Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: mLiQ0OMjlNHq6OsAXuXUy81/cUKsipdSXWKrOChxvok=
Subject key identifier: FE:A0:F3:35:94:E5:52:03:DA:CE:D1:17:6A:99:41:18:C0:7E:1D:60
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019F93924C529FC09414606E01FBC591A195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0F9F
Signing time: Fri 24 Jul 2026 10:01:06 +0000
Manifest this update: Fri 24 Jul 2026 10:01:06 +0000
Manifest next update: Sat 25 Jul 2026 10:01:06 +0000
Files and hashes: 1: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (hash: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80=)
2: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: ibA9Y0FEXyxtPJG0YpTkH3OGJOg21O3RmGUO7FMyxbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:4c:52:9f:c0:94:14:60:6e:01:fb:c5:91:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jul 24 10:01:06 2026 GMT
Not After : Jul 25 10:01:06 2026 GMT
Subject: CN=fea0f33594e55203daced1176a994118c07e1d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:fb:e5:17:36:f0:09:34:1f:53:3b:48:56:
13:1e:59:e7:be:76:7b:0d:20:92:36:9b:1f:b4:a1:
7f:0d:5d:37:7a:5f:14:a8:f9:2b:ae:57:7c:1c:fc:
23:f7:0a:af:6a:5f:ec:14:90:6f:cc:ac:c2:85:f6:
63:e5:bf:ef:09:8e:3b:85:1a:6f:17:e7:cc:33:38:
f0:d5:d7:ad:08:3c:70:9f:31:a0:5e:04:a4:69:1e:
00:1a:c3:81:25:4e:c6:61:bc:a6:2d:4b:28:36:c3:
ca:10:3e:95:52:d7:57:f2:28:8d:06:76:63:f3:da:
f3:8c:99:b8:a9:75:7f:f6:98:f6:43:5b:21:0a:33:
d7:c1:45:f5:07:b5:96:7e:db:a8:16:44:0e:9b:2c:
7d:3e:91:0f:f2:b5:1e:23:a8:e1:9d:65:83:3b:00:
49:14:ac:76:15:ba:b3:40:55:98:92:3a:8a:b2:f4:
ab:6e:03:6c:3d:90:3e:1e:36:6d:39:8f:19:b4:66:
89:60:6e:ee:c6:fb:bc:9f:4c:b5:ab:99:c3:2c:db:
9a:fb:b2:23:8d:39:ed:34:da:d6:59:ef:18:fe:01:
e3:4f:34:62:e6:3f:79:38:3f:dd:18:75:61:8f:2b:
46:7b:1f:2c:57:5e:e1:da:08:00:6b:21:9c:ae:ba:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:F3:35:94:E5:52:03:DA:CE:D1:17:6A:99:41:18:C0:7E:1D:60
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:7a:8e:bf:32:fe:be:cd:6d:86:3d:6f:a6:13:71:d8:47:
1d:3a:b6:e7:34:9a:5f:ff:48:12:ae:3b:d7:53:a8:cd:3e:5f:
3c:db:e9:2e:d9:93:e8:bc:50:45:b5:6d:8e:95:86:80:e0:d8:
c6:ce:53:e6:bd:c7:33:bb:9f:a3:4a:72:30:1a:ba:10:4b:34:
8e:ed:6a:2b:f1:54:e5:de:bb:67:00:38:ae:55:88:f1:cd:b7:
fe:fe:b2:21:2f:ca:25:04:f6:ff:f3:b6:09:e6:e5:d8:6f:d3:
e1:67:42:f5:83:f0:8e:14:0c:8e:35:54:aa:3f:8e:10:c8:81:
b6:61:91:50:56:3a:a2:0f:73:f1:d6:1f:ad:d4:31:e8:f9:7c:
61:2f:6e:f0:69:74:c2:00:a3:83:5f:33:dc:09:a5:de:3a:47:
0f:a5:42:c4:f2:36:a7:79:69:97:9f:59:62:38:4e:39:c1:e3:
a7:e6:69:e1:f2:5a:62:08:f7:d0:11:72:19:b0:a9:40:22:3e:
84:c6:bd:7c:5c:40:38:07:65:87:ea:b3:9a:13:fc:56:a6:a2:
c9:4c:34:c6:cc:56:01:73:20:ea:a2:cd:d3:05:70:75:a1:ec:
b6:81:d9:bb:bb:1a:09:33:4c:c7:89:1c:05:0e:1d:1f:d4:a3:
aa:b3:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:45 2026 by rpki-client