Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: 6Jimfx+sQJ8rCBPnj3I6taKOPM4UnMaHc/kWihPMeek=
Subject key identifier: 10:D0:0A:CF:6C:C1:97:7B:D0:E0:3D:DC:E6:A0:02:03:EA:5E:86:DA
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 019D9A750ABBF3CDC3ABD584FD1D76F83D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 17C2
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: Nda1eBhsJwT4E7HRchbC4K3iiqs.roa (hash: IyraCeQZ++qiXcc0IC+bQds8y+BEFwAlU5YYks8WhRk=)
2: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: UKWrR7F3wIh9/w5X+o07XXw0osAEswtOyvXy4kN1Wq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0a:bb:f3:cd:c3:ab:d5:84:fd:1d:76:f8:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=10d00acf6cc1977bd0e03ddce6a00203ea5e86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:30:77:8e:a0:30:9b:4c:5e:0d:76:36:6c:
11:aa:9e:eb:c6:07:95:50:e2:d7:a3:f1:36:e5:57:
70:f8:e5:d3:8a:82:48:3a:e5:65:b6:95:91:2b:29:
73:96:18:11:8c:99:b0:7d:d6:bb:27:0c:a0:22:c3:
d0:e4:fe:32:01:a1:d8:38:f9:d9:02:f1:00:01:59:
9b:05:6a:00:db:cb:ba:12:8d:b6:df:b2:f7:a6:75:
55:92:5f:31:0a:7a:90:ac:b1:42:4a:45:95:a5:9a:
d7:de:40:91:39:05:96:c9:46:00:80:c5:0a:30:94:
4b:ec:28:fe:e9:60:e2:7a:9a:e0:b9:2a:c1:74:35:
37:ee:d0:93:00:45:6f:f1:e3:9c:ba:1e:20:76:ac:
4a:3f:bf:96:29:d5:c0:ed:a8:31:c2:39:f3:0f:81:
a7:fd:6e:a0:21:a8:1c:e9:59:e7:0d:42:d1:9f:a1:
b0:19:ea:21:4c:4d:dd:84:19:e5:9e:2f:a4:ae:15:
68:7e:d0:d0:87:fc:aa:3a:5a:3e:3d:b9:b3:c0:4f:
e2:8d:27:c1:3a:00:e4:86:5c:f4:b7:b5:eb:d8:3b:
33:7f:e3:b5:05:ae:dd:6d:63:df:4f:ac:0e:77:7c:
18:0b:8c:03:de:3e:d8:55:52:5b:99:66:c8:a3:02:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:0A:CF:6C:C1:97:7B:D0:E0:3D:DC:E6:A0:02:03:EA:5E:86:DA
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:8d:57:e1:fa:a1:a3:f1:9a:06:64:ce:a2:17:ef:53:89:
4b:ee:be:61:39:49:f7:c2:6a:7a:cd:f5:c8:98:88:ed:1f:d0:
38:6c:34:2a:79:12:07:c4:bd:65:5f:72:5a:58:38:57:17:63:
43:b8:32:ae:79:87:07:97:cb:2f:0f:69:1f:38:29:f8:6e:55:
fe:fb:9d:c4:20:dc:6c:7a:81:2c:4a:50:03:0b:bc:4e:d3:69:
9b:98:a2:7d:75:2f:a7:93:50:e9:ae:c7:12:fc:db:eb:42:8d:
68:38:03:38:e2:fd:6f:74:f6:63:e2:81:49:60:37:fc:b3:e2:
0e:9d:b2:f7:d9:e4:dc:72:2b:7a:e4:b9:eb:d2:fc:b5:b9:d3:
57:d2:86:84:74:a3:18:c2:83:61:0d:d4:4e:3e:bf:26:d9:02:
97:92:f5:32:ac:ca:0e:b1:22:f2:6d:d7:e6:9e:82:11:0a:72:
a2:43:8b:17:02:9c:c3:bd:28:f9:22:45:68:a3:60:65:1e:1d:
e9:93:df:ed:8d:82:75:03:50:dc:1d:e3:54:b5:55:d5:17:2d:
0d:1c:83:62:ea:0f:a5:c7:ac:91:26:1e:75:de:5c:80:57:ed:
0e:eb:7d:2e:df:bc:49:a8:37:4e:e6:f9:00:d8:ce:46:ed:50:
c1:ab:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:27 2026 by rpki-client