Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
File: ohnbVSO9ORRQqdzPbVDOWfsV360.mft (raw, json)
Hash identifier: nAqcAeWTEh7ZPHVx5jAmN1CV5E3IKFvDHmwBKNBUqcg=
Subject key identifier: 28:FD:B4:DE:0A:70:3B:D7:B9:F8:07:47:2F:01:02:8B:4C:ED:F2:F6
Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Certificate serial: 019E1DFE93AB7C91B72C0915E25C7E9FD99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (hash: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU=)
2: ohnbVSO9ORRQqdzPbVDOWfsV360.crl (hash: woDTUTx/rZRQ1R4ZyyXo6OX5r4L/ceWRY55D58NbiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:93:ab:7c:91:b7:2c:09:15:e2:5c:7e:9f:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=28fdb4de0a703bd7b9f807472f01028b4cedf2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:95:a5:19:21:bd:18:07:f9:f3:f4:ca:28:
d3:2a:1d:65:67:a7:04:48:c2:c3:e1:08:7c:ef:8e:
93:46:a2:b9:24:25:9e:a3:20:c4:36:34:be:87:a1:
11:75:9c:a3:e1:cb:0d:92:1f:83:a3:b2:be:04:d7:
a1:99:f3:86:14:f3:61:7f:fe:7d:41:f1:28:d4:77:
94:7c:7b:3a:c9:a0:40:ad:c0:04:1a:41:d2:d8:11:
40:e6:ff:0a:0c:6e:dc:b9:42:66:d7:28:98:37:53:
31:b1:e3:d3:0e:04:fd:a3:04:6e:28:43:07:88:23:
77:69:9f:4a:61:f5:d2:7a:fc:73:76:50:64:f8:c5:
37:40:fb:e6:c9:c8:62:c8:69:3a:90:b9:1f:af:41:
c9:ce:bb:f3:bc:74:7b:15:5d:ea:50:24:14:6f:45:
e5:5c:29:99:6a:65:d9:36:52:03:b0:c0:93:bc:e1:
d5:4d:a5:53:8d:90:21:a9:4c:c9:78:a8:31:f3:59:
21:26:27:b9:f0:72:81:c0:c2:64:0f:38:42:75:83:
6d:f1:8e:69:b8:40:3f:d7:43:01:2b:90:d1:df:ee:
a4:0e:a4:c0:89:ec:a0:fd:d9:2b:fd:4b:47:e7:00:
f6:93:e5:18:46:b6:7c:32:18:3a:c0:3c:14:a0:52:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:B4:DE:0A:70:3B:D7:B9:F8:07:47:2F:01:02:8B:4C:ED:F2:F6
X509v3 Authority Key Identifier:
keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6e:2d:93:d7:76:66:5f:a1:c1:0c:8b:6d:d2:61:9f:df:71:
b9:7f:86:33:23:1c:e9:51:d7:3e:af:5d:4f:51:90:5c:ce:32:
5e:62:f7:0c:30:32:8d:80:c4:4b:74:c1:e2:89:4a:8d:fb:2a:
eb:5b:50:42:a6:e2:04:c3:ee:4e:cc:14:f0:b6:01:91:d7:e4:
d1:8b:a7:07:46:4b:31:19:68:0e:8e:ef:72:28:46:12:46:39:
b1:78:9f:7e:9c:32:da:7f:ed:d5:44:3d:c3:38:99:70:fa:86:
37:27:c9:0c:c2:72:36:e4:ba:e0:8f:16:8e:3e:35:ba:07:5c:
4e:ad:26:80:05:ed:f6:6f:94:12:be:c1:8e:6b:05:27:cd:fc:
7e:4e:f6:08:df:24:2c:65:8f:95:f6:52:ec:12:dc:e3:d4:6f:
f4:8e:da:f1:f5:99:42:a8:de:5d:3f:ee:25:d0:41:5c:37:8b:
63:ed:de:af:3f:22:66:b1:54:44:ee:4c:53:03:4e:a9:e8:24:
06:b4:af:fc:55:99:26:6c:c3:ad:f1:be:f7:5d:52:9f:23:ea:
ef:6c:f1:5d:9a:fe:89:36:29:44:1d:de:1c:f4:a7:2c:ee:c1:
d5:99:08:26:2f:b8:4a:c3:ab:f5:67:df:19:a7:cd:94:cc:3d:
2d:d5:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:41 2026 by rpki-client