Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: Lt7D+f0BPd2vYSKpdodgsU3LwxrTP2XUWSNFkK11FVk=
Subject key identifier: 31:A6:69:90:CC:FB:64:71:63:59:D9:02:22:BC:EF:BB:05:2C:5F:62
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019D2A3B57517A05D7F1150CC8A83A302F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0B98
Signing time: Thu 26 Mar 2026 13:00:25 +0000
Manifest this update: Thu 26 Mar 2026 13:00:25 +0000
Manifest next update: Fri 27 Mar 2026 13:00:25 +0000
Files and hashes: 1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: mUMu3q0+QSNqiCenVbmQ7fv8bD5xM/4AQZVXtmIBljI=)
2: dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (hash: rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:57:51:7a:05:d7:f1:15:0c:c8:a8:3a:30:2f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Mar 26 13:00:25 2026 GMT
Not After : Mar 27 13:00:25 2026 GMT
Subject: CN=31a66990ccfb64716359d90222bcefbb052c5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:91:c9:c4:d6:7c:12:e7:40:5b:8b:7e:10:
bc:69:87:51:f5:b3:38:24:e8:15:67:d4:31:62:d5:
28:57:ab:cf:31:9a:b2:88:75:80:ff:67:e1:97:0e:
b6:b3:7f:c5:1b:cd:2a:d6:26:15:e5:45:e5:64:93:
8c:67:bd:dc:b6:b0:28:66:22:d9:49:b0:c1:cf:cf:
f3:86:25:4a:eb:eb:a3:46:e1:64:b2:5b:a1:f9:93:
59:e9:67:30:ea:42:22:31:b5:15:06:32:f1:98:70:
8c:32:76:c4:0b:4c:e7:28:9d:71:4b:ad:e4:6c:c3:
bc:b1:46:7e:b3:ef:f9:80:0c:c7:76:c8:84:27:b8:
fa:cb:21:84:33:51:7d:46:72:50:e2:0a:5b:2d:1a:
88:89:5d:a8:b1:9f:eb:96:cb:df:60:c1:9f:b7:9c:
6d:06:af:34:d7:ba:27:ba:7c:87:bd:e0:0b:44:46:
07:f5:b0:4c:0e:6e:0a:53:d5:65:d3:1f:ef:0d:85:
80:2a:a7:0a:f2:4a:2f:23:14:da:42:1e:d1:a7:b6:
ad:6a:a2:fa:f6:07:2c:bf:4a:60:cd:88:61:42:e9:
cd:06:1e:b9:fd:2a:59:b3:66:8f:72:19:7d:2b:15:
8b:a4:4e:35:52:c6:a2:be:72:22:47:1e:ce:b1:2a:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:69:90:CC:FB:64:71:63:59:D9:02:22:BC:EF:BB:05:2C:5F:62
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:4b:4f:7f:d3:88:b1:df:21:63:d8:f8:ce:cc:a8:dc:d1:
7f:d3:c8:b4:75:10:43:26:4c:ea:c7:f9:a7:fc:5d:4a:21:cf:
e1:6f:0c:95:95:cc:f9:d5:f4:4f:b2:5f:2c:8e:63:d7:e2:b5:
6a:04:c3:0f:e8:69:d4:d4:67:6a:73:74:2c:19:ef:9b:b3:9d:
5b:1b:f3:25:d6:39:d8:04:90:a2:25:be:19:ab:8f:ad:f4:83:
61:2f:b2:bb:e6:c5:ff:1a:c5:aa:da:d9:3d:18:0c:a0:a0:7d:
59:d4:18:1d:67:55:04:32:5a:07:e5:a6:04:bd:30:1c:3d:fa:
e1:85:e0:48:3f:10:4d:39:d8:f5:cd:88:b6:75:76:67:a9:51:
16:8c:40:10:0e:cd:cd:0b:84:7d:30:b4:48:cb:de:93:03:5e:
4f:7f:43:d7:b5:0b:7d:72:da:8c:f0:ac:0a:a6:89:d8:09:ca:
40:24:d8:5b:b2:13:45:3d:5d:f5:44:73:c7:f8:e9:50:78:d8:
76:6e:21:19:16:fe:a4:20:5e:2e:5c:12:e5:18:a4:97:3a:48:
48:c3:c1:d1:42:18:69:85:36:e0:b5:15:a9:7f:c9:df:9b:48:
eb:2e:fa:93:5d:1e:10:58:5c:74:e9:be:9a:4d:a6:60:b0:e3:
8e:15:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:48 2026 by rpki-client