Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: Mv3/gEH2DqlS/TCdK45X+dC69InHce7CU5nPOjxM4aU=
Subject key identifier: DD:96:4F:0C:7E:8E:DD:0E:6C:F8:9B:08:EB:0F:62:9E:AC:18:9B:12
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 019D33079F91154FDA4AFCC7990F800186F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 1230
Signing time: Sat 28 Mar 2026 06:00:30 +0000
Manifest this update: Sat 28 Mar 2026 06:00:30 +0000
Manifest next update: Sun 29 Mar 2026 06:00:30 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: /BfSUo7b3zrkRLQ/PPYSU9iKS+DkLJ01NLQpKGkSClI=)
2: opgto3lf-uASZpY1UQFHGbhOzeU.roa (hash: 3TR6BeZ5ansPG9ZOYBmWYTVEtFBiV31qgxyOFhIhE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:9f:91:15:4f:da:4a:fc:c7:99:0f:80:01:86:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Mar 28 06:00:30 2026 GMT
Not After : Mar 29 06:00:30 2026 GMT
Subject: CN=dd964f0c7e8edd0e6cf89b08eb0f629eac189b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:0b:d0:86:68:18:f8:28:3b:23:06:c4:1d:
90:40:0c:ca:35:3d:b8:59:7e:ee:e6:11:00:bd:34:
8c:6b:3b:1e:24:2c:49:5f:68:4d:38:13:5f:b1:2a:
85:37:8f:ab:38:66:59:08:6a:97:dd:34:1f:91:a3:
34:2d:f1:41:93:b4:d6:e2:0f:43:7d:0a:dc:38:46:
45:81:1a:bc:f6:6b:95:84:e4:8c:44:2a:cc:99:b1:
e6:79:1b:f2:db:b3:0d:56:2a:ff:cb:6e:19:7a:69:
fc:3f:b0:de:4c:98:62:2a:94:f2:72:55:6d:d0:0a:
1c:4a:44:2a:dc:88:ef:8f:0f:37:25:ae:16:4a:f1:
ad:05:53:3f:59:2c:4e:9b:9e:a8:ff:36:df:98:e4:
b6:16:ff:eb:d0:e8:11:5e:cb:93:b9:6c:ab:2c:ee:
34:50:94:43:21:eb:7d:d4:af:32:a0:57:7d:47:5a:
dd:44:0c:4b:0d:b3:a3:a9:38:ab:5c:14:66:45:37:
41:c0:cf:d1:35:ae:93:a3:38:9f:bf:2d:b0:e1:f6:
3d:ac:8e:4e:aa:10:42:d9:98:2a:a5:79:31:ce:f8:
6d:b4:9a:4a:a5:90:ba:31:e6:21:1d:ff:af:85:cb:
45:d2:fe:c4:a9:f9:90:3e:17:36:52:4a:85:0d:a4:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:4F:0C:7E:8E:DD:0E:6C:F8:9B:08:EB:0F:62:9E:AC:18:9B:12
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:84:39:e1:ff:e9:94:63:54:4c:6e:81:9a:cd:6e:76:6f:
b8:02:89:d0:73:20:e6:8e:70:25:f2:35:70:0c:b0:04:29:14:
1c:a5:22:95:1b:ae:1a:77:9d:93:81:d5:fa:fb:61:8f:2e:c4:
58:12:bd:9f:a7:37:5c:c9:86:9f:e7:fa:c1:0a:7b:94:f8:66:
3e:69:06:4d:37:16:2d:4d:4d:d1:ef:92:d1:06:6e:ac:17:0e:
16:52:e6:ab:96:ae:fa:8d:a5:88:ac:f7:68:08:5b:0a:21:a8:
21:b8:48:f7:da:8c:be:a8:8b:27:71:58:70:56:53:15:48:f5:
ae:95:c3:49:18:c7:65:a8:fd:ad:cf:31:fd:28:d4:05:e6:0a:
35:56:5d:96:cd:ab:8a:84:0b:f2:f2:16:5a:8f:e7:c7:58:77:
97:66:1e:77:72:05:8b:51:fa:20:9c:68:53:81:83:f4:9e:ab:
9d:67:df:be:5a:b2:f9:65:d3:4d:36:89:b3:3e:78:78:23:db:
23:0c:17:41:67:b8:22:1a:4e:c2:d2:c9:8f:7f:25:29:bf:af:
4b:35:a3:a5:ff:69:ab:ca:3d:d8:67:1c:b0:1d:80:37:6f:b2:
7d:7a:d5:e9:21:fd:b1:b7:58:46:90:59:e7:30:87:97:a0:3d:
fa:09:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:25 2026 by rpki-client