Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier: xvz9kedqoNLll4gYpEMbwTetqbYz6nwox99sPrG4zZI=
Subject key identifier: 6D:71:B7:86:7E:DF:F9:09:CB:E0:4F:29:40:DA:72:11:5D:DA:17:09
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 019D9A3E15F528845E1AE960F61AB9AC89B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number: 0A08
Signing time: Fri 17 Apr 2026 07:00:53 +0000
Manifest this update: Fri 17 Apr 2026 07:00:53 +0000
Manifest next update: Sat 18 Apr 2026 07:00:53 +0000
Files and hashes: 1: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: 1Ek+mVLs1K/aR8G8zMGTDAetzoPBNIOTWFZfOhegKlc=)
2: yCYfu-nQ-r5mmuWB4csYdJl_brA.roa (hash: bFBh8jKzarYm0VKcZxzPkcXMAVEV0oykNxP7fDtsTwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:15:f5:28:84:5e:1a:e9:60:f6:1a:b9:ac:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Apr 17 07:00:53 2026 GMT
Not After : Apr 18 07:00:53 2026 GMT
Subject: CN=6d71b7867edff909cbe04f2940da72115dda1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:64:cf:06:6b:8c:54:f8:26:cc:f6:d7:b5:
4c:65:ad:8b:1f:1a:1b:bd:0a:bd:51:bd:ba:75:b7:
6b:a2:f4:46:f7:3b:29:bc:9a:e5:cd:1e:e2:95:26:
a0:7d:1b:dd:57:66:7e:46:48:33:56:53:97:54:71:
20:18:46:5b:fe:e7:81:92:9c:eb:32:b9:c7:05:e0:
35:fa:0d:f1:9d:7f:a2:f4:bc:5d:e0:34:41:c0:b3:
9d:59:47:39:ba:0d:e7:fa:cb:97:f5:80:8b:11:77:
19:06:17:a0:8e:e8:b1:ec:f3:d2:a2:75:42:07:f5:
99:ba:f9:54:d4:2f:df:c0:28:a7:e7:29:82:95:6d:
2c:f6:c5:5d:42:42:b0:6d:d7:65:40:e5:7e:78:64:
94:b2:36:1f:fc:2a:0a:ff:53:c6:ed:42:c9:50:16:
0a:00:fb:a8:9f:96:ab:d4:0d:fd:e2:52:13:85:b1:
b0:1e:25:f8:37:fb:ed:9a:59:79:ae:3a:7b:ad:05:
e4:e8:f5:fc:24:59:72:39:8c:47:05:16:04:43:fc:
81:a5:7b:9e:37:84:fd:fe:bf:f7:3c:0a:ba:ac:92:
9e:71:05:7a:15:a6:ee:1a:48:0e:49:fb:db:c3:16:
52:23:a2:10:1a:87:79:29:a2:dc:b2:9b:c4:43:95:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:B7:86:7E:DF:F9:09:CB:E0:4F:29:40:DA:72:11:5D:DA:17:09
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:a2:b7:6f:74:05:da:9f:15:b4:99:15:c5:9f:0d:31:9b:
27:6c:a2:c7:e4:fa:4b:0e:9b:46:3c:f3:dd:62:ef:6f:62:e1:
01:b5:31:e6:67:27:3d:a1:eb:a8:0d:68:9f:64:4e:c8:ef:f3:
9c:05:a6:13:2f:c0:c0:85:36:bb:a6:4f:66:c0:52:98:12:0e:
fd:d2:4c:45:e3:6b:c3:3e:21:c6:7a:e6:30:7a:e0:22:85:5b:
cb:b3:74:02:3a:18:75:0b:a9:aa:2c:22:a8:52:39:36:7f:20:
25:af:5b:47:9d:3a:2a:d7:91:f7:bb:87:db:34:cb:e3:49:ac:
4c:3e:21:d1:17:d7:c9:ac:9b:2b:38:ae:36:9f:c5:b2:43:9c:
f2:3c:fc:8c:c5:d4:c2:b1:48:20:d7:4e:d0:9f:f0:8a:4c:6a:
a4:b9:98:13:cb:7e:f4:f9:8d:5a:db:25:20:0c:a1:a7:58:f6:
1f:93:f7:82:dc:3f:b4:59:1e:11:be:d2:04:20:1d:15:ce:e3:
41:e6:43:f4:d6:e6:54:8d:4e:48:b9:e3:68:4d:70:54:40:42:
a0:fc:9e:78:ac:b0:dc:6e:06:f5:6f:ba:f4:62:67:d3:a3:07:
51:ee:fa:72:63:d0:a7:06:ba:0d:f5:02:f7:ca:72:e9:11:8e:
cc:1d:e8:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhX1KIReGulg9hq5rIm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTkzNWIzY2JjMjUyN2VhZjE2N2Q2OWIyMDc4ZDMzZTRj
NGRhMjAwHhcNMjYwNDE3MDcwMDUzWhcNMjYwNDE4MDcwMDUzWjAzMTEwLwYDVQQD
Eyg2ZDcxYjc4NjdlZGZmOTA5Y2JlMDRmMjk0MGRhNzIxMTVkZGExNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUZkzwZrjFT4Jsz217VMZa2LHxob
vQq9Ub26dbdrovRG9zspvJrlzR7ilSagfRvdV2Z+RkgzVlOXVHEgGEZb/ueBkpzr
MrnHBeA1+g3xnX+i9Lxd4DRBwLOdWUc5ug3n+suX9YCLEXcZBhegjuix7PPSonVC
B/WZuvlU1C/fwCin5ymClW0s9sVdQkKwbddlQOV+eGSUsjYf/CoK/1PG7ULJUBYK
APuon5ar1A394lIThbGwHiX4N/vtmll5rjp7rQXk6PX8JFlyOYxHBRYEQ/yBpXue
N4T9/r/3PAq6rJKecQV6FabuGkgOSfvbwxZSI6IQGod5KaLcspvEQ5VRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1xt4Z+3/kJy+BPKUDachFd2hcJMB8GA1UdIwQY
MBaAFDoZNbPLwlJ+rxZ9abIHjTPkxNogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYt
YWJmODM3YWNlOGU0LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYtYWJmODM3YWNlOGU0
LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxyit290
BdqfFbSZFcWfDTGbJ2yix+T6Sw6bRjzz3WLvb2LhAbUx5mcnPaHrqA1on2ROyO/z
nAWmEy/AwIU2u6ZPZsBSmBIO/dJMReNrwz4hxnrmMHrgIoVby7N0AjoYdQupqiwi
qFI5Nn8gJa9bR506KteR97uH2zTL40msTD4h0RfXyaybKziuNp/FskOc8jz8jMXU
wrFIINdO0J/wikxqpLmYE8t+9PmNWtslIAyhp1j2H5P3gtw/tFkeEb7SBCAdFc7j
QeZD9NbmVI1OSLnjaE1wVEBCoPyeeKyw3G4G9W+69GJn06MHUe76cmPQpwa6DfUC
98py6RGOzB3oDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:22 2026 by rpki-client