da:16:c6:00:66:
97:33:6d:2f:12:c4:6b:75:7b:1c:be:4f:1d:75:e0:
f6:73:7d:e6:fc:a2:3a:e8:be:6e:da:47:ba:56:3a:
d2:f5:08:3c:1b:95:e5:e9:d4:cf:7f:d0:c3:8f:13:
10:cb:c8:eb:aa:ea:92:35:39:a3:af:48:e4:04:ee:
c2:2f:ec:21:2b:db:64:5e:7a:49:f2:91:bf:1e:fe:
c6:24:60:29:41:27:7b:a4:76:d6:1b:ff:7b:e8:c2:
e4:9c:b8:9d:c7:1e:d5:5b:09:33:1c:c6:76:04:0c:
e0:7a:3d:99:cd:9a:12:fa:30:33:c3:ae:72:29:4c:
0e:36:bf:64:e9:8a:8e:0f:0f:6d:6a:1b:4a:5e:30:
66:8e:a4:5c:18:fc:13:11:9e:8f:48:5c:45:fe:7f:
03:7d:78:b0:08:64:ed:a6:06:dc:a7:23:2e:f9:95:
4a:34:09:bf:44:2f:78:ab:7e:5d:3d:69:c2:4d:c5:
5e:3e:31:86:93:31:3c:69:79:00:76:8e:b6:d0:18:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0A:F5:EA:26:F4:4B:2E:EF:29:D5:59:69:24:A4:5D:36:01:DF:DF
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:11:db:f9:9f:19:95:b8:73:23:82:0c:b4:9c:19:2e:56:
3b:62:77:0c:dc:ad:61:c6:9a:d6:7e:03:fe:7a:f4:88:6b:3f:
09:e0:5e:da:a6:eb:a8:7d:c0:1c:c2:19:73:2a:84:36:d5:98:
e1:ba:2f:67:0f:e1:22:47:b4:88:b0:ec:0f:65:d8:13:56:ed:
df:df:1e:de:e5:68:09:2c:c9:c2:50:1d:45:cb:4c:35:b9:2b:
29:e5:10:25:a5:d0:af:4b:13:d0:24:fd:ce:9f:cb:03:33:0f:
36:8c:7c:fd:21:41:b9:06:74:9f:a0:26:f7:f8:cc:43:28:40:
3f:31:ae:a9:e0:4d:e7:52:23:5a:72:8c:e9:9a:e0:34:09:37:
d7:fe:90:04:3d:cb:1c:f7:ad:9e:09:76:a5:d1:8f:64:2d:17:
b1:da:cb:ab:2b:56:89:a3:a1:64:c3:d8:54:3b:13:26:63:e6:
cc:04:96:a5:9e:45:6f:b0:45:8f:05:8d:7f:96:dc:2a:4f:36:
a5:13:dc:cd:bb:38:b7:3d:75:7e:b3:0d:51:ba:ba:f9:1c:c1:
b5:3d:a8:f5:af:3e:0d:bd:32:71:65:98:b1:bd:89:f8:7b:31:
5d:99:bb:bd:50:de:9f:d0:1f:7b:5e:95:66:ef:3a:82:02:4f:
68:04:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:58:07 2026 by rpki-client