Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: Kh21cF9iDCCcCQiadCPbqLCgyPTsdbKWIFeSR6MRsJw=
Subject key identifier: C7:1E:AB:68:F1:FA:5B:55:65:C7:44:B4:A2:EE:4D:ED:A6:ED:1F:14
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019D3865A1AF67D176907776EF09AAE4CE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0504
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (hash: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: USTjvVqebXVvffh1OClFxgWs50xqz2bQd1dWoBHeXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a1:af:67:d1:76:90:77:76:ef:09:aa:e4:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=c71eab68f1fa5b5565c744b4a2ee4deda6ed1f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:3b:43:63:5f:73:b9:c9:8d:8e:5d:bf:32:
bc:fa:6c:db:a2:0c:fa:a9:96:ac:59:18:17:da:fd:
77:88:df:2a:63:4f:de:c4:af:14:8c:b0:a8:46:17:
c2:84:0c:e9:91:92:52:3a:c4:a1:89:39:58:9a:7d:
a0:74:9a:48:ac:7f:6d:e8:50:03:4e:50:d9:45:38:
b8:ca:ce:98:e0:ab:6e:d3:41:27:ce:5f:5c:7b:d7:
b4:c8:e6:1e:5d:45:53:5d:e1:7a:66:be:81:2e:7f:
b6:1f:13:24:85:81:52:85:42:d3:09:98:65:ed:43:
8d:7e:45:40:b3:38:32:34:b3:d4:a3:34:be:7b:09:
c3:5b:4b:8d:4d:a7:74:df:a7:f0:90:c4:26:37:5b:
e8:0e:09:8e:49:94:a3:b9:a5:b7:84:c9:96:ed:31:
f5:4f:54:df:47:b0:02:e6:df:1b:55:ea:90:f7:40:
bb:77:27:e6:5e:7d:32:ad:36:bc:94:35:7e:18:65:
dd:df:ce:11:aa:e9:dc:88:66:53:45:17:ef:64:b9:
65:4c:71:1f:71:af:37:c8:60:43:e7:31:46:aa:d1:
24:d5:0a:0d:a0:e8:6a:1c:81:3f:fd:30:7a:df:dd:
bb:90:04:0b:cf:a3:36:c2:40:dc:c1:82:3c:10:71:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1E:AB:68:F1:FA:5B:55:65:C7:44:B4:A2:EE:4D:ED:A6:ED:1F:14
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3e:39:bb:fe:87:2a:33:dc:f0:aa:7e:2f:36:be:dc:75:24:
7c:bd:22:44:2e:23:16:9e:75:65:c9:32:c6:af:24:44:1f:82:
58:f4:a3:5e:74:26:35:ef:de:27:7d:8a:0a:44:df:f7:d0:46:
12:d8:11:01:ef:c6:f7:97:b0:c6:48:dd:e1:b5:89:cd:76:1d:
4b:ca:d7:6b:2b:6d:92:9e:ba:6c:ca:62:e9:31:c1:32:47:58:
14:e5:85:0d:a5:61:0b:df:b1:0f:2b:52:00:31:b0:32:84:39:
02:23:d1:c5:3a:43:98:88:56:14:e1:11:ed:6d:1f:fd:d1:8d:
84:76:e1:11:7f:f1:a3:81:36:5c:45:19:36:aa:17:cc:41:71:
28:89:1b:22:20:7b:d4:01:f0:45:fc:f9:bf:6d:84:05:ab:5b:
7d:e9:fc:20:a3:89:e5:ae:62:16:e6:59:e8:3b:95:6e:dc:45:
14:f7:ba:28:9e:a4:65:af:96:94:ad:23:16:cb:63:78:72:e2:
a8:ba:0e:19:e2:4d:1e:91:21:11:86:ae:bc:cf:55:58:48:72:
33:9f:bd:d6:b9:61:a5:22:40:e4:b2:f8:0e:59:c1:31:0f:2c:
47:ab:9f:77:dc:00:db:7e:0a:47:9b:7a:ba:cc:3c:54:9e:4c:
4f:52:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:15 2026 by rpki-client