Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: 4DAg4sbTInez9fcXtY+5mohug4fgtIf2nwycaRTPzgo=
Subject key identifier: 45:E9:09:E9:A4:0C:77:FF:C0:4E:5E:74:D5:1B:9A:88:BC:1E:1A:67
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 01A1084A88CFFAD5706D8E7F28DE400D0EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 1060
Signing time: Sun 04 Oct 2026 19:01:04 +0000
Manifest this update: Sun 04 Oct 2026 19:01:04 +0000
Manifest next update: Mon 05 Oct 2026 19:01:04 +0000
Files and hashes: 1: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (hash: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80=)
2: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: k0NMZK4uCE6YJl8m3zptdTusvTkMmsYqZHcnX/NkSxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:88:cf:fa:d5:70:6d:8e:7f:28:de:40:0d:0e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Oct 4 19:01:04 2026 GMT
Not After : Oct 5 19:01:04 2026 GMT
Subject: CN=45e909e9a40c77ffc04e5e74d51b9a88bc1e1a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:ee:28:9d:e7:d3:a1:78:f2:9e:d7:aa:e3:
4e:0a:e9:30:54:b8:8f:1d:5e:20:7e:8c:fa:21:eb:
1a:33:9e:e3:16:d5:52:23:c4:dc:b8:5b:da:8f:b3:
b8:5b:f5:80:93:ef:76:a1:a2:72:e8:1c:20:68:54:
98:71:4c:3c:13:b6:0c:b7:73:0a:90:81:e3:2b:5d:
30:6b:38:c4:1c:38:e8:18:37:08:cc:b6:a6:1c:e8:
e7:33:97:a0:1d:4c:b5:8c:f7:8a:9b:cc:60:da:16:
3a:bc:3b:7a:9a:78:48:f1:6c:40:aa:34:6e:75:7a:
ed:a4:e8:c2:82:98:1d:e1:6a:16:aa:ae:6e:d5:f7:
5f:87:ea:54:11:54:d2:f2:06:9b:3c:bd:df:a6:37:
2d:a5:ec:d8:98:df:58:92:13:7e:70:86:6a:2a:01:
29:e1:d3:b3:7e:3a:a3:7e:fc:54:73:01:9e:b4:64:
0b:3b:e8:68:24:e1:45:71:ca:b9:89:29:5c:f5:3c:
e4:89:8f:f3:66:71:97:41:e6:a2:60:3c:d3:78:97:
94:ac:18:c6:71:1b:ff:8d:5d:34:a7:a5:a3:f5:21:
3e:d7:2d:7f:76:9e:84:92:2c:df:b2:cc:43:60:5c:
0b:bf:41:b1:2a:74:e0:8d:21:88:99:13:eb:a3:7b:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:09:E9:A4:0C:77:FF:C0:4E:5E:74:D5:1B:9A:88:BC:1E:1A:67
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:c4:bc:ea:13:e0:4a:a1:d4:86:5e:65:b1:36:06:1c:1c:
e8:f2:52:1b:4a:3d:c9:41:32:bf:2e:6b:d8:b3:2c:4f:87:c3:
33:44:c8:32:62:1c:85:b1:6e:e0:9a:9d:b8:91:b3:f5:a1:c7:
f8:95:60:15:62:6f:e8:04:0a:a4:51:16:e9:3c:11:41:b5:3b:
17:5e:7e:8d:30:a1:4d:7c:e0:51:b1:84:64:1e:d9:5a:87:b3:
25:f0:d8:aa:96:f1:e4:c7:20:4c:9f:1a:ee:b9:63:6c:af:48:
66:5a:57:38:1f:34:0d:13:2f:9a:33:d8:cb:39:7d:c1:02:16:
b5:23:2e:d5:42:99:24:c4:67:e5:da:1e:bc:65:85:2a:e1:d2:
a8:d5:64:f6:6f:a6:95:e0:fb:aa:ea:87:84:a8:18:54:1d:d2:
fb:cb:58:9b:46:cf:60:b6:85:14:87:0b:60:ba:30:44:18:40:
14:8e:6c:71:7e:27:7d:a1:a1:18:d4:64:af:7f:d2:77:fe:7e:
7a:5f:26:25:e0:35:0c:e1:d7:8c:2b:0e:26:22:b6:e3:54:99:
26:fc:88:c8:12:ba:a5:d9:0a:a8:71:32:8a:67:72:8f:e2:43:
98:50:09:eb:8a:b1:ef:b3:68:92:8e:2d:5a:90:9b:0e:a8:68:
7d:fc:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:11:35 2026 by rpki-client