Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: msali71+9tZVy9PxzMvOWSOAEsfStYA1tDarGbkaJxA=
Subject key identifier: A1:33:EB:22:94:08:53:66:1A:C3:DD:DF:BC:30:B7:02:4C:35:CB:61
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019F9022B9F36062146A9291085B04F794CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: o6pBwisQ5uGiHcaS7LlxhgPknmOKU8skGnrBnMy3DNk=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b9:f3:60:62:14:6a:92:91:08:5b:04:f7:94:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=a133eb22940853661ac3dddfbc30b7024c35cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:68:a6:76:ac:a9:2e:00:06:3e:13:12:ef:
0b:32:8e:89:49:fa:d9:a5:50:95:99:c8:b7:01:88:
6e:9b:32:84:92:7d:1a:ef:2e:3e:bf:0c:1f:43:71:
98:69:d2:e7:0e:74:50:9e:a1:b5:4c:48:9d:1a:81:
4f:ce:af:51:f7:7e:98:46:e5:c7:d7:ba:f9:56:91:
c3:a2:c4:bf:78:fd:4e:fa:ce:32:72:23:47:95:43:
46:eb:f4:c6:8e:e1:fe:64:a4:e4:63:4f:54:b9:3d:
50:88:66:d7:38:19:36:5a:9c:d4:d8:69:fc:25:e3:
0c:f2:db:26:32:4a:84:91:86:8a:06:96:98:ea:68:
77:7e:28:3e:00:42:0a:1d:95:fc:e7:55:d1:32:1f:
6a:c5:d1:aa:3b:b3:38:40:49:ec:b9:8f:13:f4:53:
68:4b:4d:8b:2a:4c:aa:86:78:07:99:4d:d8:db:c9:
2b:7c:c1:e9:6f:4a:0b:06:ee:83:be:ba:71:e9:67:
3a:35:14:17:cd:93:cb:43:30:a0:13:47:04:ed:23:
c4:e3:a7:b2:3c:6b:5e:96:db:86:58:6b:01:54:c6:
94:6f:05:66:1f:31:c0:d6:28:1f:4a:f0:69:50:15:
13:58:c2:a4:5b:2c:18:d2:5a:9b:3d:f8:00:ae:d8:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:EB:22:94:08:53:66:1A:C3:DD:DF:BC:30:B7:02:4C:35:CB:61
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:90:0d:ea:3e:a7:7a:51:94:90:e0:e0:31:24:14:83:14:
47:aa:28:49:a0:66:14:e4:fc:93:ea:0c:90:7a:13:3e:0e:a9:
57:e5:77:e2:7e:6c:b2:bf:c2:b8:32:d9:e0:b5:f9:82:77:ed:
d6:ba:9d:6e:f0:20:07:22:06:38:5d:65:6c:c9:2a:56:53:7d:
b1:eb:39:64:4e:43:bc:3e:e1:64:74:5e:e2:7a:f5:ce:ea:49:
3a:36:aa:d2:ce:9d:70:c8:ed:cd:9b:87:a4:94:bb:8d:03:28:
68:b4:3b:95:5b:f7:66:8b:89:f8:e8:b4:f4:23:9c:91:75:fc:
84:2a:7f:90:47:1b:d7:3c:a5:17:5b:86:ac:19:03:0e:81:a2:
91:d7:8f:fe:bc:5c:eb:ea:bf:d8:5b:58:3a:20:31:0c:e3:8f:
0a:7c:62:32:7f:4f:52:52:8d:8f:4f:ff:b5:1e:3c:7f:65:d5:
1f:2c:7f:a8:22:bb:b4:e5:80:62:62:63:ef:74:cc:2d:d5:43:
41:e4:6b:c6:e1:5d:ad:31:fd:a3:9d:55:5b:54:b8:29:97:fa:
cd:59:38:29:2a:bf:fe:5c:85:32:b8:4c:c7:82:f8:e1:0d:99:
a8:d9:8f:43:c6:c8:e6:85:b6:f0:70:4e:c1:0c:c5:6c:da:ea:
dc:a7:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:41 2026 by rpki-client