Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier: 6DKDwJCViefS3gCvot1DE9/r8tWz1wMsMLe/SekMUGQ=
Subject key identifier: 77:F3:52:76:F4:57:B1:73:2B:B3:C5:97:40:00:62:58:81:7D:85:FE
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 019CAAC62E5B27876E5C42493A8B20D42A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number: 098C
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: L/UO65t26Yi8OliAYFeqcrvvBSQV/NL816QNQXSsK/0=)
2: yCYfu-nQ-r5mmuWB4csYdJl_brA.roa (hash: bFBh8jKzarYm0VKcZxzPkcXMAVEV0oykNxP7fDtsTwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2e:5b:27:87:6e:5c:42:49:3a:8b:20:d4:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=77f35276f457b1732bb3c59740006258817d85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:fe:e2:84:fc:16:3c:a3:28:36:6e:ac:3b:
9a:75:03:c9:27:31:0c:98:8a:5c:e3:ca:af:3a:71:
b5:05:84:b8:ff:dd:91:bd:22:5f:70:fc:a4:5c:44:
93:38:c7:16:72:ee:f3:4e:84:1c:32:16:ba:3d:c9:
35:d2:50:e9:fb:81:fa:c9:e1:d9:7c:c4:2a:cf:65:
49:f4:78:2e:aa:55:ac:7c:7a:6b:14:5c:7a:8f:8c:
7f:69:dd:a6:7a:a4:87:6f:76:b2:6f:ab:bb:5f:94:
04:fb:ce:bd:65:dc:71:7f:52:a8:7d:61:2e:bc:45:
13:6c:5b:48:2d:f2:d9:32:60:41:32:05:f5:4d:2c:
98:1f:aa:3e:4e:db:f1:f5:aa:9e:5b:b6:03:f9:2b:
b3:bc:f6:47:04:ea:a7:6b:04:fc:7b:82:7b:ee:ed:
0c:68:a8:7c:34:99:29:10:d6:18:7b:ea:cc:98:e2:
a8:3d:8d:a1:61:e6:10:37:e2:cf:17:da:94:ce:f0:
ce:49:cb:6b:a4:3a:a6:4c:95:e0:f7:1e:cf:f3:59:
3d:58:bc:52:79:a9:95:59:69:15:b7:b9:5b:1c:f4:
44:c7:08:b5:7a:06:9b:5f:50:47:fa:26:f0:46:e1:
c4:35:5a:95:07:a2:1a:04:33:99:35:f2:39:07:4d:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:52:76:F4:57:B1:73:2B:B3:C5:97:40:00:62:58:81:7D:85:FE
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:68:f4:53:3d:2f:17:6a:9a:bb:ac:2c:72:28:29:94:5b:35:
66:fb:bd:3a:d5:de:49:56:2d:5e:50:28:5e:24:05:80:91:28:
b2:19:14:f5:d9:16:fa:11:3c:f3:8c:12:3e:3c:41:c0:6b:59:
be:7b:e2:92:f2:f1:30:2f:17:df:db:4b:d3:60:e0:ce:5d:a8:
6f:11:69:14:55:48:c0:d6:d9:c3:e9:bc:52:29:7e:9d:b8:e3:
c8:73:f6:86:f8:eb:a2:4e:58:6b:0a:6e:c2:59:5d:ab:ce:0d:
5b:96:e1:94:68:76:b2:29:58:e2:e2:05:52:96:de:1d:95:80:
7e:11:95:96:bc:5d:24:e7:77:2b:20:da:36:42:b4:8c:cf:68:
58:6c:f8:10:bb:4d:72:a1:9e:4e:af:8e:6f:63:41:d6:2a:9d:
b4:5b:f8:31:c6:17:f2:89:ab:df:d8:42:58:df:b7:93:b3:01:
8b:01:55:ee:27:53:c1:71:4e:79:44:e1:31:3e:e1:00:aa:8f:
61:01:53:00:68:8b:e3:9f:8b:3c:8e:22:ab:c7:d0:19:f8:3b:
7e:b1:de:a2:59:a9:48:96:4a:ba:d4:d9:8b:b7:96:51:c4:92:
6f:63:3a:81:96:91:3a:47:5c:e2:3e:74:05:cc:68:c7:ae:21:
76:78:46:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxi5bJ4duXEJJOosg1CoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTkzNWIzY2JjMjUyN2VhZjE2N2Q2OWIyMDc4ZDMzZTRj
NGRhMjAwHhcNMjYwMzAxMTkwMDQwWhcNMjYwMzAyMTkwMDQwWjAzMTEwLwYDVQQD
Eyg3N2YzNTI3NmY0NTdiMTczMmJiM2M1OTc0MDAwNjI1ODgxN2Q4NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09b+4oT8FjyjKDZurDuadQPJJzEM
mIpc48qvOnG1BYS4/92RvSJfcPykXESTOMcWcu7zToQcMha6Pck10lDp+4H6yeHZ
fMQqz2VJ9HguqlWsfHprFFx6j4x/ad2meqSHb3ayb6u7X5QE+869Zdxxf1KofWEu
vEUTbFtILfLZMmBBMgX1TSyYH6o+Ttvx9aqeW7YD+SuzvPZHBOqnawT8e4J77u0M
aKh8NJkpENYYe+rMmOKoPY2hYeYQN+LPF9qUzvDOSctrpDqmTJXg9x7P81k9WLxS
eamVWWkVt7lbHPRExwi1egabX1BH+ibwRuHENVqVB6IaBDOZNfI5B004ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfzUnb0V7FzK7PFl0AAYliBfYX+MB8GA1UdIwQY
MBaAFDoZNbPLwlJ+rxZ9abIHjTPkxNogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYt
YWJmODM3YWNlOGU0LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYtYWJmODM3YWNlOGU0
LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGj0Uz0v
F2qau6wscigplFs1Zvu9OtXeSVYtXlAoXiQFgJEoshkU9dkW+hE884wSPjxBwGtZ
vnvikvLxMC8X39tL02Dgzl2obxFpFFVIwNbZw+m8Uil+nbjjyHP2hvjrok5Yawpu
wlldq84NW5bhlGh2silY4uIFUpbeHZWAfhGVlrxdJOd3KyDaNkK0jM9oWGz4ELtN
cqGeTq+Ob2NB1iqdtFv4McYX8omr39hCWN+3k7MBiwFV7idTwXFOeUThMT7hAKqP
YQFTAGiL45+LPI4iq8fQGfg7frHeolmpSJZKutTZi7eWUcSSb2M6gZaROkdc4j50
Bcxox64hdnhGxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:37 2026 by rpki-client