Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: +wjosO0c6Gby+DcsWkxuQEqI/6qfY83/90u7yUgnE6M=
Subject key identifier: 20:60:29:EA:C2:22:46:53:4B:96:9A:91:16:44:8D:BA:ED:55:F6:31
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 01A1DDCBF95E84CBC775DCB0F4C2745E3D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 030F
Signing time: Sun 15 Nov 2026 06:01:34 +0000
Manifest this update: Sun 15 Nov 2026 06:01:34 +0000
Manifest next update: Mon 16 Nov 2026 06:01:34 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: lqx1FwHuvN5HLnA5/J5LY/MK1x77pRAZ76A3b+W/HOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:f9:5e:84:cb:c7:75:dc:b0:f4:c2:74:5e:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Nov 15 06:01:34 2026 GMT
Not After : Nov 16 06:01:34 2026 GMT
Subject: CN=206029eac22246534b969a9116448dbaed55f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:16:f9:6a:42:56:6b:47:aa:c4:1e:ea:a1:
6d:17:59:2d:0c:f0:8f:99:40:ad:aa:dd:34:c2:7f:
53:69:50:70:ce:93:9d:7c:19:cd:d5:e8:6c:e2:be:
b1:c0:15:4f:52:0e:e1:fb:df:3b:d7:ed:cb:dc:0a:
c4:65:26:5f:e5:c6:13:c6:f5:f9:f8:17:8e:e2:ee:
f4:b4:dd:c3:fa:1d:25:62:89:04:a3:6c:24:f7:25:
0e:c7:4e:9b:ae:e3:f3:b2:e2:99:d4:4a:78:d9:a9:
af:44:d9:f7:ac:6e:d7:99:83:58:19:52:94:c2:6a:
4e:b0:b2:30:f0:52:a8:7b:b8:52:7f:81:b4:b5:e7:
c8:23:bb:6d:18:00:03:14:47:7b:8f:61:0b:85:48:
c2:40:21:1e:5a:d7:ce:a1:33:30:74:9f:97:05:10:
5b:f1:e5:62:ef:5f:0d:47:95:28:8f:ff:be:ba:22:
e8:bc:c1:68:d4:c4:c4:f3:0f:94:c0:d4:97:47:cb:
cd:34:9d:fc:41:e1:46:77:17:d1:5f:5c:84:60:a0:
3f:5f:e3:f5:45:fd:42:e8:2d:5f:e2:ad:3e:5a:c7:
11:64:6d:ac:5c:fe:47:b3:e8:18:6f:30:d7:bd:6c:
74:c7:06:9a:98:ed:4a:d7:be:8f:7c:e4:5b:71:54:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:29:EA:C2:22:46:53:4B:96:9A:91:16:44:8D:BA:ED:55:F6:31
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:55:02:c4:93:3d:91:12:62:6c:c4:38:86:e0:67:a9:99:ef:
d0:9d:69:a7:b1:22:4d:ca:79:3a:b6:2d:ff:d9:51:dd:39:ce:
6a:16:9a:7a:23:a0:86:18:6b:40:09:14:a1:f8:99:b5:ef:ec:
73:a6:49:ce:06:93:87:c6:99:c0:62:8f:96:d2:f9:65:f4:ef:
8c:2b:49:e5:0f:ad:7d:29:81:51:20:33:65:b0:08:21:02:cc:
4e:64:58:50:56:05:4e:98:71:28:49:95:cd:79:aa:3f:55:77:
41:09:b3:8d:21:f9:74:6a:44:b5:33:f4:37:a3:2c:ea:bc:45:
74:32:1d:14:4d:4b:47:39:f2:00:97:0b:f1:ec:c2:1b:a3:02:
ea:55:67:c2:46:25:3c:14:c6:1f:07:ee:37:1e:0c:2c:ce:6e:
f4:23:90:bc:15:19:b4:a6:c9:e6:d7:86:0b:95:36:2c:52:41:
17:56:c3:2b:fb:4b:6d:31:58:e8:7d:7e:9e:4e:03:82:53:30:
08:1a:a4:90:ee:2e:64:57:ba:e1:0e:79:61:95:2f:62:ca:c3:
d7:89:52:88:bd:93:63:a7:d8:73:ae:54:df:b1:1d:31:29:30:
55:45:05:8b:ab:40:6b:b4:b1:2a:fe:21:96:2f:8e:92:54:a1:
b2:ba:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:49:45 2026 by rpki-client