Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: Mb44GLWVmaqv0Oczj4k6Ux6Kq9ETJEDexzCpXhrIc4g=
Subject key identifier: 2D:84:85:68:20:C8:1E:45:C7:9C:69:AE:73:B3:DD:B0:E3:49:A1:30
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 019CAAFD7C8BBB641F658F7904A12DD4D2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 1746
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: Nda1eBhsJwT4E7HRchbC4K3iiqs.roa (hash: IyraCeQZ++qiXcc0IC+bQds8y+BEFwAlU5YYks8WhRk=)
2: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: x4djYD/Wi44BbpDKsJGFeCEj79NzccOk5ELUO08bS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7c:8b:bb:64:1f:65:8f:79:04:a1:2d:d4:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=2d84856820c81e45c79c69ae73b3ddb0e349a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:38:49:90:bb:b3:2b:76:7d:2f:59:66:6b:
9e:6c:f2:b2:ce:20:bb:45:7f:b7:60:79:09:67:b6:
b9:63:05:aa:f9:c1:7a:c8:b9:3d:3c:9d:51:a1:72:
0f:bd:54:d0:36:f2:8a:7f:67:37:ce:58:23:f8:00:
c2:ea:c5:7e:18:2e:ee:56:49:cd:3a:04:a3:8a:23:
79:b6:dd:bf:2e:d4:63:ec:2f:1b:0e:42:85:24:ac:
bf:65:bb:8c:b1:d5:33:92:18:03:92:15:f0:37:12:
20:62:d3:d6:84:25:65:02:32:54:32:fb:e3:61:c6:
b3:ab:55:33:d2:86:c3:a4:1a:bb:6d:a2:dc:03:a5:
98:5f:7e:af:0e:fe:dc:e3:30:54:c0:06:d1:14:b4:
17:62:27:4f:53:ae:b7:77:2b:01:7f:ad:b3:3c:22:
00:3e:51:89:83:10:56:4c:ae:2f:c8:01:8b:9a:b3:
65:0e:6a:88:0d:d0:c8:0f:cd:9e:7b:f8:fd:af:5c:
d4:67:6f:cd:6b:35:9d:70:7b:26:31:1e:20:9e:6e:
d9:d4:f8:30:e6:ce:e0:69:c4:e5:6d:53:06:50:d1:
d9:3b:35:3a:0c:dc:12:1f:24:7e:a0:0b:d8:3e:34:
c2:50:38:83:f9:59:68:c3:fb:f2:06:f4:11:5f:c8:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:85:68:20:C8:1E:45:C7:9C:69:AE:73:B3:DD:B0:E3:49:A1:30
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:5a:20:c0:9b:d6:f4:54:fa:bd:ae:33:b7:90:3b:d4:cc:
14:c6:ed:6f:76:2d:09:de:58:c8:73:d7:3f:e3:6a:6b:2c:a7:
d4:6e:11:cd:9b:e6:c4:59:44:3a:39:05:ba:3e:15:7e:e5:55:
fa:68:97:b3:4e:9a:74:96:0b:21:d6:15:6f:c7:35:80:bd:4b:
fa:3c:95:01:88:11:a6:ac:6f:db:8a:67:58:98:e4:24:fd:95:
14:05:5a:33:3c:e3:9c:ea:3f:39:36:aa:e7:0c:a1:33:ba:0b:
e9:93:d6:fc:d4:57:85:51:5a:f1:e5:ec:80:66:bd:9c:b3:db:
44:b3:1e:51:ba:9d:5c:8c:f8:e9:0c:15:40:25:59:55:e8:3f:
2d:6c:27:45:91:bf:2f:4e:29:b8:4b:68:f2:5c:1e:93:80:f2:
f3:d4:a3:d5:6c:77:42:fd:2e:25:02:b6:1c:51:cd:00:03:6c:
9c:e2:27:da:0e:d0:05:6a:c8:9b:05:64:2d:1f:3e:99:3d:c1:
c7:46:46:a9:b5:70:38:ab:9d:67:85:13:9c:23:5b:42:fe:65:
98:cc:34:25:10:61:cd:66:d9:0c:a5:e6:0f:6d:45:dc:61:1d:
c3:ae:77:18:ab:22:8e:a1:0c:8f:70:36:7e:82:e9:70:48:27:
c2:22:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:22 2026 by rpki-client