Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: DlkWWEKmbN/iCmvrgLrshid4GIuU9wxTA5i3iSRyVGg=
Subject key identifier: 2D:D6:F2:56:F5:5D:5B:B8:14:65:82:7A:BB:A2:24:75:0F:55:13:ED
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019FA9E32D02819577BA904B227B88C0F2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 18:01:05 +0000
Manifest this update: Tue 28 Jul 2026 18:01:05 +0000
Manifest next update: Wed 29 Jul 2026 18:01:05 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: xy8ib6lTg9XF+CZ0R5sm9+UNUgbEB+dcdu9PUVGBJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:2d:02:81:95:77:ba:90:4b:22:7b:88:c0:f2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Jul 28 18:01:05 2026 GMT
Not After : Jul 29 18:01:05 2026 GMT
Subject: CN=2dd6f256f55d5bb81465827abba224750f5513ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:b0:ce:a1:6d:22:c4:3f:85:82:66:84:e6:
88:a6:78:fb:a3:c4:93:f9:3b:31:bb:6c:96:49:d2:
9a:10:b0:e4:96:3c:1f:10:37:6b:67:bc:3b:c9:d6:
cb:ea:d6:59:c9:ff:db:37:32:fe:94:5f:38:87:12:
af:b0:a9:e0:a3:b9:aa:c6:c4:29:92:c7:fb:9b:86:
ec:d3:64:b0:96:c4:3b:54:d0:07:43:9f:c3:85:01:
d2:c4:de:b5:33:56:4b:77:36:7e:44:18:75:8f:41:
18:a6:f8:d7:c5:4c:f9:f0:83:b7:ca:78:9d:e9:5b:
2a:a8:d0:27:28:c5:29:0b:9b:2f:90:07:a9:9d:fc:
a0:6a:f4:25:4e:05:e7:24:d7:9e:1d:b6:66:77:21:
60:f6:26:2b:a0:d1:0c:03:58:48:da:db:c8:e9:46:
69:57:60:95:f0:5e:71:9e:c9:89:5c:f1:e6:3b:79:
bf:53:76:51:f0:15:d4:63:22:39:b8:e3:b1:af:22:
78:65:e7:48:cf:69:14:df:71:a6:9a:56:29:7f:28:
23:22:96:b7:b0:e0:7d:b0:23:de:14:b9:e8:6d:2c:
55:f4:69:03:56:97:f6:db:2d:0b:30:2f:37:99:28:
84:a6:91:77:75:f8:ec:8b:1a:a1:d3:9f:d9:6a:07:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D6:F2:56:F5:5D:5B:B8:14:65:82:7A:BB:A2:24:75:0F:55:13:ED
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:ff:c6:5c:0c:b8:9c:c2:25:b3:c0:13:ff:d3:e5:5f:67:
81:86:e9:e1:1f:11:17:f2:6f:f0:e1:a3:54:cb:7e:94:2b:ba:
49:08:fc:5e:82:eb:ae:55:99:3e:6c:09:2e:71:fd:3f:15:68:
19:01:e2:59:37:20:ef:a1:bd:53:b0:86:c2:b7:b2:1d:9c:b2:
1c:e5:b5:83:08:6c:cf:26:28:64:34:46:5a:49:48:42:bb:78:
e0:0c:a2:f5:8c:66:8e:dc:6e:9b:97:f9:43:40:10:1a:6a:16:
68:64:eb:c0:f7:19:c5:19:4d:8d:32:cc:79:58:8f:9e:c5:f1:
d9:d9:90:9d:c2:7f:75:7e:12:da:4f:50:ee:21:09:78:99:df:
84:bb:a1:32:9d:dd:38:b3:b6:ee:1d:6a:4f:ab:e8:0f:10:d4:
13:04:44:71:f5:88:21:6f:51:f6:4e:89:3b:90:5d:d0:a4:31:
f9:0c:fb:74:8d:cd:6f:56:70:1b:bc:9f:a4:0c:17:56:5e:ca:
8c:da:fd:a2:ca:3c:94:cc:dd:06:ad:18:9b:cf:c6:82:38:c8:
23:ec:17:95:9e:7d:62:6d:5d:97:21:0e:ca:e4:2b:07:bf:03:
ad:f2:c1:8b:3a:1b:36:3c:9c:96:c1:0f:5b:81:90:25:71:4b:
ea:e1:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:46 2026 by rpki-client