Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: 6m1dV+3zsuswrHnB1MdizMLlNbhHUBq/hQbjS/7h1ts=
Subject key identifier: 0E:E2:FD:21:07:60:2A:3B:DD:49:6B:FF:70:00:9C:49:D8:A8:8D:58
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019CAD597C11EE1C31D59677814872B1F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 04BC
Signing time: Mon 02 Mar 2026 07:00:48 +0000
Manifest this update: Mon 02 Mar 2026 07:00:48 +0000
Manifest next update: Tue 03 Mar 2026 07:00:48 +0000
Files and hashes: 1: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (hash: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: yFwRtQbx24B92KgSZpr+Ek++4dlMuViR6BkhS+rZjz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7c:11:ee:1c:31:d5:96:77:81:48:72:b1:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Mar 2 07:00:48 2026 GMT
Not After : Mar 3 07:00:48 2026 GMT
Subject: CN=0ee2fd2107602a3bdd496bff70009c49d8a88d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:de:a5:22:5e:8c:d8:a5:76:54:73:9d:f6:
99:2c:b1:20:75:9a:67:cf:7a:df:b9:83:00:ea:ad:
25:51:f5:6d:e9:19:0c:70:c5:48:68:66:25:7d:7f:
b3:4c:93:d9:83:b5:c3:7c:e9:4d:de:c1:dc:22:3f:
2e:37:8a:3c:53:72:3d:72:55:91:75:6e:25:ac:d9:
d6:6f:fb:3a:81:00:22:aa:4f:e2:a2:02:23:c0:84:
b8:11:7c:a9:5a:72:b9:5b:7e:56:7d:2c:55:ff:52:
06:2c:39:51:bf:1d:d2:df:cb:0a:08:a0:d7:3c:e0:
b2:ba:32:48:e4:7c:6b:48:91:c6:78:3f:76:54:ad:
54:9a:ac:17:b0:8b:fa:b1:90:65:b4:6e:f7:a9:85:
fb:73:e5:c5:d3:b2:47:ad:4c:b5:e1:37:3a:28:71:
15:4f:8e:fb:c5:04:3c:c6:ad:c6:b0:2c:7f:9b:82:
fc:58:75:50:7c:f5:0f:5b:b4:7d:83:77:75:2e:f6:
df:1c:04:ef:b6:76:7a:32:c8:01:9d:27:ea:e0:d8:
49:cd:1f:04:28:88:63:6f:a6:12:89:cf:a1:84:81:
bd:17:b3:88:61:df:90:1f:d9:fc:a0:5e:a8:03:bd:
51:72:aa:4e:26:56:52:00:d0:3a:a0:54:a2:af:fb:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:FD:21:07:60:2A:3B:DD:49:6B:FF:70:00:9C:49:D8:A8:8D:58
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:04:a8:16:89:56:b8:2b:45:75:75:c1:fa:c0:44:38:1f:
6d:8b:a8:2c:ad:a0:71:cf:df:bf:44:2c:99:31:34:a6:cb:64:
39:02:48:ba:1a:93:a0:e7:c3:5c:b6:13:35:0e:fe:8d:4a:16:
e2:71:e4:5d:1c:c2:22:b3:a4:df:d7:06:b6:95:87:1e:a5:12:
b7:b2:7e:ad:c9:57:5b:9c:d9:9e:ad:00:26:79:9c:94:30:a9:
5f:4f:c4:16:02:dc:e7:ad:b5:1b:26:7f:68:dd:86:b6:bf:a3:
df:b5:2e:72:ac:9a:de:d2:c2:f2:28:f4:de:c4:a3:67:bf:d0:
ba:88:e4:03:93:68:9d:81:fd:7b:6a:7f:8d:36:b8:71:b8:ee:
ba:50:59:88:7b:37:0b:10:69:5c:b2:18:b9:84:5c:f8:21:f8:
3b:18:03:e1:3f:be:fc:80:7e:68:98:38:cc:a9:7e:f1:2e:c7:
2d:92:56:8c:c1:48:39:5a:d5:49:09:9d:20:73:a0:70:8e:9e:
7f:cf:5c:6e:09:fb:c5:a8:37:7d:11:7f:d1:d3:10:1d:76:a2:
88:06:7b:88:cc:04:21:23:80:d8:c6:bd:77:b3:e4:6e:33:07:
ac:46:19:ed:b4:6d:26:d8:b9:d5:7c:41:07:3b:61:7b:01:0a:
0d:3e:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:39 2026 by rpki-client