Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: WKDG1bVRdEYW4SigKZDvoew7X89rRvkF2HqfRwSCdq0=
Subject key identifier: 05:D3:2D:DD:D7:28:1A:AA:35:84:2B:F6:BE:E9:6F:1C:14:02:9F:D9
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019FA975990C3EFFC9194BB52024BD53D6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0CE3
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: jGrVVeQlWEzbCBvJKnyYpkYIC7gKsvIeqC78fuFUt+g=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:99:0c:3e:ff:c9:19:4b:b5:20:24:bd:53:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=05d32dddd7281aaa35842bf6bee96f1c14029fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:7d:a7:6c:b8:de:c1:b1:3d:6d:5b:91:6c:
3b:fb:31:4d:a5:d4:1f:88:b8:09:5b:34:53:eb:5b:
5b:d4:00:cc:99:92:09:49:8c:88:3e:52:9a:34:da:
83:de:5c:cf:2d:9c:79:6b:cb:50:35:73:57:c5:db:
bf:c6:b5:45:31:3e:ce:72:2c:af:f8:7d:52:ca:c4:
4a:bb:f7:0b:85:f6:4a:48:b3:a6:64:75:3f:fd:59:
07:75:48:e8:73:c4:e6:62:13:2a:06:4e:fa:6c:43:
4f:dc:69:7d:f7:5a:ec:f2:d5:69:bf:79:3d:eb:15:
4b:f1:06:a7:bb:6e:6a:e9:de:1e:5d:c4:44:b8:50:
28:0f:69:6e:d9:20:3d:19:58:3e:cc:04:2a:b2:6f:
6b:8e:a3:54:b5:a7:c8:7a:a6:6b:06:0d:98:03:db:
40:2a:2d:fa:a2:43:dd:76:87:32:0e:40:16:73:25:
d2:f3:bf:9a:6c:e5:1e:7d:d5:20:32:0e:7e:70:88:
2f:86:42:7a:6d:8a:d7:3f:55:83:60:e5:cc:0e:71:
ae:14:73:ad:95:a3:52:f4:bf:70:a7:bb:b7:d2:4b:
bf:9c:16:83:b5:5d:5c:cd:9b:7e:ba:e6:2d:4e:3b:
49:d4:2f:f5:31:0c:b8:0b:c7:9b:88:b2:c1:8e:36:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:2D:DD:D7:28:1A:AA:35:84:2B:F6:BE:E9:6F:1C:14:02:9F:D9
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f4:54:ea:51:98:ac:bc:8e:c9:cf:19:cb:99:58:59:2f:9f:
c1:30:37:b7:ad:cc:de:a5:03:3f:d6:05:41:3e:6c:f1:3d:de:
be:93:03:eb:9f:a0:04:9e:20:50:d2:29:07:70:43:91:fd:3d:
0b:3c:ac:6d:af:c2:f7:82:33:53:ce:79:72:87:81:c5:6d:26:
f7:7a:58:4c:83:f0:ea:34:fa:82:7b:5a:f9:ef:f7:3a:49:43:
2c:22:d4:a3:fe:77:53:78:9c:4a:bb:b8:38:a0:90:92:0c:fb:
ed:7a:07:7e:85:4c:62:36:3a:88:98:2e:95:89:6c:74:23:bf:
05:b3:ea:13:be:12:a9:59:db:33:f0:af:1f:4e:df:f1:d0:02:
e2:06:a3:e0:1f:53:24:b9:03:cc:fa:f3:f4:01:19:73:7a:01:
97:aa:70:0a:a2:66:ba:f1:4b:61:56:ed:a0:d3:6f:ec:c3:10:
e1:1b:39:ab:5c:cb:a3:79:fe:27:3a:50:7c:4f:d3:a8:3b:63:
14:e4:fc:a1:3a:4c:cd:d9:ad:fd:32:1d:d0:c3:02:bf:82:12:
70:2a:f3:67:a8:94:88:79:ba:17:bc:03:79:b9:5a:d6:91:12:
92:ad:e2:2f:bb:32:2d:57:55:28:91:4b:4b:2d:82:b4:48:22:
aa:66:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:55 2026 by rpki-client