Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: tBfdFNj7jSATHH5pScJJQJiV/RMPBtVWv+uox89iDCM=
Subject key identifier: 83:23:97:82:18:BA:C3:13:DF:23:E0:E5:3B:76:B6:3E:57:56:FA:0A
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019DA341726E4EFFDC46BE5A429599BADB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 01:01:08 +0000
Manifest this update: Sun 19 Apr 2026 01:01:08 +0000
Manifest next update: Mon 20 Apr 2026 01:01:08 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: lGJWr7kJjHpEaCl2SWtWuyAtNPXB+Yi2f4G5z6p/vVY=)
2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:72:6e:4e:ff:dc:46:be:5a:42:95:99:ba:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Apr 19 01:01:08 2026 GMT
Not After : Apr 20 01:01:08 2026 GMT
Subject: CN=8323978218bac313df23e0e53b76b63e5756fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:83:87:a6:81:79:7a:75:9d:cc:52:4d:c1:
0c:fe:77:de:b6:57:be:a6:c2:f4:ba:2a:38:7b:2e:
99:5a:cf:2c:f5:a7:bc:1e:4c:fd:be:67:c5:ef:30:
db:ee:13:da:a3:92:12:a0:4a:bd:55:e2:59:83:8b:
10:7a:5d:83:d0:54:9e:ec:ef:70:56:02:85:ad:73:
db:bd:45:e9:88:3f:b3:0a:59:ba:aa:2d:e4:a7:0a:
3d:2b:3a:da:50:d5:17:6d:45:a4:70:d1:b9:36:ec:
0a:56:31:2f:79:2b:dd:78:54:dc:9b:5b:32:1d:e7:
0b:98:c2:7a:8b:31:88:6b:0b:2f:13:5d:c9:ac:71:
b1:7c:23:0a:9a:57:05:b8:6b:ec:a5:74:c7:ab:a0:
3e:cd:b8:9b:5c:b5:cf:49:03:50:66:14:7b:bf:2f:
34:92:7d:44:b6:14:90:a1:99:cc:ef:fc:80:0b:47:
aa:63:6f:95:7b:e0:a8:1d:5c:94:71:85:e2:50:b6:
a1:50:5b:a8:77:8d:ab:9e:a7:3b:15:46:13:12:08:
fb:c0:5d:10:0e:83:82:be:64:12:07:db:ac:bd:1d:
bb:b9:9d:7e:88:1c:3b:e4:66:ca:97:fb:43:b2:7c:
89:fa:ea:1f:66:f3:e3:43:72:0e:3f:8f:9a:cc:08:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:97:82:18:BA:C3:13:DF:23:E0:E5:3B:76:B6:3E:57:56:FA:0A
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cc:56:92:ce:c5:18:e5:69:52:13:20:05:fb:49:ac:8c:7e:
36:d8:b7:c9:ad:48:2b:d2:74:7c:3a:89:45:57:9a:ab:cb:c1:
c6:25:02:f6:3d:b6:3f:d0:a0:a7:ea:40:4c:e0:bc:d3:30:87:
35:2e:19:37:e0:c8:dc:e1:57:1e:d8:49:7c:29:f0:c1:28:2a:
7c:7a:0b:df:23:cb:32:4b:17:85:22:6e:81:31:8b:9f:68:0c:
a2:2d:f7:0e:eb:17:cd:ae:b7:47:77:e2:fd:99:4b:1e:07:76:
f6:db:db:15:e6:44:10:99:17:ab:07:fc:43:9f:81:01:5f:cc:
3b:c2:2f:b9:fa:85:14:85:36:28:22:1a:cb:4e:21:22:45:fe:
51:da:80:74:1c:51:02:26:15:7d:aa:31:11:3f:ac:24:38:40:
8d:90:9c:5f:cf:ad:60:db:6e:dc:c3:51:0a:6b:b4:b2:c5:9c:
25:e5:2f:a1:a2:c8:df:e0:42:83:09:eb:41:d4:68:55:58:52:
f6:99:1e:ba:79:58:1d:da:63:b3:aa:f7:c1:89:d3:bf:4b:ac:
61:da:e0:9f:8e:6a:bc:c3:76:e3:3d:dd:52:e7:b3:f1:ca:8d:
70:39:69:ca:ef:d5:b9:6f:44:52:6f:c3:b7:a9:28:34:6a:c0:
52:79:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:10 2026 by rpki-client