Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: ADEvzpjr0ANoD6Fetk3CBkmDofeC4P73yZQDq4k8uS8=
Subject key identifier: E7:9F:AA:81:83:85:AD:C3:4C:3C:66:7B:0B:52:32:76:97:EA:93:1A
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019CAB3477B748B32D3BF95FBDB4BA201000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: BRfxsEsbaNhwcte5OnnrTz0/Tpc8/F0lyF5JXCFuWUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:77:b7:48:b3:2d:3b:f9:5f:bd:b4:ba:20:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=e79faa818385adc34c3c667b0b52327697ea931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:70:b8:cb:17:01:b4:df:45:62:8b:ef:d5:74:
5c:5b:85:93:32:cb:c2:9c:45:94:e0:66:f9:f7:20:
2d:83:dc:b9:72:db:e4:c0:db:22:89:1d:a8:9d:fb:
18:ec:2c:94:85:65:df:a4:0d:1e:4a:82:c4:30:8d:
41:b5:0d:3b:8e:aa:f9:3a:18:ee:93:fc:e7:61:fb:
1e:d7:3d:44:93:ed:7d:5e:31:c9:03:ff:17:cb:13:
f8:45:b0:d6:c1:d1:e7:9c:c7:cb:af:50:36:55:27:
29:c1:90:a6:79:67:8b:7e:61:ba:d7:06:08:0c:d6:
fa:3f:14:80:c5:af:ec:69:7b:36:88:95:eb:34:83:
30:35:7b:f5:55:d4:af:95:62:c9:50:41:04:3b:47:
b6:d8:c3:f8:2b:be:4f:97:24:75:48:1a:42:d1:03:
d3:22:93:39:58:a0:fc:67:bd:e7:6a:64:0f:af:b0:
45:70:63:11:50:d3:47:99:a4:41:46:99:7e:2e:9a:
a6:5c:ae:f8:b9:45:6c:69:6c:8b:61:26:ca:69:d8:
ad:09:94:d5:83:41:f5:cb:c0:63:20:05:2d:f7:35:
87:69:a5:9e:d0:fb:80:de:4f:4f:03:87:02:34:b2:
85:ad:17:a6:df:53:ce:b2:b3:49:f1:ff:d3:ef:2b:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:AA:81:83:85:AD:C3:4C:3C:66:7B:0B:52:32:76:97:EA:93:1A
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:53:54:c8:f6:44:80:fb:5e:3c:4e:03:eb:ea:a6:67:44:
e9:79:7b:e9:e9:cf:f3:b5:85:b7:59:07:d8:21:33:d5:19:ac:
35:18:76:de:dd:f0:17:60:ef:7a:c5:19:0c:2f:f4:3b:a6:54:
07:b5:8f:a9:11:6d:32:02:ba:fb:b0:7e:cc:65:b8:eb:ea:d3:
3f:b7:57:10:5f:fd:a5:4b:55:42:88:ff:5f:d1:ba:41:8d:5c:
f1:3c:f1:ca:64:57:b8:6e:6b:6e:0b:84:19:91:2a:7b:73:59:
fb:01:4d:e5:ff:72:1f:52:7a:2f:3e:8d:d7:d2:50:54:81:21:
50:32:be:e2:8c:db:50:ba:6c:b1:6a:ca:cd:08:42:5f:8b:38:
11:2c:21:88:bd:34:f1:62:d2:7c:d6:8a:84:a5:04:c4:10:c6:
93:13:9f:e8:90:e5:74:0d:54:0d:cc:d9:ed:d2:00:3c:52:f3:
5c:de:9a:05:c4:7a:e7:db:bd:e0:a6:17:13:91:7e:69:c0:5c:
62:9f:3f:48:ea:cf:6f:c5:08:26:0a:c7:b5:4a:eb:de:6d:dd:
c3:30:f7:cb:4a:ea:69:9b:5d:45:16:70:5a:3e:8a:19:b9:67:
00:1c:36:de:62:f9:ef:60:0a:05:e0:36:af:7a:eb:5c:46:ac:
81:0a:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:39 2026 by rpki-client