Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: KizIiguM4XAfgydpYVIbpIXeZ6GwUqB0TtwnSNqZIj0=
Subject key identifier: DE:1F:6B:1F:F7:3C:4B:D5:22:ED:4C:BB:2E:7D:FB:B1:89:F9:DA:4D
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 019D26963D21FB43D08EA27F950970093FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 1786
Signing time: Wed 25 Mar 2026 20:01:13 +0000
Manifest this update: Wed 25 Mar 2026 20:01:13 +0000
Manifest next update: Thu 26 Mar 2026 20:01:13 +0000
Files and hashes: 1: Nda1eBhsJwT4E7HRchbC4K3iiqs.roa (hash: IyraCeQZ++qiXcc0IC+bQds8y+BEFwAlU5YYks8WhRk=)
2: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: omvQQ+/tasVXcZsKRwhrqQpTE9k2DfomAjMPhTORBuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3d:21:fb:43:d0:8e:a2:7f:95:09:70:09:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Mar 25 20:01:13 2026 GMT
Not After : Mar 26 20:01:13 2026 GMT
Subject: CN=de1f6b1ff73c4bd522ed4cbb2e7dfbb189f9da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:87:e5:54:b6:b4:2b:1f:5f:72:47:16:c7:
93:36:fb:56:81:77:47:1f:65:72:33:ac:c4:8d:33:
6f:d8:c6:11:a8:5c:45:00:10:3f:48:4c:5c:a8:63:
ba:75:78:30:9a:93:e7:98:c3:ce:53:17:3b:1d:57:
ad:04:d9:af:0e:cf:f3:0c:b4:dc:77:ae:63:e6:27:
62:da:4a:ee:23:51:85:7b:31:0f:dd:56:98:c8:6e:
d7:5b:76:94:70:e4:3d:e0:07:6f:0d:00:07:b5:94:
d0:e0:54:0d:f8:0b:9f:ec:40:a0:36:63:a0:d2:fd:
70:68:d6:7f:f6:ee:e0:b0:f1:72:7b:da:27:81:77:
26:6d:38:c8:49:b2:8e:28:c1:a0:48:05:37:9a:7b:
38:37:96:c6:6d:ab:71:b8:63:6c:6e:fc:87:8e:34:
26:2f:e9:20:26:c6:af:1c:67:da:05:15:22:6c:42:
01:6e:ed:f2:c2:51:42:fb:1a:57:99:36:ae:6c:35:
c4:4a:e6:8c:63:26:ce:2c:a7:b4:6a:cd:b5:6e:21:
e7:d4:96:f4:ea:23:69:3f:d0:ec:f1:46:10:1c:85:
18:d3:92:0a:3a:64:10:99:f2:ed:f3:86:de:fb:30:
1a:e3:8a:97:0e:43:06:29:66:35:8e:08:87:94:e2:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:6B:1F:F7:3C:4B:D5:22:ED:4C:BB:2E:7D:FB:B1:89:F9:DA:4D
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7b:5e:0b:9f:92:66:e7:28:55:68:80:e9:c3:df:85:b0:68:
a2:a2:0e:5f:d5:aa:cd:57:f1:0b:86:0d:b7:88:a3:6f:dd:3e:
aa:39:5e:24:0b:85:e3:f7:c6:8b:4d:18:23:86:55:5f:b2:d8:
ec:c7:16:c3:b2:d3:1e:29:35:6f:eb:7b:f7:a7:bc:26:4f:f6:
6b:20:ba:95:91:dd:d2:ff:ad:16:c7:33:da:ba:fe:a9:ca:84:
5f:00:f3:ec:c9:12:e5:ff:a4:e7:09:88:07:7d:81:72:25:be:
29:e0:15:5d:23:41:00:18:06:1a:17:30:48:83:37:3c:f6:aa:
49:73:ef:4b:42:8c:b3:74:3e:64:1b:df:8e:da:45:e5:d9:8f:
10:e8:9d:d0:48:7e:96:53:83:2f:8f:cf:0a:61:5c:62:a4:22:
5d:7c:d2:9e:c3:1c:77:95:1f:5f:59:8d:52:40:ed:71:30:98:
37:84:38:be:07:a1:f3:3a:0e:21:e5:4b:93:68:fd:95:4c:5f:
14:3f:e9:fe:6f:c8:e7:b3:67:89:2b:41:a3:d2:9b:bb:dc:9c:
42:f9:b4:57:87:f2:22:9d:61:f5:8a:85:58:ff:04:70:82:2a:
e1:f9:52:ea:c2:d0:bd:83:26:09:e2:2b:16:db:36:31:7b:6d:
8d:df:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:14 2026 by rpki-client