Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: hyL75oJw0FlhY9/yZTd2lu69b61M0ugGdaZMDZpMf1Q=
Subject key identifier: C7:32:70:7B:2A:ED:5E:DB:8F:1D:5E:F1:3D:8B:68:9C:85:76:17:F5
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019D292979FD8CC23C97F0F758D50EA9E065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 1772
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: TI4ZD17GhtPjWt3LVLG1ful1TXD1gqy+ZWaYnYsORTU=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:79:fd:8c:c2:3c:97:f0:f7:58:d5:0e:a9:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=c732707b2aed5edb8f1d5ef13d8b689c857617f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:06:16:87:0a:5f:f6:a1:ae:65:a0:85:0a:
ca:48:9e:f9:02:d1:cf:8b:89:3c:a2:28:2a:d0:17:
25:67:f4:e6:af:cc:30:f7:b3:5b:6a:3b:f7:f0:63:
22:78:87:99:90:5e:de:52:74:73:df:62:fc:2e:a6:
fe:98:20:dd:e3:aa:ea:0a:37:fe:93:b1:ba:d1:1a:
3d:b0:a4:b9:17:1a:dd:8e:79:fa:86:80:71:2f:3e:
0a:c5:ca:cc:9e:23:e8:1c:5c:bd:a0:43:8d:59:0c:
52:f6:ff:a7:9e:10:de:7a:4c:79:10:a2:c8:81:01:
95:d8:47:98:1d:04:0b:41:4e:c8:f3:df:88:b2:27:
be:b6:c8:88:2e:91:c1:05:ab:9e:02:39:20:41:fd:
d2:0f:23:3a:f5:39:3d:76:06:d3:d3:34:bb:81:6e:
9a:d6:60:b4:d4:52:5a:cc:f3:c0:28:13:8e:c7:b5:
1a:18:70:20:34:2b:a1:ac:be:a8:e6:06:c7:77:97:
00:12:fe:83:65:aa:66:15:a6:93:44:22:9c:5c:2f:
99:b7:97:4a:46:bb:7a:39:c2:fd:73:49:f5:a7:ee:
75:2d:0f:3f:70:f1:bd:3c:85:d6:81:b0:af:a6:dd:
2b:30:d7:43:dd:e5:4b:28:63:2c:d8:5c:ae:21:3a:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:70:7B:2A:ED:5E:DB:8F:1D:5E:F1:3D:8B:68:9C:85:76:17:F5
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:41:31:7a:40:62:93:a0:4b:e9:a8:e7:ed:95:97:c4:77:
56:04:af:d0:b6:f8:93:bf:a3:71:44:01:38:9c:1a:a0:56:d6:
80:97:c3:22:a4:8d:9e:c7:07:3a:51:02:ce:8b:d3:7c:05:b9:
de:df:cb:a7:9b:9c:18:45:ad:71:71:51:ab:33:05:af:9a:ee:
eb:32:0f:62:22:c1:c8:86:d8:ae:3c:0d:99:69:b0:c2:68:f2:
6b:53:41:eb:e1:91:6f:e2:0e:c8:d5:33:ef:37:4a:80:51:f6:
39:74:d0:bc:af:e3:b6:33:7a:52:e9:42:0f:08:30:2a:93:76:
e4:01:17:ae:9e:24:b5:fe:b7:c4:c3:f5:f1:a4:2d:39:4a:35:
f6:be:54:bd:40:91:bf:56:9f:6d:e0:32:00:14:e1:f1:32:fa:
33:c6:53:26:f3:40:51:ea:da:3b:82:25:f9:0e:11:23:58:ca:
c3:c7:0f:62:b7:a7:47:c5:49:f1:16:ff:7e:f9:fa:81:4a:b3:
98:87:29:40:78:31:7d:e6:4b:8b:85:ca:bc:36:8c:6d:be:fe:
f5:fc:f8:05:ae:36:06:4a:d4:85:4f:0f:28:ef:a4:35:21:b4:
f5:58:3b:be:67:5a:94:a2:0f:34:dc:f6:d1:ae:7a:4d:e6:67:
b6:43:13:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXn9jMI8l/D3WNUOqeBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw
YTY1YjcwHhcNMjYwMzI2MDgwMTE3WhcNMjYwMzI3MDgwMTE3WjAzMTEwLwYDVQQD
EyhjNzMyNzA3YjJhZWQ1ZWRiOGYxZDVlZjEzZDhiNjg5Yzg1NzYxN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuagGFocKX/ahrmWghQrKSJ75AtHP
i4k8oigq0BclZ/Tmr8ww97Nbajv38GMieIeZkF7eUnRz32L8Lqb+mCDd46rqCjf+
k7G60Ro9sKS5Fxrdjnn6hoBxLz4KxcrMniPoHFy9oEONWQxS9v+nnhDeekx5EKLI
gQGV2EeYHQQLQU7I89+Isie+tsiILpHBBaueAjkgQf3SDyM69Tk9dgbT0zS7gW6a
1mC01FJazPPAKBOOx7UaGHAgNCuhrL6o5gbHd5cAEv6DZapmFaaTRCKcXC+Zt5dK
Rrt6OcL9c0n1p+51LQ8/cPG9PIXWgbCvpt0rMNdD3eVLKGMs2FyuITq+KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcycHsq7V7bjx1e8T2LaJyFdhf1MB8GA1UdIwQY
MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt
ZjhjZmEzM2Q2ODRlLzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl
LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZZBMXpA
YpOgS+mo5+2Vl8R3VgSv0Lb4k7+jcUQBOJwaoFbWgJfDIqSNnscHOlECzovTfAW5
3t/Lp5ucGEWtcXFRqzMFr5ru6zIPYiLByIbYrjwNmWmwwmjya1NB6+GRb+IOyNUz
7zdKgFH2OXTQvK/jtjN6UulCDwgwKpN25AEXrp4ktf63xMP18aQtOUo19r5UvUCR
v1afbeAyABTh8TL6M8ZTJvNAUeraO4Il+Q4RI1jKw8cPYrenR8VJ8Rb/fvn6gUqz
mIcpQHgxfeZLi4XKvDaMbb7+9fz4Ba42BkrUhU8PKO+kNSG09Vg7vmdalKIPNNz2
0a56TeZntkMTYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:42 2026 by rpki-client