Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: 0vkbSp56ghY/Of2RgdGBlM2UjE5aYu2SEPaY03lGzjY=
Subject key identifier: 04:73:10:4E:90:22:CD:E8:57:01:EB:98:64:3A:0A:1A:1B:1F:7F:19
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 01A13F028AF4EA7172DB44557107FFE06071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0DB5
Signing time: Thu 15 Oct 2026 10:01:33 +0000
Manifest this update: Thu 15 Oct 2026 10:01:33 +0000
Manifest next update: Fri 16 Oct 2026 10:01:33 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: iKjEna+4Tsx/J/ogqOv9I+s9eLTmIdAjVhSzT1Tu/as=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:8a:f4:ea:71:72:db:44:55:71:07:ff:e0:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Oct 15 10:01:33 2026 GMT
Not After : Oct 16 10:01:33 2026 GMT
Subject: CN=0473104e9022cde85701eb98643a0a1a1b1f7f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:60:50:38:08:d6:d9:a2:99:4c:34:dc:5f:
e6:c7:36:f2:05:13:de:0f:65:2b:56:b6:9b:08:d9:
86:e4:56:52:4b:b6:1b:8e:d6:96:a1:c0:f6:60:7b:
2c:90:c4:49:fd:dc:00:d3:65:37:9e:77:ac:a6:24:
dd:f8:04:e6:ba:4d:f1:13:f1:cb:d6:ed:81:44:b3:
2d:28:7a:9a:85:49:74:e2:0c:f7:f0:af:3e:a0:d7:
9e:28:5e:b8:42:f7:a3:39:f5:a2:15:20:f1:15:66:
f2:b5:6b:89:c4:2d:b0:35:ce:c5:c4:87:c1:b3:db:
77:9f:89:9c:92:c2:a9:3c:01:55:79:19:1c:c1:fe:
0d:28:ba:4b:27:48:86:b4:23:26:ba:20:e6:1f:38:
72:b7:7e:72:16:68:4a:ca:d7:e5:58:05:29:9c:d6:
d4:f3:a0:4a:99:e7:c6:40:8f:75:e5:4c:18:ba:3a:
e0:b1:bb:7a:62:e9:c5:09:a4:ab:9d:18:2c:6d:50:
af:74:79:2c:a2:eb:32:e3:94:2d:3f:4f:4a:e0:aa:
03:fc:52:13:b3:b4:82:59:c1:32:c3:10:0b:97:f3:
d8:ca:e6:23:5f:6f:00:75:be:67:3d:77:4b:c4:7c:
32:93:84:fd:8f:51:da:8d:43:eb:86:c2:7f:04:1a:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:10:4E:90:22:CD:E8:57:01:EB:98:64:3A:0A:1A:1B:1F:7F:19
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:88:6e:69:f6:a3:e1:73:b5:e7:73:4d:4b:e2:70:79:d3:ef:
ee:3e:f6:ab:1b:41:82:61:c6:a0:c4:27:f1:8a:28:b3:98:f2:
85:55:76:9d:99:47:27:ea:34:19:53:3d:3d:a7:11:17:02:06:
ed:04:97:15:9c:a3:a3:19:fd:be:da:43:7a:1f:71:d1:2b:83:
17:3f:6f:9a:c5:a4:08:1a:18:f5:20:0f:74:37:bd:ec:ca:d5:
8d:d2:19:7b:bc:e5:5b:c7:09:58:50:e7:84:b7:40:f0:01:9a:
fa:71:a0:e1:36:32:00:aa:c9:df:2d:1d:0e:71:c2:7e:ab:99:
ee:f4:b9:1d:29:c3:3d:28:38:43:68:d5:7c:50:d2:c5:16:af:
36:f1:d6:63:41:be:74:f4:c0:42:2d:f3:77:00:e9:99:95:43:
5f:a7:df:65:8d:38:2d:d4:21:64:fd:b2:ba:10:5e:b4:9e:7e:
02:55:91:13:a3:42:b9:64:a3:8b:52:bf:55:79:16:9e:0c:8e:
64:7f:a5:10:f0:9e:37:ae:36:f3:58:6b:a7:c4:62:ed:0a:b5:
31:dd:a5:d6:86:2b:7a:4e:0f:d8:59:3c:68:f9:4c:fa:fc:d7:
2f:93:1c:db:58:e1:a6:92:e0:67:48:b2:31:51:62:8a:e5:d6:
0b:84:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:16 2026 by rpki-client