Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: G3df2nk1nw9vCAKMqxke3TIhJDEjqKPn0Ur+bFyrkps=
Subject key identifier: 4F:D8:B6:FB:CE:BE:C3:C9:D9:5B:67:53:02:18:F8:35:0D:ED:D3:8F
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019DA3AEAAFA92DB537279114FA1659A7FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 03:00:26 +0000
Manifest this update: Sun 19 Apr 2026 03:00:26 +0000
Manifest next update: Mon 20 Apr 2026 03:00:26 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: DJqolSjiOD5euZweRsoDIWgadEr5rakHvbO0jkTKFcE=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:aa:fa:92:db:53:72:79:11:4f:a1:65:9a:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Apr 19 03:00:26 2026 GMT
Not After : Apr 20 03:00:26 2026 GMT
Subject: CN=4fd8b6fbcebec3c9d95b67530218f8350dedd38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:42:7a:0f:9c:ef:78:f5:af:2f:36:ee:bd:
5d:f2:84:f8:0c:35:04:48:35:39:4b:1d:84:46:c6:
f6:4a:e1:4f:0e:b6:1c:ed:fe:4e:ce:44:6c:9e:43:
ea:6b:d4:76:39:5f:d8:0b:54:0f:91:5a:a9:2e:67:
88:e0:b0:12:48:fb:60:b0:31:9f:94:8e:b4:e8:95:
9c:51:7e:22:15:f7:22:62:e3:5c:83:6f:9d:12:8c:
27:e1:7a:63:ef:0c:10:f2:d1:b6:17:e3:fb:e2:d7:
34:64:64:2f:50:17:e0:73:52:9f:40:cd:dd:c2:bc:
45:3e:05:e8:71:b5:cd:c6:e2:fd:e2:59:1c:12:4e:
91:01:ee:d6:c6:c6:59:04:3e:67:92:2d:02:58:ed:
43:b2:00:2d:3b:9e:81:a2:66:f7:34:b4:61:97:d4:
2c:b2:f0:b1:62:41:53:3b:47:d5:3d:6c:24:2e:61:
a6:a8:bf:47:6d:ce:68:0f:ae:45:ad:5f:b2:64:4a:
8d:99:de:e6:e6:78:51:5f:0f:dd:59:ff:34:0b:e6:
c6:09:70:9e:25:8f:12:26:b2:cb:81:bf:26:3f:02:
eb:65:b8:06:db:2c:c7:0c:bb:d8:ed:b5:f3:f3:d9:
6a:eb:7f:40:69:29:42:ff:66:ac:0e:5c:80:b2:91:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:B6:FB:CE:BE:C3:C9:D9:5B:67:53:02:18:F8:35:0D:ED:D3:8F
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:ec:da:ca:6f:8d:a5:28:61:98:90:5d:dd:99:b4:13:eb:
ca:ba:3b:22:d8:cd:cc:49:90:b5:d8:8a:ac:a2:7b:03:6b:70:
cb:af:03:91:0f:c7:10:54:91:b2:03:4a:e0:00:b9:e6:d6:79:
3a:0c:52:d2:0a:57:81:02:55:0e:79:fd:21:76:e7:78:fd:bd:
77:98:f7:ee:44:6a:45:b4:45:13:7b:82:af:30:7b:76:4e:81:
41:b9:95:04:45:7f:3a:86:77:72:1a:bf:c0:88:6d:96:04:3b:
75:60:98:56:d9:21:c9:0b:52:31:16:c5:2f:c9:8c:bd:0b:b7:
62:40:fc:ae:a5:e6:a1:9f:6d:42:82:90:8a:e9:c8:7a:8b:d4:
50:4a:0b:fd:71:7f:ae:2c:cb:18:9b:99:c4:e2:71:ff:d3:b2:
6e:02:44:9f:cb:e4:29:c8:83:d1:2a:c7:97:77:6e:cf:5a:48:
dd:82:db:83:9e:ae:4b:91:7e:98:8d:7a:77:2f:a7:5a:b2:e6:
af:07:29:92:fb:cd:13:65:1a:88:96:70:82:92:98:9e:0e:f9:
92:ea:4b:3a:1a:f4:ed:26:e7:8a:3a:5f:a2:f9:23:9e:76:df:
1b:04:42:09:de:15:f0:02:08:eb:35:7f:08:18:01:f2:60:32:
a7:81:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 07:00:18 2026 by rpki-client