Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: LrPztwNsrpgV1IITqstikFtwRdqsU+Qxof7BpvnjDhA=
Subject key identifier: D4:D3:69:7F:98:02:A4:6D:29:CB:38:63:46:8C:C7:97:BB:ED:B9:78
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019D9BF53BC87253CD1B48B828F4E39F574A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 15:00:33 +0000
Manifest this update: Fri 17 Apr 2026 15:00:33 +0000
Manifest next update: Sat 18 Apr 2026 15:00:33 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: rgPgoyFxrESJ0Fp2nBcoI3OIT7OAXhMQbt6GQ/uJWUY=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:3b:c8:72:53:cd:1b:48:b8:28:f4:e3:9f:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Apr 17 15:00:33 2026 GMT
Not After : Apr 18 15:00:33 2026 GMT
Subject: CN=d4d3697f9802a46d29cb3863468cc797bbedb978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:00:e5:25:12:51:a8:3e:a7:9e:22:c8:a0:
29:70:d3:b5:65:6f:99:2d:9a:17:f5:c6:28:b0:e3:
a2:4b:a4:7e:16:8a:2f:b5:d3:45:7a:38:21:14:4e:
29:f4:5a:31:36:a5:6c:d5:12:19:e9:69:2c:3f:5d:
a2:6b:0b:a0:1c:06:bf:80:21:47:42:b9:07:b3:b8:
7d:53:f3:04:82:f6:7a:b9:0f:05:58:2c:0d:5e:a3:
ca:01:ec:4d:8f:ab:61:fa:6c:37:d5:4d:81:ca:e4:
ed:9f:3a:75:34:ac:b8:17:e0:9f:36:5d:96:63:b9:
d3:3e:0c:6d:bb:da:8d:07:30:43:59:1f:fb:db:c0:
82:6c:50:69:fe:a6:9d:42:14:15:b6:68:c9:d3:e4:
5b:c2:fe:a3:4a:c1:ca:a4:b8:43:11:f0:ed:88:c7:
ec:ab:2c:8e:e9:c6:34:e5:ff:95:9b:38:15:7c:f4:
55:85:ed:70:53:7c:84:13:d8:72:34:7a:aa:73:47:
56:df:13:b8:b4:e9:cb:c8:a8:1b:b2:56:ff:6a:d5:
ce:a2:08:10:fd:e7:72:ce:14:21:6d:f8:f0:1e:e1:
4e:57:40:af:79:92:76:b0:d6:3e:b1:36:94:2f:a1:
fc:99:91:64:f7:2d:76:5b:a9:a7:2f:c1:2c:f0:d7:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:69:7F:98:02:A4:6D:29:CB:38:63:46:8C:C7:97:BB:ED:B9:78
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:df:6a:9f:54:51:47:30:d1:e1:a1:dc:86:c3:19:75:fd:
6f:63:2b:f5:80:a5:2b:9d:7f:4c:6d:e1:06:61:96:91:c0:80:
59:9e:ac:a8:98:73:ba:26:b8:f4:52:5e:7e:c3:f6:c6:17:2e:
ae:d4:a9:79:4e:f8:34:11:6b:f6:02:c7:13:a5:ae:a7:f1:b1:
8a:1c:00:da:4a:f4:9d:91:09:f7:5c:e2:24:f5:26:3a:8d:15:
75:eb:9f:48:eb:70:e3:58:59:62:bb:da:06:ec:07:60:81:1d:
c6:d0:08:7d:55:ab:b3:22:67:61:09:9e:8d:91:73:70:40:fc:
44:d6:6b:43:99:d4:be:07:cf:f4:48:2d:2b:03:73:f6:69:62:
de:96:a2:3a:c4:2f:4d:67:f8:08:fe:78:fb:4a:15:9b:bb:89:
4b:82:ef:79:60:7b:f0:db:b7:03:a2:fe:ff:4b:c0:3e:27:a0:
0e:8e:0e:9d:c1:e1:23:53:74:f0:5b:57:4b:d6:dc:56:50:24:
a9:50:e6:5b:f6:3f:2f:9a:b4:90:64:d5:0c:1e:d6:08:5d:97:
b3:b9:00:88:e6:33:2c:63:dd:01:e4:6a:5c:bb:89:6c:94:9b:
25:4f:41:12:54:e7:ac:7f:a2:ef:4f:3b:79:44:f6:91:2f:2d:
d3:3f:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:37 2026 by rpki-client