Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: DWCiRU5S1GrQncUQBjfXBc5ZqXhooy2tKqkRRayULvQ=
Subject key identifier: DF:07:B3:1E:47:80:79:47:E1:8A:73:74:F3:4D:D7:BC:AA:D3:63:36
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019CAC0FF0F21E3A8EA349D2EDE01AA54CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: 96RUqwXbiO0CQL6mL0Cxnc8uMQNGSHx7J3yjx2vm9jA=)
2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f0:f2:1e:3a:8e:a3:49:d2:ed:e0:1a:a5:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=df07b31e47807947e18a7374f34dd7bcaad36336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:77:9f:fb:13:b9:ad:a3:8b:ee:7b:fa:db:
6b:c7:51:59:76:11:4f:c6:df:0d:b6:ba:6c:ba:8a:
8f:d1:af:9f:b1:9c:f5:c5:47:92:50:b4:c0:08:ed:
5f:ab:88:f7:e8:27:a0:c6:4d:a0:c3:3f:f8:b8:4a:
13:77:8f:ea:cc:b3:5e:37:49:c9:dc:c7:6b:3c:48:
3f:6e:7e:0a:b4:3c:fc:0d:cd:ed:35:0d:33:c4:ab:
45:ed:79:c6:67:c1:03:d1:d5:3e:d4:56:31:61:ad:
e1:d2:fd:a7:bb:de:48:0e:4d:23:de:d7:53:21:66:
86:3f:bf:2f:91:25:f4:7b:d0:8b:6f:52:f1:d0:70:
f5:7b:15:1d:6b:25:18:6d:a2:66:7e:82:d0:49:bf:
46:2b:97:12:5d:b5:33:65:17:e3:08:49:e6:8f:93:
48:31:b8:3d:76:91:9a:fd:fe:39:7d:f0:ed:88:8c:
64:4d:e1:02:b5:61:c5:a1:c9:60:c7:dc:7f:46:4d:
f0:e1:82:73:a0:05:b2:ab:dc:b7:39:a2:95:17:40:
d9:f3:06:dd:f8:3d:df:14:6a:a3:4a:6c:c3:4e:aa:
f5:33:02:1e:32:cf:f0:6c:ed:b6:d9:6f:3c:b2:9e:
83:ad:14:a0:1b:b3:ef:43:6d:00:5f:9e:9c:4f:b4:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:07:B3:1E:47:80:79:47:E1:8A:73:74:F3:4D:D7:BC:AA:D3:63:36
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:32:12:00:35:63:dd:c9:7f:de:78:ad:38:10:ff:52:08:
58:10:58:fb:88:e0:5b:e9:60:f8:57:f9:e6:ae:5f:ea:af:29:
89:b2:55:b8:f6:a0:3a:b9:21:11:79:f1:cf:6d:fc:4f:90:49:
41:6f:08:a1:e5:6f:11:8b:52:20:05:d1:88:e5:b7:24:9c:79:
34:5b:37:0d:56:5e:5a:ce:52:aa:47:85:b1:20:55:de:3b:1a:
e4:f9:7d:6e:52:31:28:dc:92:79:4c:a3:fe:d1:63:34:a0:37:
93:14:94:41:58:86:49:ac:d7:5e:cf:6a:ce:14:ce:7f:29:fb:
12:8d:36:d7:58:9f:00:8f:f9:f2:a0:93:ac:2b:c2:a7:2c:de:
64:f7:bb:0c:cf:e3:96:96:97:b8:d7:da:d0:0c:32:2f:4c:68:
c6:aa:07:2d:04:a3:65:74:12:fd:c6:f3:1c:96:36:50:bf:95:
5e:1c:57:1c:93:4e:9c:28:66:4c:77:6d:ee:77:3b:57:57:2b:
6e:43:e7:c9:31:8f:af:a4:b9:a1:b4:62:7c:1f:35:fc:8a:89:
9c:79:1e:56:68:bc:86:30:46:79:15:b9:96:59:dc:13:f8:02:
e1:f3:a9:72:ae:28:c7:28:06:fb:3e:6c:87:26:1b:06:94:e1:
b3:52:c5:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/DyHjqOo0nS7eAapUyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz
NTBjNWYwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
EyhkZjA3YjMxZTQ3ODA3OTQ3ZTE4YTczNzRmMzRkZDdiY2FhZDM2MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYR3n/sTua2ji+57+ttrx1FZdhFP
xt8NtrpsuoqP0a+fsZz1xUeSULTACO1fq4j36Cegxk2gwz/4uEoTd4/qzLNeN0nJ
3MdrPEg/bn4KtDz8Dc3tNQ0zxKtF7XnGZ8ED0dU+1FYxYa3h0v2nu95IDk0j3tdT
IWaGP78vkSX0e9CLb1Lx0HD1exUdayUYbaJmfoLQSb9GK5cSXbUzZRfjCEnmj5NI
Mbg9dpGa/f45ffDtiIxkTeECtWHFoclgx9x/Rk3w4YJzoAWyq9y3OaKVF0DZ8wbd
+D3fFGqjSmzDTqr1MwIeMs/wbO222W88sp6DrRSgG7PvQ20AX56cT7RAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8Hsx5HgHlH4YpzdPNN17yq02M2MB8GA1UdIwQY
MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt
ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0
LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedMyEgA1
Y93Jf954rTgQ/1IIWBBY+4jgW+lg+Ff55q5f6q8pibJVuPagOrkhEXnxz238T5BJ
QW8IoeVvEYtSIAXRiOW3JJx5NFs3DVZeWs5SqkeFsSBV3jsa5Pl9blIxKNySeUyj
/tFjNKA3kxSUQViGSazXXs9qzhTOfyn7Eo0211ifAI/58qCTrCvCpyzeZPe7DM/j
lpaXuNfa0AwyL0xoxqoHLQSjZXQS/cbzHJY2UL+VXhxXHJNOnChmTHdt7nc7V1cr
bkPnyTGPr6S5obRifB81/IqJnHkeVmi8hjBGeRW5llncE/gC4fOpcq4oxygG+z5s
hyYbBpThs1LF4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:56 2026 by rpki-client