Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
File: ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft (raw, json)
Hash identifier: 5yw8Wddb0NAEY9eZUEIgyXwAmk4vRfRpnNjm2193SWA=
Subject key identifier: FF:63:9B:DE:C5:01:B8:2A:6A:57:AC:41:82:0B:6E:B2:A4:AD:31:00
Authority key identifier: A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37
Certificate issuer: /CN=a2174318cfafe755f183a97fb7b957abeef53f37
Certificate serial: 019D265F560BAC5C7484F99C2F377A53AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
Manifest number: 7F
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: ME8J3_Lqo4Jl0Qlw0Go-W9n_fhc.roa (hash: f3hV7y2bBKIVX1QPsIDsCNThmNsZM2K60scI4YyAfLw=)
2: ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl (hash: altGcKRlySgRtCL8xCoBhiMlYQWJWzk561EC0eb1VSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:56:0b:ac:5c:74:84:f9:9c:2f:37:7a:53:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2174318cfafe755f183a97fb7b957abeef53f37
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=ff639bdec501b82a6a57ac41820b6eb2a4ad3100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:2e:67:82:c2:32:fc:58:36:21:c4:6f:06:
ab:a2:d0:f4:00:07:13:61:f2:32:64:10:7b:eb:48:
08:9d:67:34:46:4e:b9:12:8b:8b:cc:79:2d:42:e7:
19:04:40:71:d4:aa:88:3c:6f:b6:95:3a:a7:c7:82:
f3:ed:67:11:86:62:94:9f:1d:7d:48:32:39:6f:88:
23:5f:43:73:2e:1a:23:0b:7b:8d:e0:5e:d1:74:72:
30:c7:20:af:63:24:3d:19:a9:fa:f1:c0:39:21:1a:
35:06:bf:4f:c5:75:96:f1:d2:69:7d:d8:90:36:2a:
75:bf:c7:07:af:27:a6:2b:14:bb:f8:58:87:15:06:
ff:25:f1:80:52:6e:62:9e:81:6a:46:69:89:24:7e:
0e:67:ee:45:d2:96:b5:0c:87:4d:1c:e2:d7:e0:af:
04:c1:62:c0:66:ad:22:47:db:1e:37:bc:4a:96:6c:
4c:d1:2b:26:8c:7f:e5:cc:7f:9f:34:0f:50:e0:34:
7b:ca:85:ad:d7:3b:74:ca:91:78:c3:37:40:30:33:
c0:8c:56:35:09:fd:d0:4a:9a:67:14:04:82:70:69:
5f:df:33:82:36:c5:87:81:a3:d1:ba:46:11:27:23:
18:29:cc:1d:b4:2d:33:b5:a2:1c:d9:3d:35:81:9d:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:9B:DE:C5:01:B8:2A:6A:57:AC:41:82:0B:6E:B2:A4:AD:31:00
X509v3 Authority Key Identifier:
keyid:A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:47:19:e3:86:ce:f9:1f:84:a1:f1:20:6f:3a:bc:ed:41:9b:
b5:83:15:04:ce:02:19:e0:1a:72:08:ba:6e:a7:96:84:90:bd:
2d:68:fe:52:26:9e:c9:31:30:d9:0f:72:63:f3:eb:87:c9:52:
da:3a:21:28:b8:47:7c:56:8b:6f:da:06:62:d8:c5:97:d4:55:
fb:20:2f:f7:6c:bc:ab:be:27:34:12:6b:42:84:17:f9:21:9f:
42:45:01:af:14:8d:29:8d:be:3c:83:b7:19:5d:b9:4d:30:b3:
81:29:ad:a5:46:21:c0:f8:29:2c:ed:4d:8e:9c:34:6f:d6:b8:
d7:50:b0:40:fa:6d:0d:e6:94:e6:39:46:ee:01:82:3f:5f:23:
73:fd:2b:7e:63:96:ca:12:b8:d9:3b:36:3f:e4:ce:7a:26:a2:
1f:2c:f9:eb:ec:48:72:11:ed:d2:b1:b1:d8:60:b5:e4:de:e6:
9c:3f:36:60:cc:98:a9:72:d3:0c:e2:d8:dc:78:16:57:66:7e:
00:e9:44:62:0d:32:7d:86:b6:ad:40:84:5f:43:d2:04:18:c7:
20:2e:33:a0:32:9c:65:8f:4a:1b:69:ff:8c:24:92:ba:c5:df:
7b:59:3e:3f:fd:3c:6a:83:9f:15:1c:07:bc:7d:5c:87:49:6e:
d6:6f:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:47 2026 by rpki-client