Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: +9xFF5msbYYIiVgkWmsJHsMBllheHBpy/zNFUGrzRcI=
Subject key identifier: D5:3C:3D:3E:72:0C:B3:62:0C:06:A3:63:BF:2F:4E:65:D8:82:74:D7
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 019F935B5BC574749FE5832695BFAF37D839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 136B
Signing time: Fri 24 Jul 2026 09:01:05 +0000
Manifest this update: Fri 24 Jul 2026 09:01:05 +0000
Manifest next update: Sat 25 Jul 2026 09:01:05 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: v+cCe5l7iDygzmWKP9xG4slqMzm0p5vSSWr2gWq4/BA=)
2: opgto3lf-uASZpY1UQFHGbhOzeU.roa (hash: 3TR6BeZ5ansPG9ZOYBmWYTVEtFBiV31qgxyOFhIhE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5b:c5:74:74:9f:e5:83:26:95:bf:af:37:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Jul 24 09:01:05 2026 GMT
Not After : Jul 25 09:01:05 2026 GMT
Subject: CN=d53c3d3e720cb3620c06a363bf2f4e65d88274d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:e6:44:a8:e1:3f:0d:60:fd:9b:9c:c9:ff:
5a:8e:fc:43:6c:32:36:85:3c:66:4e:47:e7:f3:0c:
72:03:21:74:9e:a0:83:bb:68:03:27:f7:25:97:1f:
a9:b7:46:74:ad:36:d3:97:ca:4b:3e:3f:96:98:d4:
e4:09:3b:a8:d0:b2:92:60:bf:44:0f:d3:7f:ab:78:
68:66:4b:9f:35:0f:e2:ac:da:01:ea:2a:2a:df:83:
fd:3a:08:e2:ac:8e:04:12:bb:1b:9c:ae:cf:9d:a3:
16:bf:02:51:42:d4:32:fc:8d:3a:02:d5:2c:db:1e:
fb:5e:56:2c:e1:60:a5:46:78:a3:3d:bc:7b:04:ef:
f8:6b:d5:f4:62:1c:c3:6e:20:67:30:b8:11:0b:70:
70:f7:e7:f6:71:20:a0:c2:44:b9:86:f0:77:74:9a:
b2:9b:31:4a:1e:04:a2:b2:a1:33:83:9b:3a:9d:4b:
43:c1:93:6a:73:2a:6f:1a:62:3c:48:c3:9c:60:17:
33:75:c6:2d:9c:e5:63:e5:77:ba:47:a0:a2:09:0e:
ee:3b:ac:32:96:9f:8d:79:bc:a6:a2:e8:58:6c:3a:
57:0d:c6:56:e1:df:5a:97:cd:8c:db:77:c2:fa:c1:
8c:86:8e:9a:b7:23:87:08:02:02:75:16:62:6b:e9:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:3D:3E:72:0C:B3:62:0C:06:A3:63:BF:2F:4E:65:D8:82:74:D7
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f1:ff:0f:03:95:75:4b:08:02:7d:24:57:88:3e:f1:f6:fd:
d2:31:1f:6d:db:84:1c:d3:d3:82:64:95:26:52:c8:4b:5b:73:
9f:e0:94:94:d5:94:16:2d:c0:c3:87:46:83:30:0c:43:fe:55:
4b:70:42:e4:bd:42:4e:d2:e7:28:a0:32:76:21:80:36:5e:f4:
73:ee:7c:ec:96:c8:45:9a:cb:4d:37:54:04:93:70:4d:11:e6:
9d:fe:66:66:72:31:7d:ca:33:cd:86:07:46:25:a0:93:63:24:
b5:fa:44:7e:cd:27:79:e3:29:4e:48:3e:2f:4b:ec:0c:1e:eb:
a6:5d:fb:a5:12:49:ae:4f:30:1c:28:70:af:68:6b:ff:c7:c9:
e2:88:1a:76:8b:32:4b:b9:a8:44:07:33:2b:b0:5f:df:c9:90:
7f:72:4a:09:e4:0c:08:aa:38:5f:de:a6:98:61:a2:7e:ae:0a:
5b:18:42:ae:9b:4a:56:3f:97:f5:3d:ad:52:1d:ec:3f:7b:d5:
46:57:b1:f4:3f:aa:46:fc:eb:b6:da:5f:59:76:d7:41:61:b0:
f8:76:a7:e9:44:1d:fa:f2:a4:ba:e6:de:4d:5d:4e:23:f4:14:
30:ce:58:e3:c0:bd:d8:ec:27:e7:e3:89:32:49:55:75:02:51:
92:39:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:18 2026 by rpki-client