Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: 7dXbNWWnUyUc0WkCXn1U0fsQkWNmD9faTNsZzfalNWY=
Subject key identifier: B8:CA:0F:18:62:02:AA:D7:87:DF:E1:DF:EF:EF:CE:2C:59:CC:06:5D
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 01A1174F66508D51F9B5A2643D4716CE8941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 197B
Signing time: Wed 07 Oct 2026 17:00:41 +0000
Manifest this update: Wed 07 Oct 2026 17:00:41 +0000
Manifest next update: Thu 08 Oct 2026 17:00:41 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: fmAY6/6Tg17f+6yGoESgqKTtfa0A/vK2BQ6dJfK74hQ=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:66:50:8d:51:f9:b5:a2:64:3d:47:16:ce:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Oct 7 17:00:41 2026 GMT
Not After : Oct 8 17:00:41 2026 GMT
Subject: CN=b8ca0f186202aad787dfe1dfefefce2c59cc065d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:d1:51:7a:f6:c5:16:98:cf:81:c0:be:6b:
a5:6a:95:6d:bf:66:55:46:ad:08:03:26:bb:53:36:
8c:d7:87:ca:e6:63:84:ee:86:c1:69:d6:a0:89:c2:
ac:27:30:b2:e1:6d:33:f0:91:ae:4f:6a:54:72:ff:
1a:39:41:dd:9c:5c:26:44:a0:9c:2d:7e:0a:82:36:
15:29:fa:4a:5b:d5:fd:f5:6a:09:e2:e1:bb:c5:08:
50:34:f4:40:2c:e6:94:85:2b:30:48:52:20:64:18:
84:38:0e:f5:4c:80:07:94:db:22:a9:20:ae:81:d3:
09:09:10:e1:bb:e2:8a:34:bc:51:d3:0b:44:e8:05:
f6:0b:9c:c0:e1:89:9f:aa:a4:d3:65:7e:35:47:78:
5d:30:db:69:15:95:af:dd:33:9a:52:2a:d7:2e:b3:
83:02:25:2c:b6:b4:9c:e5:ab:2e:b8:3b:8b:b2:de:
b0:3d:06:8a:87:a6:39:fd:8c:fc:5b:d5:aa:d4:b1:
02:5d:df:4b:bf:f4:fb:40:35:38:d6:04:31:ac:dc:
74:c8:6a:53:0d:d8:a7:0f:c6:c7:28:db:6d:20:30:
2e:7d:60:0e:79:79:d1:45:3a:16:4c:06:c6:19:af:
f1:c0:2d:4a:52:8c:78:0c:e7:03:c9:d2:2a:36:87:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:0F:18:62:02:AA:D7:87:DF:E1:DF:EF:EF:CE:2C:59:CC:06:5D
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:7d:0c:50:b9:2a:e3:71:f2:18:0d:34:8d:0d:0c:62:0b:
3f:82:36:29:e1:4f:fa:41:08:fd:f4:cf:fb:49:50:98:6a:74:
65:f3:ce:fc:b8:63:69:3d:4b:78:31:60:ce:4a:f1:ca:6c:22:
14:1e:2e:f4:3e:5f:09:5e:f7:14:ee:ab:6c:6a:ef:77:59:e2:
23:7e:2e:81:85:a9:69:ea:d8:13:2b:eb:20:ef:6f:2e:95:3d:
0a:8c:94:73:70:bf:72:89:c4:4f:94:d7:e0:da:74:17:b4:60:
9f:08:1f:29:74:67:00:0d:81:4f:3d:70:93:86:25:7a:25:12:
b2:3a:7a:2e:27:30:21:37:a2:42:f6:37:51:5f:fd:93:bd:2c:
2f:2e:4a:b9:1b:82:9b:aa:ae:3b:7f:6c:a3:55:1d:81:54:3f:
4a:3a:ff:1b:3d:57:3d:2c:ac:f6:e6:6a:c8:9f:ce:a8:fb:f9:
01:93:a4:78:43:82:af:88:d2:72:68:49:67:4f:e2:17:cc:74:
3b:1d:e6:46:c9:36:59:6f:3d:4b:52:fb:e7:76:08:9d:62:d7:
01:7c:fd:e0:3b:76:ba:4a:62:59:98:50:14:a6:30:be:6b:0c:
41:61:f2:40:85:a7:6d:d7:fc:b8:ba:00:09:de:16:46:21:68:
80:52:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:17:12 2026 by rpki-client