Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: ZORi+imAhrDs24C2xNncYb1/G8iBxJtCo5q7oPvtlvY=
Subject key identifier: 21:FB:1E:EB:7B:2D:CE:1F:CB:A9:0C:EE:15:54:46:F8:13:DC:12:A4
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 01A0005D0F41D3371C3EC669A98BC1A06691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0D10
Signing time: Fri 14 Aug 2026 13:01:33 +0000
Manifest this update: Fri 14 Aug 2026 13:01:33 +0000
Manifest next update: Sat 15 Aug 2026 13:01:33 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: RpCI6wY6/DaxpZJCzmT7sGm7s+g8j2zq2ZQZJZcG3dY=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:0f:41:d3:37:1c:3e:c6:69:a9:8b:c1:a0:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Aug 14 13:01:33 2026 GMT
Not After : Aug 15 13:01:33 2026 GMT
Subject: CN=21fb1eeb7b2dce1fcba90cee155446f813dc12a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:19:25:8e:3a:26:81:eb:72:a2:1c:ee:3c:
3a:9b:be:66:17:f9:0c:69:f5:bb:99:92:37:18:5c:
1e:43:22:6a:71:a0:53:58:0e:7e:f9:0e:40:6b:2f:
d0:e5:3f:ee:c1:39:6d:84:d1:83:c8:bf:f8:dd:a9:
b4:b4:9f:bc:c7:cf:24:a4:50:25:7d:15:29:37:7a:
1b:d3:69:35:cf:85:9d:e0:e6:da:92:cc:22:bc:2e:
e5:10:74:e4:cb:81:5d:b1:88:21:b9:7d:75:89:8c:
38:63:c9:cf:74:6c:9f:71:19:39:89:10:d3:b9:33:
63:80:9a:71:19:5f:22:9c:02:de:02:23:b0:4d:e4:
2e:99:5c:2a:7f:af:92:05:2d:11:52:93:90:42:d6:
bb:0d:41:b8:4f:11:de:a0:47:f9:ef:f4:55:c0:ae:
3b:dd:89:52:6c:e4:75:04:69:d3:85:83:9f:d7:f0:
a1:3f:72:3f:35:df:7d:94:d1:19:53:0e:fa:47:f1:
b4:c6:7c:49:c0:88:5c:36:6a:55:6b:d9:af:1e:d3:
3d:31:42:51:29:0b:0e:fc:0b:bd:c8:25:7d:67:79:
cb:d5:15:e3:12:ea:ee:54:5c:26:e8:41:5d:70:3b:
e1:d0:ba:54:da:85:75:9c:0a:d8:eb:d0:58:a8:42:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:1E:EB:7B:2D:CE:1F:CB:A9:0C:EE:15:54:46:F8:13:DC:12:A4
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:b4:5a:47:48:19:d1:69:e5:b9:39:12:94:b3:96:0d:a4:
df:be:80:d4:02:9a:31:6c:b8:a5:4e:ea:b6:83:8a:21:f6:91:
04:8f:13:55:a5:68:ce:ff:38:c2:3c:a7:d2:bb:2a:8c:8d:4b:
77:84:06:ce:e8:5c:55:55:a9:94:27:da:47:90:4f:28:88:39:
6b:24:e1:ff:ff:49:a5:d3:df:3b:52:67:26:bd:9d:ec:dd:08:
b1:db:0b:f4:ee:94:3b:8a:72:6c:4d:a7:55:ba:9e:04:2d:10:
1b:49:71:b0:c0:ec:ef:66:ec:e4:ec:2b:95:c4:56:cd:45:a1:
3a:39:b4:06:e1:16:6d:59:3a:23:1f:5b:27:30:fe:80:58:b4:
5a:b3:5f:f9:a9:c8:28:f1:9a:7f:fb:ca:cb:d1:1c:a5:31:c1:
7f:c1:73:bb:2a:51:1b:95:0d:60:38:18:88:5e:0d:d0:1e:5b:
1c:85:da:f8:39:a1:60:29:3b:6f:c0:4d:c3:fb:4e:13:94:7f:
6f:0f:66:a8:28:15:c9:de:97:85:15:d5:9e:b5:58:00:9f:97:
3f:2a:68:ff:85:ce:a8:4a:bc:8f:fe:1a:26:71:4d:24:66:d1:
fe:88:4a:ba:c7:d0:de:6e:3e:33:8c:dc:98:1f:90:77:9b:83:
af:25:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:02 2026 by rpki-client