Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: +eH3Bi0138FOeSYMGeXEkBs4V4z2ns9p/iKQP6WkRCY=
Subject key identifier: 94:7A:EB:CF:9D:25:1E:C9:79:E4:E7:93:F5:AB:D8:75:9F:2B:A7:59
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 01A13CDC3E6C917A9C4A5A4312E8BBB40496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 00:00:29 +0000
Manifest this update: Thu 15 Oct 2026 00:00:29 +0000
Manifest next update: Fri 16 Oct 2026 00:00:29 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: +6/SzgdwYs0tBWF8t+DVwv86pNcI6oFWB/S62m3ZsbM=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:3e:6c:91:7a:9c:4a:5a:43:12:e8:bb:b4:04:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Oct 15 00:00:29 2026 GMT
Not After : Oct 16 00:00:29 2026 GMT
Subject: CN=947aebcf9d251ec979e4e793f5abd8759f2ba759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:57:00:d7:9f:65:8d:61:e0:3c:2c:2a:e0:
1b:76:8d:1a:7f:2c:8b:37:41:2c:c0:f3:0b:11:43:
4e:36:0e:39:07:98:1a:18:3d:f6:de:9b:78:67:f7:
aa:07:01:be:00:46:d8:0b:4f:be:5c:6f:58:d4:c7:
3c:49:37:b3:ed:48:a9:d8:da:1f:8a:2d:82:49:04:
ab:d3:21:f8:8b:17:95:a2:81:46:56:e4:a5:f8:a8:
f2:7c:ba:a1:46:94:04:e5:75:9d:f1:f6:e4:59:a7:
cd:a8:31:ff:74:f0:62:17:20:71:33:1e:a4:10:e1:
10:8b:69:04:fe:3a:c6:01:29:77:e3:df:91:d3:14:
79:ff:c6:78:c5:66:65:f9:98:bd:0d:b1:23:96:fc:
09:ef:03:f4:54:69:48:1d:36:88:4b:94:e4:f6:83:
d4:ae:4a:fc:a2:15:bd:44:33:8e:0f:dc:cd:33:30:
0b:68:40:71:08:4f:05:6e:78:24:e8:c3:a8:24:6a:
e0:1c:d6:5b:c3:36:d8:66:93:d7:7c:ef:cf:21:ab:
62:0f:58:5d:65:28:55:91:e2:b6:ef:2a:a2:ce:4e:
46:14:ab:bf:d2:9f:6f:f1:9f:9a:01:a8:65:29:37:
db:9d:6a:ba:c1:ec:89:2a:5f:f7:61:29:7f:f1:86:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:EB:CF:9D:25:1E:C9:79:E4:E7:93:F5:AB:D8:75:9F:2B:A7:59
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:77:eb:ec:7e:a1:ca:17:7a:5a:7c:e2:28:f1:45:0a:d9:5d:
c9:4a:e0:3a:d9:8c:fa:c5:4e:0c:ba:09:17:32:a1:76:64:22:
73:a3:8a:50:8d:23:0f:0e:2b:bd:f3:b1:29:3b:68:70:db:89:
f1:50:76:3c:8e:f7:83:f3:f0:44:fe:8f:b4:b9:13:96:49:cb:
a6:5a:c9:fb:d4:61:3c:9d:6e:96:df:40:75:fe:ac:ab:67:43:
a7:a4:01:dc:f4:db:3f:cc:35:8e:10:da:4c:ef:32:a6:e3:f4:
9b:83:c7:bf:9e:24:c3:53:a2:d7:33:ec:ba:dc:c2:a9:59:a5:
6e:ea:6b:39:6d:2d:88:5e:95:6c:1e:5a:77:28:81:ab:54:da:
06:4e:67:9e:10:48:e1:a0:ae:7a:23:30:6b:f4:6a:4c:be:61:
db:48:18:8b:cb:27:98:f8:00:1f:1b:7f:d4:69:ba:0f:28:b7:
f1:f5:f4:af:55:8f:5b:ca:aa:18:22:66:cb:c9:57:b8:38:8f:
5d:24:e4:d8:a1:36:52:ed:44:7e:df:95:4b:50:c7:fc:10:70:
6b:ae:7d:69:2b:8f:09:a2:5e:66:bb:38:ef:6b:56:18:27:a8:
47:90:eb:ae:14:bd:59:08:92:7b:d7:eb:df:88:a2:e1:37:7e:
8c:f2:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:43:57 2026 by rpki-client