Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: szx2C7EQzhrM7xeLwyJyICItA/5WkY2xbC1Uw63Lt5o=
Subject key identifier: 94:27:2F:B3:F6:C9:20:18:38:C9:5F:57:25:28:55:C5:AF:D0:CA:DD
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019D28F2B73F98E213753907E1ED3F1C0F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 04FC
Signing time: Thu 26 Mar 2026 07:01:28 +0000
Manifest this update: Thu 26 Mar 2026 07:01:28 +0000
Manifest next update: Fri 27 Mar 2026 07:01:28 +0000
Files and hashes: 1: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (hash: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: Y3iBEFVl1Chn9pNx4zTr/XosVsT9qXT4O7GrkGsbf6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b7:3f:98:e2:13:75:39:07:e1:ed:3f:1c:0f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Mar 26 07:01:28 2026 GMT
Not After : Mar 27 07:01:28 2026 GMT
Subject: CN=94272fb3f6c9201838c95f57252855c5afd0cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:7d:31:e1:0b:53:7c:b2:71:db:76:a5:37:
4c:a9:69:26:cc:38:bd:25:4a:71:75:fe:09:de:83:
8b:04:68:f8:0e:38:89:a8:1f:31:91:07:b0:c0:48:
5e:f1:57:3c:d1:c8:42:42:9e:20:71:71:00:05:47:
ff:71:cd:e1:45:b2:e4:59:d9:9b:26:6e:3e:2f:9e:
d5:49:09:b7:6d:3e:93:73:c3:04:9b:2c:95:61:8b:
83:66:c5:79:bd:14:7a:b4:e8:32:3e:58:ae:ad:28:
a3:d8:7f:06:d0:81:cc:71:4f:fa:71:ca:16:9d:88:
7b:e2:4a:79:1f:48:95:85:cd:fe:3a:78:23:2f:27:
fc:60:4e:79:ab:e2:5a:9c:49:b4:6c:2f:97:4f:20:
b5:62:2d:fd:ce:b3:c9:27:9a:40:ef:72:56:75:11:
a6:7a:e5:e9:11:71:ab:8f:f6:8b:7a:02:8f:3e:fe:
86:84:e4:a0:f7:24:2b:b9:79:09:2a:d2:27:1f:c7:
54:ce:e3:91:06:ca:61:7e:e5:c7:e7:8e:19:e3:6e:
4c:e9:70:c7:58:ca:91:41:88:a6:73:bc:25:74:84:
02:67:21:fd:cc:ca:60:05:50:ef:55:29:76:59:72:
5d:db:2f:a7:c8:a2:fa:04:a8:25:4b:2d:cd:11:97:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:2F:B3:F6:C9:20:18:38:C9:5F:57:25:28:55:C5:AF:D0:CA:DD
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:c6:07:28:c4:80:e7:31:bf:c2:07:e9:95:ff:49:8c:68:
45:73:88:d1:a5:eb:bf:40:05:be:cd:d7:04:37:08:10:e6:03:
b0:ae:3c:cb:77:a1:fe:e1:d9:72:ba:5e:31:b4:6a:88:da:c9:
52:d1:e2:c7:2f:31:a8:a7:79:86:43:6b:98:f6:5f:71:93:26:
ac:4f:88:66:7f:98:c4:ae:d8:ac:73:fe:0e:64:1b:e1:8d:dd:
07:1f:66:a3:5d:e1:0e:52:5f:90:18:6a:08:a1:e3:71:bc:1a:
70:71:fc:8a:72:5e:0f:64:7b:66:aa:be:3f:4d:10:fd:1f:ee:
5e:c6:4f:b5:6c:63:7d:22:cf:f8:da:cf:4d:e2:5b:7d:68:b9:
ea:ef:b4:16:ef:85:1e:45:91:f6:9a:c6:92:3a:26:4c:94:98:
2d:9c:0c:cb:cb:9f:3a:0e:67:b2:99:04:2e:e9:96:53:af:fb:
b2:3d:7b:b4:7a:15:2d:3e:ce:95:15:bb:09:75:49:ec:a2:b7:
e7:ea:d8:86:fc:19:c0:db:20:66:8f:03:5a:54:04:ed:01:f0:
c1:f8:7a:11:87:cd:db:a4:cc:88:9b:01:14:bf:67:f1:4a:06:
46:b8:f5:85:d7:b0:ff:1e:6d:d1:0a:25:01:e0:d5:11:16:aa:
7e:2b:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:00 2026 by rpki-client