Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: esQxiw6Gkkr+hfvt6zxeRDuvVVZROWuZ+9haUGgrqWI=
Subject key identifier: 2A:26:8C:F3:AE:18:71:F7:E6:85:80:5B:F9:5F:AF:45:9C:17:1F:03
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 019FA86224E23A8C0EE18CDD27F709E6918B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0BA6
Signing time: Tue 28 Jul 2026 11:00:31 +0000
Manifest this update: Tue 28 Jul 2026 11:00:31 +0000
Manifest next update: Wed 29 Jul 2026 11:00:31 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: MYD6x+7pCNg4ljshR6FL0puiqGQ4erA5zVf1xMS+bQM=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:24:e2:3a:8c:0e:e1:8c:dd:27:f7:09:e6:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Jul 28 11:00:31 2026 GMT
Not After : Jul 29 11:00:31 2026 GMT
Subject: CN=2a268cf3ae1871f7e685805bf95faf459c171f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:e3:12:30:b0:2a:33:61:86:12:22:7b:b7:
53:43:f0:2f:75:ca:d5:3f:bd:a5:3c:f3:41:57:64:
74:10:36:4a:39:c6:dc:a6:c7:e7:58:59:20:52:a4:
db:df:64:69:c8:26:1a:98:4e:92:ac:3b:48:b9:4d:
82:8c:21:bb:04:65:96:91:66:f8:bf:88:6a:b7:3f:
37:3a:4c:b0:d9:d6:39:4a:b9:ea:4f:9a:d8:58:38:
b3:c0:ef:c7:c6:f1:dd:d7:02:3f:df:bb:70:82:ad:
29:96:bd:da:dc:47:b3:06:00:92:ac:6e:f9:f7:73:
58:4f:e9:e1:08:a8:9d:ad:fc:bf:44:64:7c:05:d4:
4e:27:50:ac:5f:f0:14:98:84:05:10:e3:86:b0:49:
3a:e3:b5:55:10:a6:7e:0b:cb:fc:78:93:41:90:2a:
42:de:61:81:59:da:e2:52:c5:1d:19:8c:a2:e2:b3:
85:8a:49:4f:23:34:ee:9f:a3:dc:39:60:0f:20:e5:
ad:7c:e0:1b:28:d0:77:b4:1c:0a:23:46:db:00:2b:
e3:b3:33:5e:6e:1c:b6:e3:53:cc:32:64:99:a9:4e:
e3:3b:f2:41:c4:af:36:27:cd:8e:43:23:d8:8f:ab:
68:4d:a9:c9:5b:f8:03:0c:89:a7:cf:d1:a1:90:66:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:8C:F3:AE:18:71:F7:E6:85:80:5B:F9:5F:AF:45:9C:17:1F:03
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:d7:b2:0b:3f:88:2f:37:10:f8:31:7f:41:53:0f:0b:75:
28:8c:6e:f2:23:b6:85:23:75:15:90:22:aa:28:a0:5d:2c:c0:
12:04:13:cc:7a:c5:2d:a0:cc:e5:56:89:5f:30:3b:57:8f:75:
ef:31:ab:d4:5b:0e:b4:1e:c9:74:7d:40:f3:52:b8:be:8d:2d:
dd:e6:28:af:78:8a:b2:b4:91:28:d5:a5:2d:07:b9:e9:4a:4c:
77:44:d9:d0:70:f9:70:b8:fd:eb:d6:77:03:52:e8:11:27:dc:
ca:54:af:55:ee:20:ac:47:fa:14:26:b3:f2:8b:33:86:a9:6d:
20:78:5a:9d:17:c7:e0:2b:21:65:2f:e5:ff:df:4d:c0:0d:32:
c5:47:3c:8a:b5:a4:2c:bc:7e:91:dc:01:39:07:1c:a0:da:07:
03:2d:22:18:4a:7d:3f:45:50:c3:b4:95:98:6b:86:55:be:4e:
41:83:82:cd:49:1c:dd:89:62:7d:63:47:c5:bf:98:b5:1f:c2:
e8:f8:c3:cc:16:e6:d7:50:67:5e:35:cd:98:c2:ea:ca:c9:6f:
29:e9:3c:ef:64:af:e8:a0:16:45:1f:32:59:4c:be:cb:b9:72:
4c:76:3b:59:cd:11:e2:d2:fd:26:33:2b:93:25:4b:66:07:64:
bc:16:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:09 2026 by rpki-client