Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: Ey5YQ4DWwHm63iWO0tW4f/FlhAgZ3wy5W6V5FeNN8hU=
Subject key identifier: C8:38:56:BD:C8:8E:4B:C4:17:B0:C4:08:4B:89:61:3D:64:65:D2:A5
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019CBA023039E52451302F8CF8A4586D69BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 184C
Signing time: Wed 04 Mar 2026 18:00:31 +0000
Manifest this update: Wed 04 Mar 2026 18:00:31 +0000
Manifest next update: Thu 05 Mar 2026 18:00:31 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: WPCXAky/q0E9XaNiDMIjfTcyg4gw9KKJykQ97Y2x4s4=)
2: tSSezEPk1zw4FHeAOjRajNErevI.roa (hash: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:30:39:e5:24:51:30:2f:8c:f8:a4:58:6d:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Mar 4 18:00:31 2026 GMT
Not After : Mar 5 18:00:31 2026 GMT
Subject: CN=c83856bdc88e4bc417b0c4084b89613d6465d2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:77:1a:38:77:4d:11:04:08:b5:66:4b:00:
97:2a:e0:c3:9b:80:7e:24:c3:20:bc:00:4e:b3:43:
82:7e:67:57:36:94:58:7a:9a:03:cd:42:8d:95:a7:
07:b8:92:0c:af:14:c8:b6:cd:d6:20:17:c0:a0:19:
ca:72:39:34:00:3e:07:a1:6c:fa:1c:b2:2f:41:e5:
13:93:d4:9a:9d:49:2e:e5:be:82:3b:e0:95:32:e9:
f2:84:a3:a2:d9:01:e8:0d:db:fb:c2:7e:b1:ae:9b:
3f:6c:c7:eb:c3:bc:2b:0e:68:67:f2:f6:3b:5d:4b:
1b:2c:09:18:3f:4a:a7:15:2e:1f:93:a3:ac:94:87:
62:0e:01:98:c7:74:cf:64:0b:59:30:6b:73:5d:d1:
92:6f:ff:92:14:23:1f:d0:55:94:f9:90:9f:9b:54:
85:b5:a3:74:ac:67:19:bf:41:1e:bc:94:7d:6a:e2:
ac:8a:52:5d:5b:1a:b4:90:8d:d9:c9:7a:17:cc:1d:
eb:2f:7b:bf:a9:22:14:4a:56:33:24:c4:58:bc:b2:
e0:35:4b:1c:88:86:bf:62:c1:18:62:4b:f6:fd:8f:
4d:7e:55:96:12:63:2a:3b:a3:ab:8f:3f:f6:b4:46:
15:ea:89:58:1d:63:99:03:16:f4:23:8f:c8:57:af:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:56:BD:C8:8E:4B:C4:17:B0:C4:08:4B:89:61:3D:64:65:D2:A5
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:cf:a4:b8:61:d4:bc:7b:6d:ef:fb:ee:d0:ac:4c:f8:20:90:
ee:a4:68:25:4f:37:dc:bd:da:1b:65:be:68:39:37:72:f5:65:
bf:a3:83:35:c5:62:b3:3d:e3:c0:9f:28:b5:af:28:c1:54:41:
0d:4c:2e:88:10:f0:9d:1e:33:fb:83:68:be:fc:e6:bb:de:f9:
21:67:64:39:51:2c:fa:e0:38:0c:08:9f:9d:78:45:59:6d:6c:
6f:4a:46:b9:e3:55:8b:3d:f7:45:04:10:ff:f6:18:2d:33:93:
b8:01:63:02:63:3c:d6:6a:72:ab:a9:0b:ad:ef:e1:7c:de:3f:
af:f9:d8:29:90:a1:5b:d0:88:e8:87:c8:4a:45:71:8f:aa:fe:
dd:96:39:d5:2a:1b:45:7a:27:24:12:a4:87:bf:cb:37:7d:7f:
a4:fa:63:14:18:15:29:67:a3:eb:67:fb:37:ce:e9:05:09:24:
5b:97:c6:b0:14:8b:fe:2b:5a:67:aa:c9:4a:dc:c9:df:ca:c5:
90:72:08:01:47:57:19:a4:71:53:cd:a7:f7:c6:35:40:18:8b:
cc:39:02:bd:da:fe:78:8d:fc:5c:11:6e:64:d2:a7:21:35:e7:
e5:45:fc:88:c0:f5:2f:0a:e5:86:c7:ae:53:f7:12:eb:eb:63:
cc:a2:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:09:15 2026 by rpki-client