Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: nMRauk0ghQDmyu8VvYH0QekIFw99azAroKRcPnxzovU=
Subject key identifier: AF:5C:AE:49:C4:D5:FA:A0:40:E5:82:17:62:79:18:C0:E2:C5:F7:62
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019F9323CB4D9ABA4C7E6AF756D86C8E701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 18B2
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: 5MR+WyDo24s9AipIQd/5ZZ06WMZo17AxWU8RGD1QyyQ=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cb:4d:9a:ba:4c:7e:6a:f7:56:d8:6c:8e:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=af5cae49c4d5faa040e58217627918c0e2c5f762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:b0:c0:19:77:f0:21:60:2e:5e:a0:61:20:
42:56:11:60:76:7f:e1:07:ba:1b:c5:a9:fc:ff:c1:
21:6c:0e:12:de:47:b9:7a:2c:71:01:9c:b4:62:26:
f4:18:01:1b:26:32:4f:4e:34:d9:db:e3:53:84:37:
d0:0b:63:73:04:c4:ee:d6:37:6d:0a:0c:cf:37:a5:
b5:94:12:7d:fb:b8:9e:7b:22:30:81:85:0c:48:ef:
ef:20:83:4c:e8:cb:cf:6a:eb:d1:c9:83:95:b8:7b:
60:e3:26:f0:04:9e:18:7e:82:ca:9c:65:c9:c1:ac:
81:1b:5b:46:4c:5c:85:9c:fa:84:37:e2:dc:5f:3a:
9b:47:4a:5c:a7:71:58:88:a3:67:ba:27:f0:f6:b0:
b4:a9:a4:2c:1c:39:34:ca:39:dd:7b:91:30:0d:30:
39:2f:ec:b7:be:33:24:de:68:0e:c4:7a:d4:45:17:
45:4a:8d:d3:f9:b0:96:50:78:31:3a:fe:eb:4e:9c:
97:8b:01:8a:ea:64:08:40:bb:4c:dd:f4:ec:1a:4c:
5c:e2:5b:ba:8f:7f:15:2e:e5:7a:6c:03:22:ce:83:
aa:93:f8:ed:e1:ef:a0:dc:ae:27:c9:ed:ba:56:fc:
3d:db:7b:37:df:46:94:84:23:bb:28:56:7d:bb:a3:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:AE:49:C4:D5:FA:A0:40:E5:82:17:62:79:18:C0:E2:C5:F7:62
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:2c:14:ec:df:ec:a5:8d:55:27:95:36:a2:90:21:c1:1b:
a3:f7:b8:c5:34:05:02:dc:2a:57:2f:69:5f:d9:f6:b8:52:10:
1a:85:28:48:9c:fa:4e:c0:bf:8d:74:70:80:cb:82:65:b5:12:
b8:af:47:90:cb:24:e2:52:dd:a4:d8:42:ca:a5:99:3b:15:ad:
0b:8f:c9:59:c8:b9:34:15:a5:5c:cf:81:54:49:78:51:73:68:
f3:fd:d5:ec:dc:c0:8e:0e:e6:2a:92:04:84:eb:f2:1f:13:47:
fc:64:ea:28:ff:1f:31:6b:c4:19:ad:26:ca:b7:18:ed:26:9b:
04:c7:7a:e3:44:95:a7:31:6b:f8:0d:4a:43:04:51:93:4e:5c:
f7:d4:f2:9a:ea:59:00:53:2a:bd:97:dd:8f:e6:29:e5:7d:c0:
21:92:84:4f:16:ca:d1:16:c0:89:a4:0b:b4:bf:ee:f2:59:aa:
50:dc:0d:d9:56:8e:23:ef:72:45:6c:21:96:99:b4:99:06:a9:
5d:47:d7:b4:7b:e1:41:ec:92:1b:98:2e:a3:ef:7c:0f:4a:16:
37:e8:54:b8:f4:10:88:22:4a:f6:c0:25:45:a9:d6:93:b7:6e:
c2:ba:c3:af:de:a4:99:d2:ec:21:71:69:60:4b:7f:ca:df:a0:
e8:05:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:25 2026 by rpki-client