Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: cGWcq7QAiPTDFz0t0p647g/hEhIP1M3MjNZt2IBMuIs=
Subject key identifier: 8E:B0:5F:AC:AA:91:3C:31:62:E6:62:7A:B9:9C:96:36:2A:F6:08:FE
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019EC036445D84E3E20788795503395D3B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 09:00:42 +0000
Manifest this update: Sat 13 Jun 2026 09:00:42 +0000
Manifest next update: Sun 14 Jun 2026 09:00:42 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: WtQqcfTVCJ/PSg1QoQIvgswEFdIxms/89ew0fVPVBp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:44:5d:84:e3:e2:07:88:79:55:03:39:5d:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Jun 13 09:00:42 2026 GMT
Not After : Jun 14 09:00:42 2026 GMT
Subject: CN=8eb05facaa913c3162e6627ab99c96362af608fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:bb:55:e0:28:87:07:37:53:28:e4:15:8b:
3e:3f:f9:6d:f0:03:6e:f3:52:fb:b3:63:c2:eb:50:
a4:d3:b7:14:57:e8:00:10:a2:0b:76:ea:59:4d:c2:
c5:eb:88:58:1c:95:ef:d3:ca:ea:ef:94:80:3c:61:
2c:ab:5b:38:37:30:e7:c9:1a:17:69:04:f9:1a:8c:
a2:5c:77:0e:2d:72:91:c3:7a:63:2c:b5:0e:ab:0a:
dc:0c:a2:48:0e:48:5d:41:bd:a6:ef:15:51:64:37:
18:4c:a5:8c:60:9c:b6:d6:a6:33:c8:01:82:1d:33:
7b:f3:4f:18:a7:41:43:41:24:e6:77:05:f9:5d:a2:
16:5c:e3:3e:c2:38:c5:9e:cf:67:c1:b0:b9:13:1c:
7c:c5:0a:03:92:eb:97:d8:6b:b0:e7:74:bc:b1:85:
13:0e:31:f6:72:7f:46:9d:80:bf:12:06:12:be:2d:
1d:78:98:32:97:14:2a:2f:b4:b4:65:bb:be:0e:7e:
e9:58:84:b9:5a:4c:80:4d:5a:d7:64:7e:92:e4:ab:
b6:32:b8:21:6e:1e:5b:7b:a3:5d:f8:5a:49:4b:20:
1c:21:3f:eb:b5:a9:4d:a5:75:39:dd:4e:1d:6a:c5:
67:0d:2f:56:de:36:29:11:c4:fe:0b:ac:d9:27:8f:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:5F:AC:AA:91:3C:31:62:E6:62:7A:B9:9C:96:36:2A:F6:08:FE
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ac:da:6d:f3:37:0e:ea:2c:7f:82:d2:16:c9:bc:8f:41:81:
47:5c:bf:ce:0d:75:2a:bc:c0:c3:c3:74:d7:87:61:f3:ae:75:
2e:5e:25:c6:eb:45:6e:42:26:df:ca:43:98:9e:f4:9c:6d:33:
2d:e3:73:17:c1:8b:5e:6b:94:b4:4d:33:aa:91:80:3a:45:f8:
fb:db:35:81:c5:f1:f2:6e:76:4f:08:ce:bd:af:ae:5b:ad:ff:
12:d6:2b:8d:28:ea:32:66:48:72:98:f9:c3:b1:ec:74:89:29:
97:29:df:e7:15:93:b8:63:48:25:ed:58:58:fc:81:f9:d6:3a:
79:ee:d5:2a:ad:35:5d:c0:4a:a4:41:56:8c:9d:3e:01:9f:f8:
9a:2e:d9:20:31:36:74:96:59:e7:10:7a:83:cd:b1:5f:05:df:
45:3b:5d:ca:cd:56:01:a3:f2:64:6a:d3:47:ba:8d:a3:3d:a0:
b0:ed:1b:ff:5e:8a:6e:b4:dc:0f:60:49:5b:3b:43:62:68:8f:
12:8b:d1:23:e2:d9:95:7e:05:db:5f:15:90:79:24:ad:5c:bf:
70:65:04:dd:ff:ba:1e:25:fb:35:1b:29:45:a0:3a:99:67:70:
23:bb:84:f2:a2:4a:9a:2d:0d:e2:23:8e:1b:30:73:ff:a7:18:
d6:c3:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:29 2026 by rpki-client