Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
File: ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft (raw, json)
Hash identifier: wOR+oI4tMaXsviCnxEvWWqSzuFlrZ3n6pHpjAANalGw=
Subject key identifier: 5E:89:D9:B8:F6:27:A7:B3:F1:DB:18:34:F5:AA:88:A1:8F:FB:66:F1
Authority key identifier: A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37
Certificate issuer: /CN=a2174318cfafe755f183a97fb7b957abeef53f37
Certificate serial: 019CB092327744AF5DA88C69E2F680D1403C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
Manifest number: 42
Signing time: Mon 02 Mar 2026 22:01:36 +0000
Manifest this update: Mon 02 Mar 2026 22:01:36 +0000
Manifest next update: Tue 03 Mar 2026 22:01:36 +0000
Files and hashes: 1: ME8J3_Lqo4Jl0Qlw0Go-W9n_fhc.roa (hash: f3hV7y2bBKIVX1QPsIDsCNThmNsZM2K60scI4YyAfLw=)
2: ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl (hash: 6x/RRkOILB9RshvncG4KUZfMj0RwSqPUQ5vmWb+tc4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:32:77:44:af:5d:a8:8c:69:e2:f6:80:d1:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2174318cfafe755f183a97fb7b957abeef53f37
Validity
Not Before: Mar 2 22:01:36 2026 GMT
Not After : Mar 3 22:01:36 2026 GMT
Subject: CN=5e89d9b8f627a7b3f1db1834f5aa88a18ffb66f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cc:1a:b8:7c:fe:09:30:5a:a5:4a:40:69:da:
f8:a5:b8:54:df:12:8d:e0:86:a8:43:f8:73:9e:40:
70:37:91:d2:3f:9f:49:bd:75:ec:64:e3:2b:4d:57:
45:92:e0:40:a2:d5:7d:06:a4:43:02:ab:45:0a:8c:
50:71:78:e5:99:04:98:e6:ba:7c:73:ef:2e:67:56:
86:fa:32:26:c0:92:01:a2:57:86:c6:82:97:86:66:
24:bb:b6:41:7f:cf:d5:5c:c9:58:92:4d:30:32:0f:
27:79:32:f2:15:f7:5c:51:12:69:c7:b7:5e:f2:c5:
91:6a:75:47:5b:bc:c7:f3:b7:28:30:d9:56:83:2b:
d7:dd:86:c0:e6:b4:9c:c8:e5:ec:fa:a3:48:9a:62:
8f:32:61:a0:f9:bc:2a:a8:31:d5:a3:5c:04:f3:d4:
5e:92:ea:15:6f:de:e9:e0:e7:ca:c2:3e:19:8c:0f:
e8:d7:37:66:7f:b0:9e:6a:31:9a:16:38:2c:6e:af:
5e:97:1c:82:a3:f0:bc:ba:80:79:3c:1b:c4:c1:e3:
1c:f1:f3:67:7c:c0:75:c7:c0:d9:56:b9:f2:3c:a3:
cc:ad:24:d1:0c:28:90:0c:0a:fb:9d:14:9b:66:e6:
bb:fb:84:a4:02:39:c6:c0:8c:08:40:d9:2e:61:1d:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:D9:B8:F6:27:A7:B3:F1:DB:18:34:F5:AA:88:A1:8F:FB:66:F1
X509v3 Authority Key Identifier:
keyid:A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:8b:ea:09:22:5a:73:a6:50:a2:74:4d:f4:84:a9:1f:d2:
75:26:b7:04:d5:fe:ec:21:b0:85:3c:a3:5c:5e:53:61:a0:59:
5e:ed:41:dd:16:1a:74:96:e8:49:59:74:49:c8:0e:89:ae:08:
fd:f8:bd:13:8c:e4:0b:b4:14:3c:f3:a4:e2:08:a4:2a:27:b0:
3a:88:41:52:e7:b9:aa:be:66:8f:55:29:ab:0c:25:73:5b:16:
20:23:2a:aa:ca:86:43:e0:29:11:d2:34:77:9f:1d:e2:ef:ec:
bb:18:b8:7a:f1:2c:b6:45:e8:89:af:f8:29:61:a6:b2:3f:61:
61:3c:66:a2:ea:f4:52:c5:5f:cf:49:42:32:03:99:1a:b4:4f:
5b:9b:87:62:03:28:19:a3:62:f3:92:e0:05:2a:1e:ad:30:43:
b3:b7:be:e3:49:aa:a4:90:f1:33:ac:00:64:e7:65:dc:33:2b:
3a:12:fc:e9:3e:4f:15:fd:0c:b8:ae:a1:75:4a:70:eb:6d:d9:
e6:c8:12:b8:1e:44:21:d9:2d:03:a7:7b:ec:db:06:48:c3:9b:
cd:25:56:10:03:b4:6b:83:c1:3c:37:62:67:8b:70:b6:1d:82:
7c:a5:74:c9:6a:75:10:74:77:a0:e6:ba:4a:56:44:d4:73:d1:
a1:b4:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:19 2026 by rpki-client