Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: +lKbWJANkHbunDHbJBx3z/aahnX6AYS++AOxyge1urk=
Subject key identifier: DB:0A:D2:90:0A:2F:E9:15:E8:0F:92:F6:1D:75:D2:1A:8B:BE:B3:CE
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 01A1710106B84ECF418A52F14DA28D5E0DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1ABD
Signing time: Sun 25 Oct 2026 03:00:54 +0000
Manifest this update: Sun 25 Oct 2026 03:00:54 +0000
Manifest next update: Mon 26 Oct 2026 03:00:54 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: WRb2iCECLx0Nmv/x/WgywKiCAqG0bA0S8qDtcWUpPgE=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:01:06:b8:4e:cf:41:8a:52:f1:4d:a2:8d:5e:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Oct 25 03:00:54 2026 GMT
Not After : Oct 26 03:00:54 2026 GMT
Subject: CN=db0ad2900a2fe915e80f92f61d75d21a8bbeb3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:39:8f:30:f2:f3:62:c6:4a:b0:53:23:3b:
ca:7b:59:3e:18:40:3f:54:32:b8:39:5f:6b:0a:a0:
0b:b7:29:70:94:c8:24:c3:e8:be:87:a8:d2:fe:72:
a9:cc:16:d3:e1:a2:6c:b8:69:e5:dd:87:17:a1:ad:
db:2b:21:36:62:4e:0c:7a:f6:db:ab:69:80:a3:4d:
94:05:2f:67:22:77:24:e9:ad:e8:f2:90:d4:83:f1:
7b:31:1b:04:83:6b:ed:72:6e:c6:5f:4a:3f:12:71:
fb:0c:2b:3e:5e:a7:b4:e4:d9:d5:ea:e9:95:03:eb:
ac:87:7f:99:48:d6:e2:3c:1e:61:a1:89:c2:40:46:
ef:19:4c:fc:01:41:50:32:46:cd:9d:a7:47:01:de:
2b:59:bd:f4:1a:86:fa:4b:42:73:7e:b6:2a:be:64:
da:1a:aa:6f:20:e3:0f:30:6b:e4:ac:d8:ad:02:7b:
4b:5a:71:c1:9d:ba:12:54:3c:10:7a:75:a9:61:40:
e0:3d:4e:33:73:55:96:85:df:8a:df:61:43:85:bb:
22:4f:72:9a:29:e4:93:e0:c6:e7:32:cc:97:63:99:
ad:09:e6:b5:8a:dc:3f:43:d1:d4:fb:84:b7:5b:42:
67:f7:e9:e2:a3:ec:73:d7:7e:26:e8:0f:98:57:3c:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:D2:90:0A:2F:E9:15:E8:0F:92:F6:1D:75:D2:1A:8B:BE:B3:CE
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:04:43:01:a9:45:8e:69:ea:7b:36:2b:4b:9c:2f:ac:4e:
b5:dd:06:91:b7:0b:55:42:8d:ab:97:d8:00:b7:20:a9:14:b1:
db:f9:24:48:bc:fb:15:f8:17:46:98:8b:d0:c0:77:77:af:a1:
f0:6b:99:73:a1:c9:00:9a:d6:70:19:b8:3f:00:2f:a1:05:c5:
90:af:d7:ff:02:a0:cd:4c:51:c0:4a:75:e5:94:83:67:e8:e5:
51:f0:9b:09:75:9c:d6:3e:63:79:99:39:df:d5:fd:84:d1:6b:
99:1d:6d:e3:33:1f:30:84:4e:9a:dc:72:67:30:53:1d:06:63:
bb:90:18:f2:4f:c0:b5:5f:5d:5d:8e:77:6c:ce:fe:71:8d:94:
b0:fb:5b:38:88:cf:37:e6:86:2e:66:c4:49:4d:ba:08:8b:33:
98:36:f8:d4:47:0e:35:d2:c4:d0:eb:94:f5:96:d9:20:0e:97:
7c:a4:47:61:ef:31:db:65:d7:d7:63:45:14:ac:df:bc:a0:ce:
47:02:4a:71:bb:a0:d3:62:67:50:23:e7:a8:68:0f:d0:65:95:
16:4d:b0:c4:7b:95:12:16:d1:53:e1:9f:dd:fe:79:7a:2c:c1:
6b:e2:0d:4c:a4:66:35:72:27:7c:2e:71:5f:f5:04:75:8c:20:
36:cc:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:16:56 2026 by rpki-client