Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: ost8toqp5oaH81Pipf9fcICj95tdeqo8J1hlB7xF8eA=
Subject key identifier: D6:9C:C9:4B:24:FD:50:E1:F4:D5:57:B2:23:D2:35:9A:B8:C7:1B:FA
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019D3977B8959325CFDE8CF2E1885EFAFEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 1258
Signing time: Sun 29 Mar 2026 12:00:40 +0000
Manifest this update: Sun 29 Mar 2026 12:00:40 +0000
Manifest next update: Mon 30 Mar 2026 12:00:40 +0000
Files and hashes: 1: THUvGSRSDdO8NyiSUs_kzMBgKSg.roa (hash: f2duUHB5LK8Of3Fa8X+WHnO6K86lhJ6HdId3wsUMfg8=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: rZqCJtEqYfXkrgOuCzdyYQFphPIOoQI4nP2+dHoYBhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b8:95:93:25:cf:de:8c:f2:e1:88:5e:fa:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Mar 29 12:00:40 2026 GMT
Not After : Mar 30 12:00:40 2026 GMT
Subject: CN=d69cc94b24fd50e1f4d557b223d2359ab8c71bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:0b:e0:83:29:41:6e:c4:6f:c8:e4:77:04:
c5:44:3f:58:53:0d:e2:ed:c5:c2:ea:31:ff:ee:82:
9b:2e:ae:cf:fa:e9:24:a9:da:8b:a1:67:c7:cf:39:
44:2a:a7:d2:fc:d7:dc:4e:c6:13:69:09:70:af:45:
7d:c9:cf:8b:19:86:3a:5b:41:58:f3:5b:7c:c2:5b:
7c:52:e1:04:b4:3c:1e:37:af:cb:3c:7a:9c:5f:96:
e1:b1:d2:30:19:7b:2c:f6:c1:2a:c2:e8:0e:a6:37:
76:ab:1b:31:1d:df:41:29:7e:d2:20:4b:98:6c:58:
bc:98:13:e1:f5:28:06:14:32:51:8a:a5:3f:0e:26:
40:05:eb:6c:7c:64:71:66:6d:e9:41:23:8c:b7:65:
7b:aa:f9:8a:fa:e1:5b:0f:19:29:64:59:0f:cf:56:
73:de:6f:86:1b:59:6c:b5:b5:28:30:31:e5:8e:8f:
1b:f4:4f:6e:22:0a:eb:6f:da:73:38:27:95:64:b6:
bd:ec:84:9f:85:ac:0e:72:51:1b:86:b7:4a:13:25:
27:a8:85:56:c9:5a:20:73:b8:19:20:98:9a:9a:0d:
49:d8:04:29:7e:09:da:27:ce:5b:91:fe:73:24:34:
40:e0:d4:b7:5f:ab:89:a2:3d:cf:53:20:ec:19:db:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9C:C9:4B:24:FD:50:E1:F4:D5:57:B2:23:D2:35:9A:B8:C7:1B:FA
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:6f:22:0c:ae:52:ae:5a:66:c3:35:0c:78:14:db:4c:da:
0d:53:b0:73:57:d8:f0:3b:3d:40:a7:2a:a0:10:5f:88:f7:a8:
52:38:81:30:af:49:c8:84:5f:da:9b:bc:24:f2:a5:b1:61:a7:
e2:d5:8b:d9:64:48:6c:0f:c9:26:93:c9:8f:a1:13:4f:32:e2:
58:84:2b:e3:4a:3b:83:77:25:db:6e:bc:1b:09:c4:90:27:3e:
fb:af:c4:b1:ab:e8:af:92:38:34:6b:6e:f5:93:19:92:15:4a:
23:02:8e:72:5e:9f:fe:08:34:d5:11:ed:c1:f9:09:ca:38:46:
dd:8e:07:db:cd:6b:3b:ac:d1:b0:d4:c0:00:d3:d7:1b:5c:cd:
fc:65:78:47:96:a1:91:3c:81:e6:6f:79:b5:9b:1f:ae:83:63:
49:22:6c:58:5d:b5:c1:e6:ea:85:7c:22:97:27:e4:76:bd:01:
51:9b:76:1f:e5:78:f6:f6:0b:b9:d6:11:70:cf:b1:c9:12:9f:
28:7f:47:d9:7f:89:00:24:20:33:85:f2:ee:80:2a:28:e1:ef:
bc:c8:4e:95:87:8f:a0:fc:95:31:30:7d:e2:56:54:ee:49:ee:
20:8d:7e:19:5d:61:c1:5d:2e:7e:d9:5b:7e:8f:d4:3c:60:0e:
d8:95:0c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7iVkyXP3ozy4Yhe+v66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk
NzhhOTgwHhcNMjYwMzI5MTIwMDQwWhcNMjYwMzMwMTIwMDQwWjAzMTEwLwYDVQQD
EyhkNjljYzk0YjI0ZmQ1MGUxZjRkNTU3YjIyM2QyMzU5YWI4YzcxYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sYL4IMpQW7Eb8jkdwTFRD9YUw3i
7cXC6jH/7oKbLq7P+ukkqdqLoWfHzzlEKqfS/NfcTsYTaQlwr0V9yc+LGYY6W0FY
81t8wlt8UuEEtDweN6/LPHqcX5bhsdIwGXss9sEqwugOpjd2qxsxHd9BKX7SIEuY
bFi8mBPh9SgGFDJRiqU/DiZABetsfGRxZm3pQSOMt2V7qvmK+uFbDxkpZFkPz1Zz
3m+GG1lstbUoMDHljo8b9E9uIgrrb9pzOCeVZLa97ISfhawOclEbhrdKEyUnqIVW
yVogc7gZIJiamg1J2AQpfgnaJ85bkf5zJDRA4NS3X6uJoj3PUyDsGdsfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNacyUsk/VDh9NVXsiPSNZq4xxv6MB8GA1UdIwQY
MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt
MGMxZjY5YjdhZWU3LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3
LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqJvIgyu
Uq5aZsM1DHgU20zaDVOwc1fY8Ds9QKcqoBBfiPeoUjiBMK9JyIRf2pu8JPKlsWGn
4tWL2WRIbA/JJpPJj6ETTzLiWIQr40o7g3cl2268GwnEkCc++6/Esavor5I4NGtu
9ZMZkhVKIwKOcl6f/gg01RHtwfkJyjhG3Y4H281rO6zRsNTAANPXG1zN/GV4R5ah
kTyB5m95tZsfroNjSSJsWF21webqhXwilyfkdr0BUZt2H+V49vYLudYRcM+xyRKf
KH9H2X+JACQgM4Xy7oAqKOHvvMhOlYePoPyVMTB94lZU7knuII1+GV1hwV0uftlb
fo/UPGAO2JUMYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:17 2026 by rpki-client