Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: J3YBX9ed0XKgd4wRetuwOqrP98l6wv5OSJ63yjpbENM=
Subject key identifier: 25:59:15:68:B0:25:83:05:4B:85:EA:B4:E0:F4:EB:15:41:74:99:83
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 019E2091239CAC5BAC5D9B09F0531DAB5C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 12AB
Signing time: Wed 13 May 2026 09:00:43 +0000
Manifest this update: Wed 13 May 2026 09:00:43 +0000
Manifest next update: Thu 14 May 2026 09:00:43 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: YT7IDI0OXXg0Y5Sp40ljt/PQx996+MVR+MOWFxkBQTI=)
2: opgto3lf-uASZpY1UQFHGbhOzeU.roa (hash: 3TR6BeZ5ansPG9ZOYBmWYTVEtFBiV31qgxyOFhIhE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:23:9c:ac:5b:ac:5d:9b:09:f0:53:1d:ab:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: May 13 09:00:43 2026 GMT
Not After : May 14 09:00:43 2026 GMT
Subject: CN=25591568b02583054b85eab4e0f4eb1541749983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:bf:76:ee:11:af:86:50:1c:8d:06:d6:ca:
ea:64:54:33:cd:70:68:5d:44:1b:51:fa:83:14:d6:
4b:b5:83:ed:f9:17:9a:a3:ba:9b:25:14:78:46:e4:
b8:f7:e4:76:d0:62:3b:4b:8a:fb:0c:8c:94:fd:c3:
b9:d5:02:02:af:fb:7a:06:93:fc:02:c7:2b:ed:14:
34:b0:f2:4c:79:e5:2e:27:4f:54:e4:6c:04:ed:3e:
fa:eb:82:19:5a:61:8e:62:ba:82:1e:6e:d6:92:42:
53:7d:ca:5e:b5:cd:49:b7:78:90:1a:4b:82:06:20:
59:ce:5b:84:0b:c1:bb:d6:5a:67:6e:f1:51:31:55:
2e:7d:dc:4e:8a:bf:47:1e:7b:de:69:87:d8:03:d8:
3f:dd:4d:e7:9c:ab:d4:83:83:8e:bc:49:61:2c:04:
85:8e:d2:5a:2a:c0:5d:7e:41:fd:fd:ca:75:89:5f:
2a:83:32:49:5e:2e:9d:2c:5b:2d:1c:cf:ed:67:7e:
8c:2d:26:35:38:19:83:ef:23:d0:89:4a:b7:f1:4e:
50:c0:be:06:56:84:9f:ae:1f:6f:78:03:69:20:e0:
05:31:0e:b4:a6:2a:bd:12:90:5f:c3:d7:fb:c2:d4:
5b:64:9e:ce:2c:81:a6:03:ed:4c:20:fe:8b:63:c1:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:15:68:B0:25:83:05:4B:85:EA:B4:E0:F4:EB:15:41:74:99:83
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:49:36:62:c2:e2:37:89:39:54:15:ff:44:5b:22:04:4d:5b:
2b:f9:2e:a3:db:2c:8d:c1:5a:e8:50:11:31:63:31:c6:8f:f3:
65:68:6f:03:4d:77:a5:4a:e7:fe:0a:49:85:fc:44:ae:a8:a3:
46:ba:21:67:01:ea:aa:f2:75:72:8a:b3:49:c2:3c:a9:21:c0:
0b:dc:3b:04:9d:f3:e4:a3:05:20:5b:77:78:dc:f7:92:48:44:
23:f9:54:1f:a6:72:2c:cf:9d:3a:4f:01:84:bd:55:c0:7b:b9:
14:e1:1e:31:18:55:b4:65:e0:b5:f9:d5:6a:00:a3:ed:7e:70:
54:b0:cf:f2:ca:74:2b:f2:74:9a:c1:89:2d:04:6a:0e:8d:d8:
75:c1:1b:30:4e:e3:2a:31:a2:5b:c6:78:e7:c8:5a:33:26:ab:
7e:c6:b3:d4:4a:2c:03:04:ac:b2:74:25:65:79:63:d7:38:dc:
42:54:57:64:ca:5a:3a:24:e6:3d:a1:9f:c2:e2:9b:c0:20:24:
d4:b5:34:f4:bf:5b:ef:0d:2e:87:67:22:5f:61:c2:52:27:42:
9a:dd:bb:1e:99:0e:9a:c0:6d:6c:66:4f:d4:13:ff:f8:87:72:
12:eb:b8:ae:b8:ab:91:4f:78:f1:a8:7b:2b:d3:30:b7:7d:de:
55:26:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:35 2026 by rpki-client