Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: 2jSArhdtpCyc3ABupxYDYeaPqJHPHHF8Ae2DZ4/eDLE=
Subject key identifier: C9:C6:FB:36:1B:92:A6:35:5B:E0:3A:8F:BB:4C:2D:C3:65:F0:D3:A8
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019D39AE8120847B604862A118C26CBB2297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0BA0
Signing time: Sun 29 Mar 2026 13:00:30 +0000
Manifest this update: Sun 29 Mar 2026 13:00:30 +0000
Manifest next update: Mon 30 Mar 2026 13:00:30 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: I8l7o6yLWSg4xIabvfsgGHtLcPtXY4snoUUKj1Xq7hA=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:81:20:84:7b:60:48:62:a1:18:c2:6c:bb:22:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Mar 29 13:00:30 2026 GMT
Not After : Mar 30 13:00:30 2026 GMT
Subject: CN=c9c6fb361b92a6355be03a8fbb4c2dc365f0d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:e0:bd:7d:15:a1:d0:dd:a2:76:d4:29:97:
ca:43:a0:54:a5:53:d7:a4:c9:b8:70:2a:0e:d8:c7:
e0:ef:81:f1:ad:c6:89:a0:7b:62:d7:47:18:1f:0b:
73:b2:9f:5e:93:1a:5f:5f:ad:94:e5:30:80:11:32:
8d:f2:7d:54:23:92:8d:61:08:48:3b:1e:cb:41:69:
3e:03:d9:a6:36:44:cb:73:a9:9d:56:cb:15:ef:d4:
a8:3b:5f:bd:78:06:13:d8:24:5e:09:09:ac:f6:0e:
76:17:64:1f:5f:36:bf:72:2c:ca:6a:95:f8:61:42:
58:a0:ae:04:9d:08:d7:4d:07:53:ef:6e:81:8a:cf:
40:2b:5c:36:28:a5:2b:c2:38:3f:f8:10:15:1f:03:
29:7a:bf:49:2d:a7:4c:1e:e5:ef:f2:c2:c9:98:3e:
70:8a:8b:72:00:ae:04:c1:bd:24:f5:f9:c5:f0:74:
13:b9:d7:a1:2a:d5:9f:01:85:f8:f7:71:c0:86:64:
ec:cb:47:65:a0:0d:30:a5:4c:e7:b7:dc:93:99:5e:
98:98:fb:76:34:df:96:42:d1:4e:e2:13:ca:99:15:
ad:bf:a6:d3:ec:fd:8e:ab:c8:1f:f9:e6:be:70:72:
c6:9f:9b:ca:28:41:6c:b5:0d:15:57:5f:59:12:f5:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:FB:36:1B:92:A6:35:5B:E0:3A:8F:BB:4C:2D:C3:65:F0:D3:A8
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d2:74:21:93:5c:46:69:cb:5d:38:1a:58:ad:f8:61:34:bb:
57:fa:70:00:07:eb:d8:68:65:de:fb:1b:4d:95:66:1b:d1:0b:
b3:59:dd:1c:03:0e:93:ad:26:95:ab:73:7b:0b:b1:5c:bc:7d:
f1:2d:00:ec:5f:34:7e:39:4a:fd:3b:fc:2e:ef:69:34:e6:d6:
ab:00:57:94:df:ff:f2:18:51:1f:30:3e:dc:38:39:2e:bf:94:
5b:74:23:86:e2:5b:4c:89:ec:9e:ff:6c:e1:03:26:db:65:31:
92:8b:5f:b0:5f:6b:18:48:94:19:a3:39:68:7d:34:ca:00:d9:
e4:fa:e0:a2:ae:74:15:da:e8:93:a1:20:9b:2a:91:d2:a2:f3:
e9:e8:3e:af:00:56:7b:49:b0:04:8c:2f:36:a5:e9:3b:4c:30:
f7:7f:47:a9:fa:51:dc:f4:ac:34:f9:94:8b:39:fb:95:b4:aa:
2d:61:c5:a7:2f:8f:d9:48:23:2c:d8:01:10:11:f2:9f:d4:86:
e3:e0:fd:98:c0:dc:b4:3f:d9:3f:8a:43:ef:b6:eb:f2:1f:d9:
6e:a3:3c:82:5f:06:db:3a:3a:73:4e:e9:04:77:db:52:37:8a:
bf:c3:fe:a8:1d:18:f8:cc:4a:4f:d0:c1:3c:3f:b8:99:01:69:
69:30:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:42 2026 by rpki-client