Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: joRMiqAq21n6ecH6kZ+vseDD7kkYWcAk3EB6Y4WM8uE=
Subject key identifier: E1:4B:43:A8:FC:4C:2D:67:AB:10:25:3D:15:F4:F0:F0:78:63:FE:02
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019D9A3DED630FFE2EC9671881BC5A82D615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0BD2
Signing time: Fri 17 Apr 2026 07:00:42 +0000
Manifest this update: Fri 17 Apr 2026 07:00:42 +0000
Manifest next update: Sat 18 Apr 2026 07:00:42 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: qzqkuXMyDy4JSp68DZq9UDY96bbREow2a+ecCx/wQ2g=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ed:63:0f:fe:2e:c9:67:18:81:bc:5a:82:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Apr 17 07:00:42 2026 GMT
Not After : Apr 18 07:00:42 2026 GMT
Subject: CN=e14b43a8fc4c2d67ab10253d15f4f0f07863fe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:f0:fa:bd:94:97:21:13:f8:c6:4d:1e:17:
5a:8f:cd:ce:34:da:a7:f0:13:a8:15:74:66:84:04:
55:f4:ba:b6:ec:f0:4b:8a:d3:b3:3d:c8:7c:c8:74:
00:a0:90:7b:22:d7:4d:89:d5:b9:86:9b:d6:bc:1d:
57:87:ce:31:78:7d:68:3c:23:61:0d:d8:08:d7:a8:
ba:56:54:24:ca:c2:3c:54:81:d2:87:b3:67:a7:e0:
5a:37:ee:43:72:dc:c6:2c:b3:f7:58:83:a3:e6:08:
3c:a0:6d:a4:33:56:04:96:3b:ad:7f:89:2e:6e:c4:
01:cf:bb:d6:27:1d:bc:6d:58:1e:f5:66:f6:c4:58:
16:23:d8:83:87:22:4a:65:1e:0a:90:8a:47:3b:75:
c5:a7:91:77:15:48:e4:db:d6:f5:d3:3d:a4:16:8b:
8a:79:11:2e:a6:e5:c0:b9:99:60:84:2c:0c:6c:5d:
38:8f:85:1b:0d:71:60:47:09:28:e7:05:10:ab:a5:
38:e7:a7:4e:a6:22:cd:b7:8f:00:ea:a9:e0:58:78:
64:92:9c:a8:9c:3e:e5:55:4f:0b:64:77:78:20:08:
12:66:a5:97:b9:f3:3f:95:4a:fe:24:40:bc:99:d7:
fa:e3:e3:84:62:a6:88:6d:2f:6c:e1:ba:35:59:8f:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:43:A8:FC:4C:2D:67:AB:10:25:3D:15:F4:F0:F0:78:63:FE:02
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:62:ce:14:aa:63:0c:01:c3:b0:20:55:40:5d:72:e3:af:84:
9d:28:9b:d5:0a:10:3c:a5:e1:7e:28:36:45:18:f8:2d:43:c7:
e1:0a:26:7d:86:60:17:32:ef:ae:02:e8:fa:3f:7f:dc:ab:40:
d6:7d:1a:5e:2d:8f:a4:d8:6c:51:19:34:ae:60:20:3f:23:c7:
21:93:90:35:6b:31:06:0b:f2:45:de:94:af:2c:e8:7f:73:87:
86:d4:e0:6c:a4:9b:98:55:c2:27:72:e1:87:25:a9:4e:f6:e0:
55:99:b6:5c:96:9e:a3:c7:40:89:3a:68:2e:86:c0:8a:65:e4:
b3:c4:10:ac:b2:5e:26:4c:42:38:10:8a:ba:94:67:a4:6c:c6:
e1:85:38:79:55:05:57:46:83:14:8a:b1:02:1e:4c:6f:d8:b7:
54:d3:31:ff:16:93:78:7c:4f:e2:4a:a9:0d:b2:59:cb:d5:e8:
ff:b9:33:76:b4:1f:5f:ef:b6:d2:37:b7:05:0a:32:18:11:fa:
a6:6b:4b:8b:fb:14:d8:10:ca:4a:06:6f:25:22:d6:c5:d4:a7:
e7:ac:6b:fc:63:9e:ba:58:52:d8:a0:6c:84:2a:99:55:8d:49:
06:ba:94:8d:22:33:4c:1a:4a:96:dd:e2:ea:82:b4:90:b0:4f:
d6:92:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:37 2026 by rpki-client