Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: xp6hX6DWcsUudfupGugrQXayhLxpYW+V5ItbVIDptBg=
Subject key identifier: 47:01:25:E1:AC:FB:31:5C:4D:E7:E5:FF:8E:B0:58:0C:D0:11:44:07
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019D25BA01223BE3A808D31634C0CB962069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: LgQ6UFBw4/gv29pVQmVNyTLm8YzAxlVcyz7kW0RNgAw=)
2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:01:22:3b:e3:a8:08:d3:16:34:c0:cb:96:20:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=470125e1acfb315c4de7e5ff8eb0580cd0114407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:b7:b7:85:d5:5d:93:fd:bd:da:f6:19:9d:
d5:57:a1:53:58:08:e9:2a:6d:a8:de:c1:f7:2f:ed:
d1:f6:d7:39:91:c2:d7:26:0b:1a:20:21:f2:b9:47:
0b:1b:5b:26:99:ef:76:74:22:cc:68:67:83:01:c2:
c6:bf:5e:b9:44:29:fe:88:41:78:30:b8:cb:41:4c:
32:b7:3c:ac:d7:6a:e6:b9:5b:12:0b:67:fa:3c:e8:
f4:24:0d:03:92:90:56:c3:b3:ce:54:4c:8e:3a:f4:
46:9b:d0:05:7f:8f:99:68:26:3b:fc:5a:bd:89:ef:
08:9e:07:4d:cc:c8:d3:e0:49:a7:d7:90:68:a1:06:
ec:d8:9d:9c:1d:d9:0e:2b:31:10:36:cc:2a:c3:b4:
64:56:15:60:ba:99:11:04:9a:85:c0:dc:2d:7b:09:
43:15:bf:fe:87:c8:a0:04:13:0f:ea:ce:36:4c:65:
a8:08:5c:8c:78:eb:b9:ad:90:f6:85:ec:98:bf:1a:
7c:79:af:32:5a:33:6c:c0:96:d3:cb:47:49:1f:6a:
b7:b4:de:f6:bc:10:3a:b4:44:8f:25:75:d1:34:2e:
e7:43:f6:a7:86:2c:51:bd:77:eb:0e:c8:02:a9:b0:
bd:bc:b3:cd:43:68:03:7a:89:bb:6d:b6:da:de:a4:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:25:E1:AC:FB:31:5C:4D:E7:E5:FF:8E:B0:58:0C:D0:11:44:07
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:03:ac:95:86:6c:d2:d8:03:c9:5b:bc:43:98:77:61:0c:
62:8b:64:b9:75:bb:28:2a:ad:c6:fb:13:21:f6:63:55:30:0f:
fc:c8:db:ff:21:19:7b:81:e9:4f:d5:d0:c8:a3:7d:a0:91:76:
7c:41:55:b6:f0:53:31:b2:c6:82:4c:de:5a:4a:47:12:d5:eb:
64:88:59:ba:6e:be:1b:c3:13:e4:be:19:d3:62:48:69:7a:a8:
b3:a9:52:c5:e4:02:11:8e:58:94:4a:f2:20:7c:3b:2c:ef:25:
0b:4b:9b:22:73:b5:66:0a:c6:df:c5:1f:da:84:68:b9:07:ec:
64:4f:78:ab:33:96:ef:7b:59:71:ca:5d:36:67:10:df:d5:b9:
cf:e7:22:4a:9d:40:48:74:d9:23:a4:c6:84:7b:8d:28:28:69:
aa:05:e3:a0:1e:10:d4:6f:4e:39:48:e2:b6:22:77:42:f4:22:
b1:02:ef:5d:8a:8d:41:67:98:67:9c:59:ca:c1:ec:1d:5e:32:
69:01:e7:2a:11:1c:ec:38:e4:d6:9d:10:ba:aa:93:73:94:5f:
a7:6d:75:2f:82:7d:99:13:4c:47:24:2f:6b:a1:ef:d0:fd:c5:
36:cc:1a:63:b0:9f:3a:93:cd:eb:7d:b9:c0:be:a9:58:f5:e5:
73:27:8c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lugEiO+OoCNMWNMDLliBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz
NTBjNWYwHhcNMjYwMzI1MTYwMDQwWhcNMjYwMzI2MTYwMDQwWjAzMTEwLwYDVQQD
Eyg0NzAxMjVlMWFjZmIzMTVjNGRlN2U1ZmY4ZWIwNTgwY2QwMTE0NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9O3t4XVXZP9vdr2GZ3VV6FTWAjp
Km2o3sH3L+3R9tc5kcLXJgsaICHyuUcLG1smme92dCLMaGeDAcLGv165RCn+iEF4
MLjLQUwytzys12rmuVsSC2f6POj0JA0DkpBWw7POVEyOOvRGm9AFf4+ZaCY7/Fq9
ie8IngdNzMjT4Emn15BooQbs2J2cHdkOKzEQNswqw7RkVhVgupkRBJqFwNwtewlD
Fb/+h8igBBMP6s42TGWoCFyMeOu5rZD2heyYvxp8ea8yWjNswJbTy0dJH2q3tN72
vBA6tESPJXXRNC7nQ/anhixRvXfrDsgCqbC9vLPNQ2gDeom7bbba3qQ7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcBJeGs+zFcTefl/46wWAzQEUQHMB8GA1UdIwQY
MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt
ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0
LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIYDrJWG
bNLYA8lbvEOYd2EMYotkuXW7KCqtxvsTIfZjVTAP/Mjb/yEZe4HpT9XQyKN9oJF2
fEFVtvBTMbLGgkzeWkpHEtXrZIhZum6+G8MT5L4Z02JIaXqos6lSxeQCEY5YlEry
IHw7LO8lC0ubInO1ZgrG38Uf2oRouQfsZE94qzOW73tZccpdNmcQ39W5z+ciSp1A
SHTZI6TGhHuNKChpqgXjoB4Q1G9OOUjitiJ3QvQisQLvXYqNQWeYZ5xZysHsHV4y
aQHnKhEc7Djk1p0QuqqTc5Rfp211L4J9mRNMRyQva6Hv0P3FNswaY7CfOpPN6325
wL6pWPXlcyeMmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:57 2026 by rpki-client