Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: SaS5ThmWN0m3tq2eKmHsJcGnMpqkETd4ePeIVt8iep8=
Subject key identifier: 55:16:CF:CA:3D:05:B7:7C:03:2B:57:19:A9:89:07:AE:61:71:9B:F0
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 01A13E94EC1FF8F979BC1D2024020BF01FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 0200
Signing time: Thu 15 Oct 2026 08:01:49 +0000
Manifest this update: Thu 15 Oct 2026 08:01:49 +0000
Manifest next update: Fri 16 Oct 2026 08:01:49 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: /hEzEYY3YpnDWooCzyyXl9ciOwoCbP0i355yOAAEpqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ec:1f:f8:f9:79:bc:1d:20:24:02:0b:f0:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Oct 15 08:01:49 2026 GMT
Not After : Oct 16 08:01:49 2026 GMT
Subject: CN=5516cfca3d05b77c032b5719a98907ae61719bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:3c:df:f2:2a:85:32:de:fd:8f:35:d0:bf:
7d:8f:fd:0a:cc:95:c8:27:4a:a9:fd:82:88:da:bc:
68:1a:5f:18:2d:65:28:df:d9:da:e7:3c:8e:8f:01:
ff:08:fa:ee:d0:f5:c8:70:14:f1:5a:ae:10:60:92:
ff:4d:51:07:00:b1:b7:2c:a4:85:5f:80:23:59:16:
3f:5c:89:4f:54:37:b3:68:be:e1:37:44:cb:7d:f7:
5e:5a:37:bc:e0:3e:c8:af:e1:71:25:4a:b4:49:f4:
6d:0e:44:0e:99:c6:25:c9:b3:47:72:01:db:7d:6e:
83:8a:ea:8b:93:f5:61:87:61:e1:c1:86:c9:1a:72:
74:a4:7d:db:f7:ca:ef:0a:da:63:07:6b:a0:fa:a8:
60:58:51:9e:22:f9:98:e2:9a:d3:57:35:1a:4c:9b:
11:a5:11:68:3d:93:e4:47:4a:e4:5e:de:c0:1c:c2:
78:24:3d:68:e9:fa:82:a7:ea:2f:37:8d:d6:4d:4a:
b1:6e:9c:48:9f:65:14:c6:2b:be:07:fc:46:fe:d5:
45:6a:8d:51:14:af:af:50:b8:72:4f:09:cc:cb:39:
7e:16:67:56:e1:8e:74:0a:b8:ff:7c:f9:f9:d4:f2:
2b:7b:f0:fe:8f:70:a5:95:d8:17:84:23:8d:e9:c1:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:CF:CA:3D:05:B7:7C:03:2B:57:19:A9:89:07:AE:61:71:9B:F0
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f5:d3:af:8e:dd:8d:90:99:a2:b5:ea:4d:43:f2:42:23:91:
65:d4:d6:76:94:b3:1e:ad:06:20:6a:63:db:29:5a:43:b4:2a:
b2:2c:c6:7c:fb:17:43:8b:2f:df:4a:bd:35:64:6b:c8:a2:10:
05:ff:a5:a8:cc:54:94:d0:87:3f:25:84:6a:32:a7:ce:12:a4:
64:90:40:42:07:2c:41:f3:cb:be:3f:83:0a:0e:bb:2b:cc:86:
3a:7b:4d:4c:d9:b5:37:46:e6:f5:23:7d:d5:5a:da:36:d5:0e:
e8:3c:bc:19:1c:bc:b8:d9:9c:c7:3a:88:5e:68:f6:8a:f8:a0:
b8:8d:90:46:6f:b2:49:8e:0a:39:20:cc:4f:9c:42:e3:de:12:
56:2e:e3:2d:f6:17:13:50:d4:46:fe:79:31:80:9e:fb:07:76:
3a:16:34:a4:ef:0f:9f:45:63:bf:5a:7a:5b:db:ea:ea:7d:41:
a7:32:a2:92:9f:17:ce:f9:17:23:f8:eb:8f:90:98:ee:88:2e:
c6:74:18:f5:34:a8:8e:2b:40:90:d3:79:07:0e:71:16:d7:61:
74:c1:96:8f:c0:27:30:1a:c3:d8:d7:f6:21:c5:de:7f:98:8f:
b5:db:b6:48:c0:b1:05:37:78:53:19:22:22:ea:6f:f8:48:e9:
5c:cc:d6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lOwf+Pl5vB0gJAIL8B+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTc4YmZmZTMwY2RiNjBlMTQ5MGQyZWE3ZTcxMmY0MDQ5
YmY5ZTUwHhcNMjYxMDE1MDgwMTQ5WhcNMjYxMDE2MDgwMTQ5WjAzMTEwLwYDVQQD
Eyg1NTE2Y2ZjYTNkMDViNzdjMDMyYjU3MTlhOTg5MDdhZTYxNzE5YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCM83/IqhTLe/Y810L99j/0KzJXI
J0qp/YKI2rxoGl8YLWUo39na5zyOjwH/CPru0PXIcBTxWq4QYJL/TVEHALG3LKSF
X4AjWRY/XIlPVDezaL7hN0TLffdeWje84D7Ir+FxJUq0SfRtDkQOmcYlybNHcgHb
fW6DiuqLk/Vhh2HhwYbJGnJ0pH3b98rvCtpjB2ug+qhgWFGeIvmY4prTVzUaTJsR
pRFoPZPkR0rkXt7AHMJ4JD1o6fqCp+ovN43WTUqxbpxIn2UUxiu+B/xG/tVFao1R
FK+vULhyTwnMyzl+FmdW4Y50Crj/fPn51PIre/D+j3ClldgXhCON6cHeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUWz8o9Bbd8AytXGamJB65hcZvwMB8GA1UdIwQY
MBaAFDoXi//jDNtg4UkNLqfnEvQEm/nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82Y2U3MGUtZmM1OC00MTU4LTk4NTIt
Y2FlMWIxODcxYTE2LzEvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82Y2U3MGUtZmM1OC00MTU4LTk4NTItY2FlMWIxODcxYTE2
LzEvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfXTr47d
jZCZorXqTUPyQiORZdTWdpSzHq0GIGpj2ylaQ7QqsizGfPsXQ4sv30q9NWRryKIQ
Bf+lqMxUlNCHPyWEajKnzhKkZJBAQgcsQfPLvj+DCg67K8yGOntNTNm1N0bm9SN9
1VraNtUO6Dy8GRy8uNmcxzqIXmj2iviguI2QRm+ySY4KOSDMT5xC494SVi7jLfYX
E1DURv55MYCe+wd2OhY0pO8Pn0Vjv1p6W9vq6n1BpzKikp8XzvkXI/jrj5CY7ogu
xnQY9TSojitAkNN5Bw5xFtdhdMGWj8AnMBrD2Nf2IcXef5iPtdu2SMCxBTd4Uxki
Iupv+EjpXMzWJg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:27:36 2026 by rpki-client