
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: RuxJAkKrTVlEkt+iVjljjqp/uIj7o9eDQj4jGRLDB4M=
Subject key identifier: AB:6D:9F:A2:89:70:02:8B:8C:0E:C9:9C:8F:25:CB:3F:71:87:76:BA
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 01A0D6B9B46B79159A5B65E65C56B5462D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0D7F
Signing time: Fri 25 Sep 2026 04:01:29 +0000
Manifest this update: Fri 25 Sep 2026 04:01:29 +0000
Manifest next update: Sat 26 Sep 2026 04:01:29 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: kQtZVSn7/KmoiGNbG6QiaeOsX08kLCTIWht2Hpg/B5A=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:b4:6b:79:15:9a:5b:65:e6:5c:56:b5:46:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Sep 25 04:01:29 2026 GMT
Not After : Sep 26 04:01:29 2026 GMT
Subject: CN=ab6d9fa28970028b8c0ec99c8f25cb3f718776ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:fe:a5:15:b9:d2:81:ec:65:3f:9b:d5:78:
08:a3:90:e2:66:d5:07:60:16:bb:c6:0f:13:f5:04:
71:26:ca:f2:dd:69:28:f7:43:92:26:3a:59:d1:80:
da:a9:b5:48:0a:05:0e:be:7d:90:6d:59:9b:56:94:
b0:45:a0:02:67:c8:dc:40:4c:02:96:ea:0b:63:29:
8d:da:9b:99:04:d6:76:b2:f8:d6:14:e5:97:23:2e:
45:4d:aa:dd:07:d8:30:88:3a:e5:0c:fe:23:fa:10:
b6:48:25:6b:2e:04:52:55:e7:af:ac:75:37:e5:14:
82:32:b3:22:01:3b:f0:64:b7:be:41:11:bf:ab:49:
0f:42:e0:4f:d3:bb:ec:f8:a4:15:c5:6f:6d:9b:3b:
c2:a9:3f:2e:19:94:3e:10:7f:8f:a3:c2:08:0a:45:
94:66:27:cc:2b:13:ff:4f:c3:8f:b6:69:cc:0c:67:
c1:44:08:92:3a:2e:ad:fc:5a:10:4a:83:ca:dc:8e:
7b:85:1b:d9:31:ad:7d:20:4b:36:29:5f:1b:00:ab:
bb:fe:31:d7:48:69:4f:3e:47:35:b7:6e:08:85:a6:
7a:e8:97:a5:de:49:f9:36:70:39:1f:57:77:67:ab:
6b:a5:58:96:d7:bd:41:11:11:c3:5a:93:fc:43:d4:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:9F:A2:89:70:02:8B:8C:0E:C9:9C:8F:25:CB:3F:71:87:76:BA
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4d:ab:01:b6:28:41:07:a6:84:50:28:cb:06:2f:3c:4d:e7:
36:81:05:a8:33:13:6a:6a:15:8d:f2:16:de:74:ff:c5:4e:a4:
c1:72:90:11:89:9a:62:ce:0b:0a:45:bc:6f:8d:12:8a:68:d6:
0f:15:45:a5:03:79:5f:26:16:04:bb:34:9f:09:10:49:d5:4c:
f5:5a:10:b9:24:ab:b6:b9:c1:9a:bf:e6:05:be:31:99:96:70:
4b:e9:f3:8b:ee:83:b9:c8:ea:8b:2a:89:c4:f1:8a:35:08:e0:
76:48:2e:3f:d9:bd:ee:69:89:4e:e9:01:30:d6:bd:5e:bd:26:
43:1b:c2:4a:29:a0:49:5b:95:72:af:82:1b:33:19:f4:35:ba:
14:07:52:f7:74:b3:e8:35:5e:10:6d:ec:7a:82:1c:5c:05:b3:
cb:69:11:b3:57:c2:30:3b:3b:3e:55:a7:30:ea:22:f3:61:24:
3e:f0:f3:c2:4a:0e:ee:4d:6e:79:00:2c:54:ff:a5:80:83:2d:
71:01:0a:12:aa:9b:bd:d8:a3:43:9d:9e:33:16:d8:aa:eb:92:
b8:5c:fc:76:56:e1:e0:f2:68:c2:a1:ba:8b:1e:09:9d:af:6d:
86:1d:ec:bb:7d:f6:06:d2:37:8a:a0:88:5e:e0:ed:8d:36:6a:
a2:5f:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:00:16 2026 by rpki-client