Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: AsiWdHh/gaB7LIiR5BK3NaVmW+HeJVDZFnvxVabKIEc=
Subject key identifier: 32:18:5D:9C:F1:C5:C8:DA:89:4C:05:36:D7:02:7F:37:21:06:C5:83
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 019D9D3EF08365E3DE9AB0ED77F01A511E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 1E
Signing time: Fri 17 Apr 2026 21:00:40 +0000
Manifest this update: Fri 17 Apr 2026 21:00:40 +0000
Manifest next update: Sat 18 Apr 2026 21:00:40 +0000
Files and hashes: 1: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: jlkARv55IGNt48qVAnFkFLRryq88Bs2G8gMxDSEKPPk=)
2: uk5oJnqF0PODLJKkwCtzhu53pDE.roa (hash: 3F33zr53N9ca1op6IC6X2t9KJw98HAgichDRUnHN0LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:f0:83:65:e3:de:9a:b0:ed:77:f0:1a:51:1e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Apr 17 21:00:40 2026 GMT
Not After : Apr 18 21:00:40 2026 GMT
Subject: CN=32185d9cf1c5c8da894c0536d7027f372106c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:31:37:ac:5f:00:84:2a:3b:45:ca:b7:85:
ef:07:52:33:0e:44:e7:5d:5c:41:0d:2f:3d:0d:bd:
cf:6a:e9:7a:85:aa:e1:b3:66:3c:70:2c:88:5f:56:
66:6e:ec:85:07:27:a2:78:c3:6c:0d:19:ab:36:8f:
6c:f1:6e:fe:4e:2b:01:73:6b:5a:85:5c:ba:e0:ae:
95:78:f7:29:5f:6e:ad:4b:ce:03:5f:3b:08:95:7c:
bb:b9:3e:b2:d5:cd:ae:a5:0d:76:ab:c3:20:04:fc:
40:f3:9d:37:20:78:42:dc:a6:eb:85:c0:ed:7e:9a:
58:3a:77:8f:27:7b:c4:44:32:99:6e:9b:fa:f8:47:
5c:07:f2:c6:c6:90:59:96:07:60:a2:34:72:d9:75:
54:19:b7:be:87:71:d2:a7:18:9b:fe:1d:95:50:92:
b6:7a:5e:ee:7e:f9:28:e3:f3:d2:bf:e5:4d:b0:f0:
84:bd:a5:41:c4:91:95:c8:ee:95:e5:d2:b1:1f:28:
81:b3:6f:8d:31:3e:25:61:9b:e7:1a:c6:63:0e:70:
9b:c4:6f:71:fc:e4:b4:e2:d5:21:a8:29:02:82:fe:
9d:14:65:7b:a8:3f:38:53:e4:1c:4f:c4:36:e0:c3:
1d:7c:e7:e0:c1:c7:88:e6:e7:c5:cc:31:63:6a:e6:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:5D:9C:F1:C5:C8:DA:89:4C:05:36:D7:02:7F:37:21:06:C5:83
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:7d:c3:c5:7b:9f:a9:dd:a7:af:36:58:35:f8:ef:af:ca:
49:61:44:19:9c:21:3f:f3:95:3d:4e:4f:f4:e5:81:4d:41:11:
f9:5e:98:03:e8:ff:a8:d7:63:68:6e:67:f9:d2:8c:9a:01:aa:
d0:1e:6a:f1:f9:67:cd:4c:c8:b1:1f:8d:b5:cc:0f:a6:7a:c4:
ae:a5:b2:e6:2c:ff:8e:a7:30:8a:3a:fc:2d:cb:6a:ed:4b:9e:
76:1e:16:4b:50:99:16:cb:c1:ef:de:3d:18:fb:69:74:bd:24:
04:eb:1a:1d:0d:2b:1d:e4:fb:e6:cf:53:e3:e1:c8:88:82:da:
ce:84:7f:dd:fa:31:a1:ce:fa:23:fb:56:72:c1:4e:45:93:08:
b1:2b:f7:ca:e3:49:d4:54:3d:39:de:b0:21:14:73:c8:f4:91:
ff:6a:1f:f9:e0:3d:48:bf:4d:ad:52:47:ee:ce:13:ff:e6:7e:
f6:9b:b7:8a:23:86:5b:c2:83:17:5f:44:cf:96:60:a7:89:1e:
be:38:87:89:75:2b:0b:e4:af:98:2f:a6:27:9c:b8:38:85:55:
39:52:ee:e4:14:fd:18:4d:23:54:3e:e2:fb:35:b0:89:1d:db:
52:d7:d3:b7:c8:44:14:68:f8:7e:53:55:6c:bc:87:24:f7:93:
92:b5:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:11 2026 by rpki-client