Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: Bk0Zz03XhGBgqK2eQ44hILRHwjE2EtpAJhoBggB54E4=
Subject key identifier: 5F:29:04:9D:48:B7:33:4C:0A:4D:D2:56:EA:88:5D:FC:66:7C:6E:C6
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019E205A34176EABC1201C0E7D057489F5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 17F2
Signing time: Wed 13 May 2026 08:00:42 +0000
Manifest this update: Wed 13 May 2026 08:00:42 +0000
Manifest next update: Thu 14 May 2026 08:00:42 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: u8b51y9/YUKVCKfTzdOKQKBYB3ASnwtMvZaI/Wn5DQc=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:34:17:6e:ab:c1:20:1c:0e:7d:05:74:89:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: May 13 08:00:42 2026 GMT
Not After : May 14 08:00:42 2026 GMT
Subject: CN=5f29049d48b7334c0a4dd256ea885dfc667c6ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:05:f6:48:1e:56:62:6b:bd:21:df:fe:a9:
43:ff:47:6b:8d:3c:47:e4:fd:94:25:cd:fe:a5:29:
0b:e0:cd:54:bf:49:42:37:59:9f:41:17:65:09:44:
e5:09:c9:b3:0a:f6:9c:87:88:21:72:f0:53:fb:60:
ff:56:42:02:e5:77:f9:1b:d2:fb:55:fa:76:b5:17:
14:ba:e2:8b:c4:f4:9b:6f:47:df:b8:96:f4:bc:de:
22:5b:f5:66:fb:87:eb:cf:c3:0d:fe:98:c0:49:55:
8d:d2:06:57:43:f5:c4:11:e1:f2:a9:ab:21:68:9d:
95:bf:41:b0:b0:e8:3a:54:97:6c:75:64:24:6e:a9:
b9:c5:b8:80:12:08:0f:1d:a1:57:5c:d2:3e:3b:26:
d5:81:28:89:dc:49:93:b4:fe:18:c9:5e:bb:9d:60:
ba:89:a7:83:c3:08:2b:19:3e:3f:e8:6a:49:ee:cd:
12:ca:b0:cd:34:e2:1e:f6:e8:6b:e9:81:e2:90:9a:
e0:f2:b7:d2:ad:64:1c:a3:98:08:0d:27:c1:eb:68:
00:33:0c:7b:0f:33:24:c3:a8:c1:11:22:13:92:df:
19:52:d5:76:d8:3b:6c:9a:c8:fe:4e:32:5d:fe:e7:
7e:04:3b:3b:7f:76:c9:bc:a9:db:7f:28:67:7a:0d:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:04:9D:48:B7:33:4C:0A:4D:D2:56:EA:88:5D:FC:66:7C:6E:C6
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:82:1b:b7:dc:71:9b:7c:43:61:05:f8:33:f5:d9:1f:86:94:
7f:ce:2f:45:5a:e5:02:dd:c3:3f:3a:04:b3:fd:83:08:de:d8:
ec:a5:27:d3:20:f6:b9:18:96:e1:78:3e:26:04:d8:5a:0b:bb:
68:75:46:84:ba:5b:f7:cc:66:6a:f3:72:fb:9f:a0:9b:47:e4:
c6:ba:cb:42:24:de:88:95:c1:e6:1c:66:ae:89:c0:84:d0:4e:
ce:92:16:a1:43:6e:93:a3:24:dd:34:e5:89:7f:f6:6b:b7:df:
20:1e:4f:77:cd:f6:84:d1:b1:c2:a3:e5:c0:d6:d4:02:b9:5a:
9e:23:05:82:ba:43:43:73:9f:59:09:77:ad:bf:d6:1a:80:3c:
bd:d2:e3:f0:4d:af:e1:fa:71:60:23:3f:84:4e:c9:61:32:d5:
e7:7e:d3:4b:aa:42:24:28:d9:11:62:5d:43:07:00:1e:b6:75:
d1:15:be:d2:69:16:8a:fe:27:9a:1e:af:ef:ad:a7:96:72:ec:
ed:e8:a9:40:88:a3:2c:8b:72:d5:f6:b1:84:b7:ed:d8:99:f6:
33:32:b0:59:5f:b6:ff:53:49:72:92:04:dc:e4:87:d2:b3:e7:
9f:c8:61:21:61:4a:de:ed:08:cb:00:53:93:b9:9d:47:9e:83:
84:a3:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:06 2026 by rpki-client