Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: i+u+BUYhV1+ESAy8EOLkXYA8dB5bU7CIYQPDHxIR9w4=
Subject key identifier: B9:63:22:2C:8E:B9:6C:91:0F:F5:89:04:90:17:20:21:C3:80:AF:D5
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 01A12D327FFEDB3BA9E0463BD406FE290653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 01F7
Signing time: Sun 11 Oct 2026 23:00:46 +0000
Manifest this update: Sun 11 Oct 2026 23:00:46 +0000
Manifest next update: Mon 12 Oct 2026 23:00:46 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: lJ1haMGhM9V/aIhMWYcQyfgoq+fnvKRyLVzDsvDRDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:7f:fe:db:3b:a9:e0:46:3b:d4:06:fe:29:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Oct 11 23:00:46 2026 GMT
Not After : Oct 12 23:00:46 2026 GMT
Subject: CN=b963222c8eb96c910ff5890490172021c380afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:55:3d:56:c4:43:43:1e:42:85:cc:71:fe:
83:17:98:26:36:93:9f:9b:8e:3a:89:b2:37:90:17:
99:36:ad:31:34:99:9b:80:65:a0:53:ab:ac:59:1d:
08:fd:e6:3d:4f:45:f3:23:1a:47:76:c7:87:6b:ec:
c7:3c:46:4d:21:81:56:2f:f4:af:ad:60:43:d8:00:
fe:8f:8e:a0:61:96:c3:0c:ba:f4:3d:a5:e9:3e:23:
7a:0f:7d:d7:47:e0:39:4a:10:15:e9:87:10:7f:07:
d8:f1:57:c2:3c:d7:7c:ac:20:b2:b6:7d:8c:d8:aa:
b4:16:92:b4:05:a8:3e:b8:a5:a7:a0:6f:ba:29:03:
f7:c5:68:6d:97:2d:2d:6f:80:0b:c8:54:4c:72:ec:
ad:88:de:ef:6c:e9:d9:92:8b:10:48:65:1f:16:54:
61:d0:64:6b:9b:3b:43:23:5f:47:27:f9:bb:13:0c:
27:c9:11:18:33:41:65:0c:a5:98:ff:30:02:14:a6:
b3:78:20:5e:1b:59:15:97:65:4f:04:7e:f0:89:9c:
88:5f:3a:b1:b3:c6:da:f9:cf:a2:22:26:91:43:a7:
f4:b9:71:8d:4e:c9:03:ce:de:60:03:16:94:b5:a5:
50:b0:fa:0c:6a:34:2d:7f:7a:c9:b9:b0:6e:9b:49:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:22:2C:8E:B9:6C:91:0F:F5:89:04:90:17:20:21:C3:80:AF:D5
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:c4:27:d7:70:01:c2:d7:d8:ed:14:28:ae:09:8a:c8:c5:
da:af:23:ed:67:32:c9:29:c3:4a:8e:b5:54:e6:b7:ae:00:ce:
df:04:a3:f9:40:a4:97:9a:d7:98:97:55:b0:29:12:d8:a6:3e:
95:78:8f:bd:2a:df:cf:46:cf:a6:95:ea:d2:6b:97:1f:d4:6a:
06:24:3e:d7:18:5f:00:ae:39:a5:4a:c3:02:ac:f2:7e:ea:8d:
eb:9c:4c:a0:27:c0:9f:b8:f9:21:dd:9f:a3:6e:e0:a4:bf:08:
fb:78:49:8c:7f:be:4e:10:8f:c2:a6:20:b1:62:3a:64:c9:8d:
5c:a2:84:6e:7b:78:65:3d:69:63:4a:c1:0c:4e:84:f1:b9:eb:
b6:c5:d6:6b:a5:42:13:f3:18:c0:0c:be:f8:64:d4:53:51:2c:
1e:49:d6:fa:33:97:eb:40:2d:03:a0:23:d9:25:4b:8d:05:eb:
e7:19:96:2a:63:e9:5e:d4:fb:25:eb:79:b3:f3:6f:c2:b2:92:
41:ad:40:0f:38:09:20:f7:33:a7:f5:d9:5a:f2:b1:cb:53:ac:
be:99:f8:d1:f3:6d:1c:87:cf:7e:b1:76:a8:d0:f2:83:25:e2:
80:17:17:7e:fa:8c:3c:ad:52:f5:28:84:a6:2b:2f:fa:37:fa:
49:2e:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:06:40 2026 by rpki-client