Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: N+pH8PzI0DRtUJOpJIb/IZhKChzvNj/iHUpjv6ma5R8=
Subject key identifier: 62:77:84:AC:F7:B4:A7:55:CC:E9:53:07:10:D9:1C:16:A4:94:78:01
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 01A0C821E3D8645163D20410F7829625F614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0C3B
Signing time: Tue 22 Sep 2026 08:00:59 +0000
Manifest this update: Tue 22 Sep 2026 08:00:59 +0000
Manifest next update: Wed 23 Sep 2026 08:00:59 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: 53QceaUcoCuz8GiO/IK8dvirJknufcXXFodAXa77MJI=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:e3:d8:64:51:63:d2:04:10:f7:82:96:25:f6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Sep 22 08:00:59 2026 GMT
Not After : Sep 23 08:00:59 2026 GMT
Subject: CN=627784acf7b4a755cce9530710d91c16a4947801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:c2:da:8c:72:c6:c0:4d:e5:63:c4:f6:2b:
b6:e4:b7:58:3f:2f:fc:1e:ee:71:05:11:4c:ac:19:
88:5d:14:74:d3:4d:ab:78:35:26:a5:6c:78:7d:e3:
53:5d:c8:3f:7d:54:94:cb:5f:6c:bd:5c:80:b5:0c:
49:fd:dd:b9:71:97:e0:fc:26:80:b0:5c:ca:f9:a3:
4a:66:30:6b:15:08:e7:18:6b:ad:c3:24:bf:a6:66:
8c:0e:41:b7:41:52:f8:f5:5b:ef:1d:e5:ef:1b:48:
35:3e:a8:11:0c:0a:59:6b:33:b2:0a:2c:77:45:9c:
8b:c2:f2:f7:2c:b5:5f:cc:ad:ed:19:9a:6d:f4:44:
f4:20:99:5a:29:fb:ec:6e:89:00:f6:26:00:37:4a:
11:3b:e9:35:54:ac:df:73:88:68:90:76:61:27:03:
2a:b1:76:10:69:65:d3:53:51:8a:16:b1:d7:33:a5:
15:a1:bf:2c:c6:f1:98:e3:55:fe:5a:70:a0:80:e9:
60:86:65:04:6b:83:0c:3e:fd:97:11:45:8d:59:d5:
47:e5:7a:b5:54:dd:66:ba:15:b8:f0:bc:69:15:d6:
d1:f2:ad:71:ea:1a:c0:ab:33:e6:35:90:79:33:3b:
6b:81:c7:2f:26:7f:ba:ce:37:20:71:ef:8c:e2:47:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:84:AC:F7:B4:A7:55:CC:E9:53:07:10:D9:1C:16:A4:94:78:01
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:cb:eb:ff:76:59:2e:e5:13:a9:6b:a3:78:cf:2b:b0:7b:
0f:43:e3:d7:2c:a4:63:81:df:ed:2b:3d:46:cb:25:05:2e:2f:
c0:9d:16:5e:cd:3f:3f:74:91:a4:60:f7:8a:46:f5:32:6a:8b:
f3:c6:ec:2c:48:93:02:18:4d:54:ed:cb:ad:1a:42:43:8c:54:
4d:1b:05:ba:06:bc:18:87:23:28:97:bb:7c:e4:1f:60:87:48:
cb:2c:fe:db:02:40:09:8d:57:fd:ce:91:b7:f2:07:37:9d:aa:
29:89:63:ba:64:aa:45:9e:01:27:26:41:09:27:ee:a9:b8:f1:
3d:83:b3:30:ab:cb:0e:3b:1f:3c:a2:d2:45:6b:32:3f:e6:81:
4b:7c:a0:e3:87:84:2a:ff:49:fc:7d:19:35:7f:ac:d2:45:92:
24:bb:7c:c3:41:a6:b6:8c:16:bd:9c:49:15:70:91:cb:06:fb:
92:05:d8:aa:b2:ae:6a:36:ca:a6:d7:de:e6:fe:f2:f1:52:5a:
8e:c2:35:6c:d2:3d:d0:25:74:0f:b5:d7:c9:34:79:b1:eb:96:
11:7d:85:23:3c:3a:2b:ec:9d:0a:c9:ce:e3:81:5e:c1:98:ee:
7a:11:38:7f:20:89:80:13:9f:50:54:f2:eb:d2:f7:25:98:12:
ad:30:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:34 2026 by rpki-client