Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: ipHZCE/SKCrg5RWqFKVVlEwwnT9zlNegnw1D49nVPLY=
Subject key identifier: 06:E5:5D:6B:20:E4:6A:07:FA:8B:DA:A1:C6:80:D0:B2:93:48:94:26
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019D2BF35CA3C537B1D3D8D0217AEDB54F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 21:01:02 +0000
Manifest this update: Thu 26 Mar 2026 21:01:02 +0000
Manifest next update: Fri 27 Mar 2026 21:01:02 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: 2anrhCjmztfUeV/FaPDIBd/+kp+v1xGTSQA2z+i65JY=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:5c:a3:c5:37:b1:d3:d8:d0:21:7a:ed:b5:4f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Mar 26 21:01:02 2026 GMT
Not After : Mar 27 21:01:02 2026 GMT
Subject: CN=06e55d6b20e46a07fa8bdaa1c680d0b293489426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:14:0c:5b:8b:9f:38:eb:94:4e:4b:5f:8e:
c5:0d:77:dc:d4:5e:5f:f9:ca:c8:f3:c6:57:fa:82:
97:48:2c:0d:8e:e3:50:22:7c:f6:e5:23:62:5c:71:
73:d4:6e:e8:82:34:fc:a8:9e:7a:22:ac:5b:9b:22:
a8:53:3a:c1:ad:3c:fc:4a:7b:c3:75:07:ce:62:2a:
d5:5a:20:3f:1e:06:47:1f:25:eb:ae:85:c2:03:25:
f7:16:aa:79:fb:ad:f3:32:9e:f9:d0:81:86:56:af:
45:b1:d8:8b:8e:41:a5:eb:73:94:f6:77:97:83:5a:
dd:92:8a:0c:f6:8d:e2:1e:57:fc:8d:60:53:c7:bb:
e6:e5:ee:bf:ef:76:77:3b:d8:87:f1:c2:28:bc:c4:
48:b8:a3:ab:0c:03:5c:b9:0a:71:2d:83:ba:83:d0:
dc:9a:a9:7d:47:45:02:ab:3c:47:f8:34:5e:1e:10:
ca:32:81:dd:f6:7f:63:00:01:2c:a8:83:8c:1e:16:
4f:62:91:9f:f5:ca:41:07:ef:c0:e6:6c:5d:96:de:
b0:dd:5b:15:b4:b4:21:bf:4a:72:4e:18:70:b7:de:
33:e9:18:fc:59:02:8c:dc:8f:80:79:53:f2:d4:f7:
fc:d2:8e:98:c2:ac:a9:14:ef:72:63:15:dd:03:e8:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:5D:6B:20:E4:6A:07:FA:8B:DA:A1:C6:80:D0:B2:93:48:94:26
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fb:bd:d8:cd:f6:85:29:4e:67:49:a6:55:db:c5:3a:45:a0:
ff:49:d9:dd:04:0d:28:36:25:7a:fc:47:0a:27:ef:b1:01:28:
45:5b:d5:6d:7c:8c:a8:9f:03:ea:de:7e:b2:93:6f:5f:f9:3e:
a2:d4:2d:00:95:7f:e2:ab:90:58:9a:20:8f:ec:5e:49:d7:95:
92:2e:9c:e5:31:e5:11:6b:9e:79:51:6a:7a:7e:da:7c:6c:f8:
4d:f4:75:dd:49:01:18:07:a6:bf:b3:d9:b4:97:94:59:f6:e2:
cf:c7:5e:82:59:79:5b:0e:2a:3d:8f:41:63:79:5f:6a:7c:50:
b2:cf:ce:ca:81:e8:23:c1:1b:d0:cf:37:91:02:49:60:22:c6:
e0:e5:7b:93:a3:2d:0a:82:35:16:52:ba:04:16:68:bf:19:6f:
c3:f7:31:f3:57:8d:bb:4a:04:fb:86:d8:51:35:fb:cf:25:91:
2e:da:46:6d:1b:d0:e8:ed:0c:d6:09:b2:92:60:24:e9:51:9e:
8a:a9:bf:f5:ec:b6:bf:6f:2b:97:03:40:0f:79:18:ae:46:39:
d6:fc:42:89:c2:96:30:5b:87:70:1b:c0:0a:c4:20:aa:7a:bd:
ec:9c:48:25:a2:cd:e9:d0:00:22:2e:5b:64:b6:4b:5e:b5:4b:
c7:47:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:47 2026 by rpki-client