Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: l1R6WbN3ZUST09XRO8PVaNA5WUnD0AUhih1VzyeSOds=
Subject key identifier: 62:35:A8:73:38:2B:05:A9:3C:71:82:60:BD:89:68:5C:00:15:77:58
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 01A0D5391CFAFF1C31C39B0249CD3B9693F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 0286
Signing time: Thu 24 Sep 2026 21:01:25 +0000
Manifest this update: Thu 24 Sep 2026 21:01:25 +0000
Manifest next update: Fri 25 Sep 2026 21:01:25 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: d9tdB6C9BdyHuW+BRvrPBoMbDMHnbT5feR6OQeOL+7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:1c:fa:ff:1c:31:c3:9b:02:49:cd:3b:96:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Sep 24 21:01:25 2026 GMT
Not After : Sep 25 21:01:25 2026 GMT
Subject: CN=6235a873382b05a93c718260bd89685c00157758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:05:e8:96:8b:84:1e:07:eb:3c:42:c3:86:
a3:8a:8d:08:11:29:98:ca:e2:6c:46:c4:4a:a8:8d:
b4:b9:0c:6f:99:28:2f:86:a4:4a:81:48:d8:1e:77:
99:e9:bd:45:28:93:b5:4f:a6:d8:68:5e:0a:ad:b3:
c5:03:30:65:8f:b6:1a:ff:4d:d5:8a:19:68:73:10:
01:08:9e:a4:15:45:ed:80:b2:22:6e:77:94:d2:b2:
3e:1d:14:15:cf:b0:28:08:ed:1a:8b:47:6d:2c:59:
90:f9:30:6f:8a:3a:a0:03:af:e6:8d:c8:a8:16:6e:
1f:43:94:1a:7b:ce:36:a7:60:96:39:0b:55:01:c1:
f1:a6:48:52:71:be:11:f0:36:0b:6e:e5:11:19:e7:
00:25:05:54:bd:8d:49:56:73:25:38:cc:67:c0:44:
47:82:02:b5:85:62:0a:e5:d0:d6:6d:c3:7c:0e:77:
c0:e5:b0:3c:80:da:30:41:62:47:79:64:ff:14:1c:
83:10:a8:70:ab:b6:8a:91:cd:28:b4:ac:9d:9e:8f:
b2:52:90:18:07:4d:a6:7b:82:7d:0c:f4:5b:42:68:
4a:ec:5f:9b:2b:0e:20:ef:c0:9d:07:6f:7d:12:58:
ad:da:13:bf:e6:0b:9b:1f:0e:ab:22:94:eb:66:33:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:A8:73:38:2B:05:A9:3C:71:82:60:BD:89:68:5C:00:15:77:58
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:a9:d0:0a:fa:5c:55:71:09:52:65:74:8d:3f:fa:2a:24:
8d:84:ae:29:71:82:ee:13:25:ca:1c:2b:50:e8:17:54:b0:4f:
83:e7:15:26:cf:d6:c0:4a:84:c3:14:34:9a:3d:7c:86:dd:c6:
f9:9a:37:55:b5:af:41:21:de:47:3c:21:d4:42:84:69:8f:ad:
0c:c1:ca:21:3c:42:c9:4b:42:f3:ca:57:0d:12:d1:0b:ff:b6:
6e:6c:07:b8:2b:ce:25:8a:b8:17:8f:a3:e4:25:86:bb:52:1f:
c7:e7:f0:7d:76:43:53:ca:f6:98:b6:68:aa:92:0c:15:fb:18:
9d:20:33:43:68:0d:d4:f1:d1:66:2c:3c:f8:35:b3:71:db:1f:
9e:91:2d:53:9e:98:ab:d2:19:78:90:75:44:a0:31:e3:ad:fc:
f2:16:de:85:74:93:1a:96:dc:97:05:65:55:14:42:f9:a5:94:
08:01:fe:7a:38:ab:f3:27:1d:70:87:28:f8:f9:8f:be:25:ff:
fe:6f:b8:9d:21:66:85:f3:19:20:a5:f0:65:f7:49:42:ae:80:
1f:ed:87:93:c7:6f:c5:6f:8a:cc:ef:24:20:d5:aa:41:89:e1:
67:f5:52:a1:7c:2c:b6:be:d1:55:2c:a5:f3:b5:a2:69:d7:e3:
7c:0f:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:29:49 2026 by rpki-client