Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: Ezvf4k3HkbqNEZanoJaLykhBwi4uYWaDgPit6mkHK9Y=
Subject key identifier: B6:B9:79:48:C5:78:C6:B7:87:63:0B:D5:B5:AA:51:E8:73:61:B0:C1
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019D28BB0B863B830DB8A78426CB2E0A6BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 06:00:39 +0000
Manifest this update: Thu 26 Mar 2026 06:00:39 +0000
Manifest next update: Fri 27 Mar 2026 06:00:39 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: 8h0d9geHZ4uD3rvrBvE0WNe5gY/KFxSZrK5GvBbV6dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0b:86:3b:83:0d:b8:a7:84:26:cb:2e:0a:6b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: Mar 26 06:00:39 2026 GMT
Not After : Mar 27 06:00:39 2026 GMT
Subject: CN=b6b97948c578c6b787630bd5b5aa51e87361b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:59:60:b5:07:3c:bb:ca:a7:aa:89:a9:ae:
4c:57:64:0e:be:b2:c3:32:67:69:18:81:fe:09:cf:
6f:82:49:dc:00:f1:42:f1:fb:95:7c:78:2d:7b:91:
c4:14:58:98:c5:c9:09:18:8b:ec:eb:38:3d:42:f9:
4d:30:b4:47:ed:e4:51:bf:08:eb:2c:d0:0d:cc:bb:
7f:ec:80:c9:6c:f3:06:1a:50:78:26:bd:88:b0:5a:
6f:62:17:f3:23:84:f8:e8:a4:9e:aa:d0:a6:04:91:
f0:43:6e:9a:c4:97:d9:d3:69:a6:b8:4a:53:93:ae:
8f:c6:8c:d3:34:74:10:f7:f0:26:7d:54:c8:77:40:
d6:ca:97:b3:17:fc:d9:0b:f9:5c:93:a7:7d:03:53:
6d:88:95:62:c9:4b:b0:c5:b7:09:c2:ab:bd:05:0c:
4e:03:86:6e:0f:5a:35:99:3a:46:fc:ac:63:0a:f1:
12:7d:a3:a0:b7:a7:be:7e:2c:db:aa:99:6c:38:27:
84:89:89:71:8f:63:6a:79:4c:8a:3d:9b:49:f4:c3:
ff:b4:8b:ad:c3:2b:32:c7:c5:df:c2:f1:ef:a5:d2:
dc:cb:77:cc:b8:e8:af:e5:70:e1:19:31:b0:ba:46:
bb:41:4c:18:9a:59:b9:93:6f:ee:a0:55:bf:e1:7b:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:79:48:C5:78:C6:B7:87:63:0B:D5:B5:AA:51:E8:73:61:B0:C1
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8b:56:e9:5d:01:bf:74:46:5a:fc:ca:1d:3f:57:ac:40:24:
39:e7:1c:38:77:68:fb:bd:60:eb:67:2b:88:33:ae:08:bf:f4:
c2:f9:35:e3:1c:4f:b1:d7:02:3a:d2:d2:a4:94:de:89:44:1c:
16:5f:5d:fe:0b:22:30:57:87:3b:fe:57:72:91:64:a2:6a:ba:
b5:ad:b5:38:20:52:e2:37:8e:fb:bf:ba:70:f9:07:2a:0e:c8:
17:8e:ff:ae:89:f7:95:fb:f1:cb:0a:ab:a2:7f:63:66:d1:59:
bc:9a:8e:67:0b:86:26:cb:e4:3a:69:69:27:1f:ed:c5:96:5b:
86:53:e5:3a:a4:20:c7:ee:f6:6c:4d:1c:ea:e5:6c:52:dd:d8:
2c:ac:fb:c1:80:e3:ad:63:72:d7:36:a2:1f:8a:d8:1d:27:43:
a7:6d:b2:26:a1:da:6b:e0:00:4e:dc:47:80:7b:49:3d:7d:bc:
5d:c5:77:33:8d:4f:bc:f9:ae:7c:1e:42:02:c1:5b:33:42:32:
f1:e3:69:50:00:8e:f1:2a:d1:5e:11:88:70:85:11:94:4f:97:
67:2e:9e:54:14:d2:43:17:d5:38:d3:3d:7c:bf:c3:56:2a:2c:
d3:46:0a:c3:d0:92:5b:08:95:af:07:bb:71:05:ce:21:f2:9d:
aa:6e:93:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouwuGO4MNuKeEJssuCmvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTlkYjU1MjNiZDM5MTQ1MGE5ZGNjZjZkNTBjZTU5ZmIx
NWRmYWQwHhcNMjYwMzI2MDYwMDM5WhcNMjYwMzI3MDYwMDM5WjAzMTEwLwYDVQQD
EyhiNmI5Nzk0OGM1NzhjNmI3ODc2MzBiZDViNWFhNTFlODczNjFiMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks9ZYLUHPLvKp6qJqa5MV2QOvrLD
MmdpGIH+Cc9vgkncAPFC8fuVfHgte5HEFFiYxckJGIvs6zg9QvlNMLRH7eRRvwjr
LNANzLt/7IDJbPMGGlB4Jr2IsFpvYhfzI4T46KSeqtCmBJHwQ26axJfZ02mmuEpT
k66PxozTNHQQ9/AmfVTId0DWypezF/zZC/lck6d9A1NtiJViyUuwxbcJwqu9BQxO
A4ZuD1o1mTpG/KxjCvESfaOgt6e+fizbqplsOCeEiYlxj2NqeUyKPZtJ9MP/tIut
wysyx8XfwvHvpdLcy3fMuOiv5XDhGTGwuka7QUwYmlm5k2/uoFW/4XtrDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa5eUjFeMa3h2ML1bWqUehzYbDBMB8GA1UdIwQY
MBaAFKIZ21UjvTkUUKncz21Qzln7Fd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTIt
N2NjZjkzNmRlODlhLzEvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTItN2NjZjkzNmRlODlh
LzEvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4tW6V0B
v3RGWvzKHT9XrEAkOeccOHdo+71g62criDOuCL/0wvk14xxPsdcCOtLSpJTeiUQc
Fl9d/gsiMFeHO/5XcpFkomq6ta21OCBS4jeO+7+6cPkHKg7IF47/ron3lfvxywqr
on9jZtFZvJqOZwuGJsvkOmlpJx/txZZbhlPlOqQgx+72bE0c6uVsUt3YLKz7wYDj
rWNy1zaiH4rYHSdDp22yJqHaa+AATtxHgHtJPX28XcV3M41PvPmufB5CAsFbM0Iy
8eNpUACO8SrRXhGIcIURlE+XZy6eVBTSQxfVONM9fL/DVios00YKw9CSWwiVrwe7
cQXOIfKdqm6T/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:32 2026 by rpki-client