Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: HNKKzmpNVCfkvFWIaeoKq0g7CCCDKJFv8E5NQ5HargM=
Subject key identifier: 72:5C:73:00:AF:3A:BD:ED:BD:99:42:EE:A4:31:80:F3:C8:61:80:5E
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019DA52FD904F3A5CF9AEC1917EEC99647EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 10:01:09 +0000
Manifest this update: Sun 19 Apr 2026 10:01:09 +0000
Manifest next update: Mon 20 Apr 2026 10:01:09 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: kIVGiEZqLTfc+scv4VqvFbcpCiJZ/QD9uYeax9O7nSo=)
2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d9:04:f3:a5:cf:9a:ec:19:17:ee:c9:96:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Apr 19 10:01:09 2026 GMT
Not After : Apr 20 10:01:09 2026 GMT
Subject: CN=725c7300af3abdedbd9942eea43180f3c861805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:68:2c:19:52:ef:27:46:18:58:b1:95:d3:
31:b5:a0:1b:56:a0:9c:94:1d:52:f6:50:73:ed:81:
22:52:a6:f7:22:af:44:c8:53:af:43:db:0c:07:1a:
73:f2:2f:2a:ed:d8:8c:20:90:ff:53:73:27:7d:24:
0e:30:32:39:32:08:b1:03:ab:12:1c:27:71:e1:7c:
21:02:6d:4a:ac:42:e4:8c:d5:23:55:39:aa:80:6e:
84:c0:99:7a:07:f6:c0:49:f3:a3:4e:08:9e:61:97:
ab:fb:1d:6c:98:1d:7c:a1:4b:95:c2:86:8e:57:11:
3a:22:d4:72:f1:c0:8e:f7:d1:1a:c2:32:55:64:e0:
ac:17:e7:05:c9:e9:19:3a:66:86:8f:a3:a1:eb:68:
13:b5:ff:2f:41:a6:73:6a:16:6b:36:bc:47:28:8f:
b2:b5:c2:86:49:93:f4:8e:82:4c:84:eb:cd:9e:20:
77:33:2c:cb:e0:b3:39:f5:82:c5:05:48:6f:04:76:
f4:31:c9:e7:f7:b2:ec:c0:a6:91:e4:a4:34:05:0d:
b7:27:d4:88:a7:54:eb:e8:db:7e:11:90:7d:b3:32:
a1:c6:58:75:b3:93:3a:d1:4b:6b:3e:a6:7b:06:4a:
ce:cc:f1:18:d1:07:3b:c6:4e:82:16:15:0f:8f:45:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:73:00:AF:3A:BD:ED:BD:99:42:EE:A4:31:80:F3:C8:61:80:5E
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5b:87:1f:41:2e:7e:0f:b7:e9:8d:b1:b2:f6:50:d5:8b:96:
fa:47:a1:50:3d:f3:2d:52:96:87:37:eb:cc:33:05:f5:4d:71:
5b:81:d5:b8:77:3b:35:af:81:e3:5c:03:af:a9:fe:ab:d7:ca:
53:4f:c1:9a:51:48:c5:ab:2a:83:0e:a4:38:b4:6a:96:d4:b0:
a0:4e:cf:bf:44:9a:99:13:2a:62:6f:84:b6:5f:20:18:6b:14:
6c:70:61:1f:80:26:5f:37:d4:f2:d0:5d:c8:ad:62:f3:ce:68:
60:6d:ee:ea:09:13:ba:fd:e2:95:96:e4:f7:95:5f:52:8b:d6:
83:24:94:f0:5d:d0:84:82:77:6e:e2:5c:ba:a4:02:c2:cc:34:
b3:9d:be:19:35:33:ac:ca:4c:62:03:05:bd:0e:73:ef:81:32:
0d:ce:0b:9f:a7:08:7a:7b:3b:9d:9e:1c:98:6b:06:65:da:fa:
c4:d2:3a:96:21:eb:ee:e0:1e:54:9f:d8:45:97:f2:3d:b1:31:
d8:b5:17:e2:d1:8f:d3:5c:06:88:b6:30:24:f7:fa:1a:33:9d:
40:00:00:23:04:67:56:c6:5e:af:aa:74:04:ea:e1:3f:ce:15:
07:35:d3:82:8a:6a:cf:31:45:db:2e:a0:b1:2c:2c:4b:a2:66:
1f:4d:3c:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL9kE86XPmuwZF+7JlkfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz
NTBjNWYwHhcNMjYwNDE5MTAwMTA5WhcNMjYwNDIwMTAwMTA5WjAzMTEwLwYDVQQD
Eyg3MjVjNzMwMGFmM2FiZGVkYmQ5OTQyZWVhNDMxODBmM2M4NjE4MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/9oLBlS7ydGGFixldMxtaAbVqCc
lB1S9lBz7YEiUqb3Iq9EyFOvQ9sMBxpz8i8q7diMIJD/U3MnfSQOMDI5MgixA6sS
HCdx4XwhAm1KrELkjNUjVTmqgG6EwJl6B/bASfOjTgieYZer+x1smB18oUuVwoaO
VxE6ItRy8cCO99EawjJVZOCsF+cFyekZOmaGj6Oh62gTtf8vQaZzahZrNrxHKI+y
tcKGSZP0joJMhOvNniB3MyzL4LM59YLFBUhvBHb0Mcnn97LswKaR5KQ0BQ23J9SI
p1Tr6Nt+EZB9szKhxlh1s5M60UtrPqZ7BkrOzPEY0Qc7xk6CFhUPj0UpiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJccwCvOr3tvZlC7qQxgPPIYYBeMB8GA1UdIwQY
MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt
ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0
LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1uHH0Eu
fg+36Y2xsvZQ1YuW+kehUD3zLVKWhzfrzDMF9U1xW4HVuHc7Na+B41wDr6n+q9fK
U0/BmlFIxasqgw6kOLRqltSwoE7Pv0SamRMqYm+Etl8gGGsUbHBhH4AmXzfU8tBd
yK1i885oYG3u6gkTuv3ilZbk95VfUovWgySU8F3QhIJ3buJcuqQCwsw0s52+GTUz
rMpMYgMFvQ5z74EyDc4Ln6cIens7nZ4cmGsGZdr6xNI6liHr7uAeVJ/YRZfyPbEx
2LUX4tGP01wGiLYwJPf6GjOdQAAAIwRnVsZer6p0BOrhP84VBzXTgopqzzFF2y6g
sSwsS6JmH008jA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:20:02 2026 by rpki-client