Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: eqrSa3OEb6g/opAQcpUNdfDmiGSGQ6T4Fc42rVuhqfI=
Subject key identifier: 17:E5:70:4E:6A:5F:66:C0:A2:67:BE:6D:EF:C4:30:41:C3:E1:D5:C9
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 019F93C8B6CE7E2308D71C27231EA69D847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 0123
Signing time: Fri 24 Jul 2026 11:00:32 +0000
Manifest this update: Fri 24 Jul 2026 11:00:32 +0000
Manifest next update: Sat 25 Jul 2026 11:00:32 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: 6dy4oiXCZqlYFBRSupfNfILKh7XpbR1M/49kEzVP3vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:b6:ce:7e:23:08:d7:1c:27:23:1e:a6:9d:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Jul 24 11:00:32 2026 GMT
Not After : Jul 25 11:00:32 2026 GMT
Subject: CN=17e5704e6a5f66c0a267be6defc43041c3e1d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:98:12:26:89:f5:ed:39:19:e4:35:1b:c3:
e5:e7:0e:82:fa:c7:05:e2:93:5b:6d:84:fb:89:32:
1f:f2:e0:8d:78:a9:0e:68:5c:bb:52:a6:da:56:6f:
8a:6c:1f:62:61:89:41:08:bb:a3:7b:b9:13:18:99:
c1:d2:f5:82:2c:1f:3d:31:e6:64:ea:ec:86:bf:fb:
eb:df:22:14:51:0d:bd:4b:3d:fd:79:71:10:a7:ee:
81:46:81:f5:7f:37:c4:f5:1d:a0:15:07:3b:f2:b2:
56:4f:14:de:1f:96:fe:78:24:4a:55:d4:d5:71:45:
b4:9f:fe:1c:47:3a:07:61:c7:f4:94:cb:a7:cf:4a:
ef:c4:d1:8f:90:36:28:8a:fc:3b:3d:57:de:4f:c6:
d6:fd:59:ea:ef:00:d2:1d:fb:5f:a1:84:74:83:3e:
d3:72:f2:2e:d3:5b:04:6f:f3:cc:74:82:59:35:92:
ef:f0:4b:a6:9d:8e:6c:3f:d1:4c:7c:3d:78:9a:c8:
1a:0d:9e:22:fa:4c:93:43:04:ca:09:b0:3a:f1:71:
9d:24:6e:f4:f8:cf:30:75:88:73:14:c1:f8:2d:a0:
7e:81:fd:da:ee:0f:dd:33:04:4c:55:54:ed:ee:12:
49:1e:cc:d4:82:28:8d:7a:69:fc:9d:32:93:d0:78:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:70:4E:6A:5F:66:C0:A2:67:BE:6D:EF:C4:30:41:C3:E1:D5:C9
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:2f:0f:d1:65:ad:25:64:69:5b:82:1d:66:f8:31:ff:f3:
92:b1:c3:ab:10:7c:23:b7:39:5c:0d:7a:98:27:35:ee:88:97:
75:be:ec:2c:ab:b5:e7:6f:25:d4:28:dd:e6:af:5b:4f:4c:83:
ce:d8:4f:3f:ad:61:20:ac:f3:ca:0d:4a:11:79:cc:7e:19:91:
a9:a2:10:ba:b4:98:c0:ef:25:d6:06:ab:d5:ed:02:d8:16:0b:
8d:21:20:9e:6d:a1:50:4f:ad:eb:06:e8:5b:b4:7d:34:01:4c:
a3:7e:54:85:5d:44:1a:2d:26:e5:3e:27:59:e2:92:98:2d:42:
5e:74:83:ee:53:1e:e2:b1:ef:37:84:57:b1:e9:0a:9b:22:9a:
f0:13:2f:d9:cb:cc:3f:41:c6:01:88:56:86:b4:18:5d:46:87:
52:e0:6e:67:f2:4c:c4:29:ca:e3:e8:f1:fb:4c:ee:00:aa:c7:
b1:29:a9:4d:7d:cd:43:7d:97:78:08:0e:78:41:be:5d:a7:24:
d8:b4:5e:e3:73:59:0c:9f:e1:62:cc:8a:51:67:be:a8:93:a3:
17:61:65:4a:95:7a:4b:86:73:a3:53:90:9d:9f:b8:c8:06:66:
99:cf:4c:55:f4:23:bc:7e:55:e1:be:c2:0a:f0:7f:a8:bb:c8:
48:61:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:27 2026 by rpki-client