Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: PkIVi0Ax6AXQnJwiZ6UlZiOcSAov8KKVGZTfii5wEX0=
Subject key identifier: 4E:81:36:99:85:4F:A3:A3:B5:5B:FF:91:B2:B2:A9:61:96:28:8C:84
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019F92B623D28DAA578016BFD94F87B8AFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 01DF
Signing time: Fri 24 Jul 2026 06:00:37 +0000
Manifest this update: Fri 24 Jul 2026 06:00:37 +0000
Manifest next update: Sat 25 Jul 2026 06:00:37 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: BzZZUxWIr34+Jb9jOngTAVtVHSvRLsnHE6xLlr5hAXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:23:d2:8d:aa:57:80:16:bf:d9:4f:87:b8:af:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Jul 24 06:00:37 2026 GMT
Not After : Jul 25 06:00:37 2026 GMT
Subject: CN=4e813699854fa3a3b55bff91b2b2a96196288c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:4e:65:3a:59:a2:74:de:71:cc:7f:8f:12:
7e:2f:c9:a7:62:16:58:71:fd:31:35:e0:3f:be:74:
c6:34:82:b6:98:d1:cf:7c:85:5e:f3:84:a3:79:62:
d1:4f:0d:96:ff:bd:db:35:77:f4:d7:25:52:6c:e7:
26:0d:53:da:a4:46:42:47:ab:5d:8d:46:02:e6:fd:
f2:89:51:1d:4b:22:fa:ca:55:08:fb:51:c2:dd:1f:
aa:e1:5e:60:eb:1e:62:ec:bd:dc:fb:db:89:63:62:
87:72:5b:16:51:29:2f:88:ba:a1:e8:00:5d:2a:01:
aa:81:c3:ea:fc:f3:33:d1:a2:bd:ea:fe:e0:5b:35:
3c:45:b8:59:a3:94:54:02:55:5b:65:00:82:8e:d6:
30:17:a7:7a:e5:e0:60:ad:c8:ae:fb:8a:d5:e1:61:
2a:04:d6:ce:7f:69:79:7e:1e:a2:e5:9a:a0:c5:8b:
ab:55:f5:4e:5e:ee:ba:5b:05:c5:b2:d9:26:ff:c0:
45:de:b8:5f:b0:9e:a5:d1:f3:d1:ec:6c:0a:1e:34:
70:6e:2b:3d:be:70:3e:ab:11:cb:9c:62:b0:f4:21:
e6:ac:f6:bf:df:26:e7:22:d2:a4:bc:a5:c1:69:4d:
16:01:8a:84:20:f5:99:aa:5e:18:9a:7c:6b:8e:74:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:36:99:85:4F:A3:A3:B5:5B:FF:91:B2:B2:A9:61:96:28:8C:84
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2f:83:bc:0d:d0:87:51:ce:a5:fa:cb:7f:3f:84:94:a9:1c:
36:88:3b:38:94:eb:cd:49:e9:4a:e5:7b:62:9f:f4:2a:3f:55:
f7:92:7b:bf:24:e7:82:a1:49:9d:c0:94:b8:a2:3e:1c:8a:37:
5c:13:66:30:cc:eb:27:dc:53:14:1d:a4:48:09:17:a7:6f:8a:
35:5a:ed:87:91:37:ad:63:82:a5:f7:19:34:af:8f:07:be:c1:
14:a3:70:aa:ec:1f:ea:94:ca:66:70:8d:db:ba:6b:b7:42:5f:
e6:c1:86:db:41:9b:38:5c:a0:da:7e:81:97:51:26:dc:18:a4:
2e:58:c3:00:68:00:3f:d7:21:d3:21:4d:f5:ee:b7:94:69:26:
c6:1e:c4:cb:fb:59:ff:39:e1:05:30:64:07:ca:f7:de:ca:c6:
af:38:5b:9f:7a:0a:2c:93:a9:5f:af:62:56:10:26:7d:a8:dc:
37:e2:b3:4e:2e:8d:a9:02:20:7c:0e:95:78:8b:59:f2:04:e5:
a1:9a:b9:c8:bb:de:7e:f7:4e:4a:4e:56:8c:b6:f6:d5:24:61:
22:c3:2c:b9:d9:62:f6:4f:a6:d4:3b:97:4e:46:f1:a0:52:a9:
9b:34:4d:1d:1d:d9:6e:a5:38:3c:6c:55:15:33:4b:76:5a:04:
cb:9b:3d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StiPSjapXgBa/2U+HuK/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTlkYjU1MjNiZDM5MTQ1MGE5ZGNjZjZkNTBjZTU5ZmIx
NWRmYWQwHhcNMjYwNzI0MDYwMDM3WhcNMjYwNzI1MDYwMDM3WjAzMTEwLwYDVQQD
Eyg0ZTgxMzY5OTg1NGZhM2EzYjU1YmZmOTFiMmIyYTk2MTk2Mjg4Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziJOZTpZonTeccx/jxJ+L8mnYhZY
cf0xNeA/vnTGNIK2mNHPfIVe84SjeWLRTw2W/73bNXf01yVSbOcmDVPapEZCR6td
jUYC5v3yiVEdSyL6ylUI+1HC3R+q4V5g6x5i7L3c+9uJY2KHclsWUSkviLqh6ABd
KgGqgcPq/PMz0aK96v7gWzU8RbhZo5RUAlVbZQCCjtYwF6d65eBgrciu+4rV4WEq
BNbOf2l5fh6i5ZqgxYurVfVOXu66WwXFstkm/8BF3rhfsJ6l0fPR7GwKHjRwbis9
vnA+qxHLnGKw9CHmrPa/3ybnItKkvKXBaU0WAYqEIPWZql4YmnxrjnT6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6BNpmFT6OjtVv/kbKyqWGWKIyEMB8GA1UdIwQY
MBaAFKIZ21UjvTkUUKncz21Qzln7Fd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTIt
N2NjZjkzNmRlODlhLzEvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTItN2NjZjkzNmRlODlh
LzEvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy+DvA3Q
h1HOpfrLfz+ElKkcNog7OJTrzUnpSuV7Yp/0Kj9V95J7vyTngqFJncCUuKI+HIo3
XBNmMMzrJ9xTFB2kSAkXp2+KNVrth5E3rWOCpfcZNK+PB77BFKNwquwf6pTKZnCN
27prt0Jf5sGG20GbOFyg2n6Bl1Em3BikLljDAGgAP9ch0yFN9e63lGkmxh7Ey/tZ
/znhBTBkB8r33srGrzhbn3oKLJOpX69iVhAmfajcN+KzTi6NqQIgfA6VeItZ8gTl
oZq5yLvefvdOSk5WjLb21SRhIsMsudli9k+m1DuXTkbxoFKpmzRNHR3ZbqU4PGxV
FTNLdloEy5s9rQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:13 2026 by rpki-client