Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: Etjj08MvKHO/Y27jZkZLvB7hdaVmh/VGvLgjTyM7rg0=
Subject key identifier: 9B:D2:65:C4:DD:A1:D8:A5:14:AD:38:02:95:B0:05:3E:80:4C:13:CD
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019D9AE263C9EC97323EAB76301D891276BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0537
Signing time: Fri 17 Apr 2026 10:00:21 +0000
Manifest this update: Fri 17 Apr 2026 10:00:21 +0000
Manifest next update: Sat 18 Apr 2026 10:00:21 +0000
Files and hashes: 1: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (hash: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: YzPMsN6vRed4cF9CJFN6cuJzuSiffNgYzYtiGCSRtqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:63:c9:ec:97:32:3e:ab:76:30:1d:89:12:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Apr 17 10:00:21 2026 GMT
Not After : Apr 18 10:00:21 2026 GMT
Subject: CN=9bd265c4dda1d8a514ad380295b0053e804c13cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:31:56:4a:a1:10:06:2a:13:14:c8:94:79:
c1:65:06:88:a8:6e:a8:5b:cf:3c:35:f6:ca:9b:ef:
7a:ab:cf:51:75:3b:43:81:0b:84:ac:99:57:5b:70:
fc:b2:80:d2:d8:e2:c1:fc:61:1e:32:c1:ec:d0:9c:
07:54:98:53:43:57:f6:be:11:53:06:47:f6:c8:b2:
eb:63:0d:25:dc:09:c6:30:3c:90:2b:14:4f:26:ed:
51:ee:f1:fb:f6:5d:23:03:04:64:85:56:ad:ee:54:
70:37:be:40:26:7f:e4:7c:7a:97:e7:b3:b5:da:9e:
95:b6:cf:8d:35:19:70:7e:c2:45:22:d7:be:91:45:
f2:1d:ec:06:0f:e6:92:e7:51:4d:bd:e4:3e:e5:f0:
bf:75:10:a9:b7:f5:a9:b3:c0:18:0b:49:fb:2c:3d:
ab:f3:2a:f4:ee:00:79:d3:75:a4:20:62:1f:ab:e2:
2c:9d:2a:d7:96:26:26:19:80:db:ed:ff:0d:62:d6:
82:0b:cd:d7:d5:2c:b5:10:fb:75:e4:cd:15:4e:cc:
4e:0f:be:6e:4a:83:bf:b1:c1:1c:f1:14:1c:31:66:
71:82:5c:ce:00:62:08:67:01:25:24:51:93:89:67:
bc:ba:90:d7:eb:f7:d3:7d:72:94:44:4f:d0:86:e0:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:65:C4:DD:A1:D8:A5:14:AD:38:02:95:B0:05:3E:80:4C:13:CD
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f8:92:5d:72:4e:bd:46:d0:b9:21:11:20:cc:84:c5:62:d3:
a4:6d:35:ae:57:5f:2e:30:d6:35:39:d8:4d:03:07:f0:52:36:
c4:71:bd:02:41:e0:7e:29:4b:f3:f7:a3:8f:0a:7b:48:48:01:
e5:ba:7c:43:51:f3:b2:c9:7b:47:a8:c4:79:1d:79:43:3f:d9:
01:0c:d0:e7:96:69:f4:2a:dc:16:fc:85:5b:cb:61:60:5f:06:
2b:24:45:88:7c:a6:fe:68:27:8e:07:38:41:99:af:c0:29:05:
4c:b9:c8:90:8e:2a:05:5b:cc:1e:e5:09:1f:f7:ea:70:73:92:
1a:3e:96:e5:c2:6d:81:d5:55:ce:a5:b4:d9:78:9f:be:9f:f2:
8a:a0:f2:7a:77:aa:9b:85:a6:93:2f:e6:58:c0:b2:6e:03:db:
15:32:7a:c5:3a:f0:9f:52:da:fe:f2:9c:37:10:e3:77:6a:5a:
8d:d8:69:53:5b:9a:5e:49:9c:e5:45:78:cc:26:30:9a:71:fe:
fc:3c:6e:5e:90:6a:27:d7:5f:db:14:da:e1:40:cf:78:24:61:
12:af:1a:34:44:f1:64:4c:72:ba:99:d7:7e:b1:43:ad:b8:ca:
95:0b:5f:5e:9e:1a:2b:f7:fd:96:5c:08:76:9b:d8:75:87:ca:
f5:66:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:03 2026 by rpki-client