Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
File: oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft (raw, json)
Hash identifier: xnKGadtygbHg3bg3ukxYrch/te4LhZ+Z8vDbBSV7wGo=
Subject key identifier: 76:5E:CE:AB:81:A6:67:D7:67:99:5D:42:DD:7F:42:A6:61:30:BC:B0
Authority key identifier: A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44
Certificate issuer: /CN=a21f99c3f4a96f6cb4134e9b9982a092f0600544
Certificate serial: 019D3865D2524C263CC66D5A4A4C4772E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl (hash: +qycpM0rHp0kafKuhOjmapOqRGihcLkvOdb8Tn5TQ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d2:52:4c:26:3c:c6:6d:5a:4a:4c:47:72:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21f99c3f4a96f6cb4134e9b9982a092f0600544
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=765eceab81a667d767995d42dd7f42a66130bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:4d:9a:5c:91:5f:fd:f2:40:bc:e1:6e:cc:
e3:5e:ef:f4:b5:5f:1b:1b:77:ca:09:86:eb:98:2c:
1e:50:bc:2c:cd:6c:6a:74:d2:1f:af:4f:fc:ef:1c:
eb:d7:69:aa:6e:aa:41:fe:6b:d0:e3:17:5c:88:18:
68:2c:5e:5f:fa:ae:91:d4:e4:c0:63:5e:5a:10:8c:
92:ca:6c:8e:57:72:48:24:9b:9c:da:35:58:56:af:
9a:f0:28:ad:b5:85:59:60:3a:ee:a1:83:a9:45:d4:
62:06:af:f5:d8:a1:e8:e1:55:77:b5:4a:14:3d:d9:
51:8f:ec:f8:5d:8a:79:ab:6a:1c:a1:6d:a5:dd:df:
1c:51:84:90:f8:12:b2:eb:f0:ca:4d:12:85:cc:ee:
3b:f6:2c:ab:d8:e5:3a:49:ca:d6:4b:fa:cc:8b:38:
e8:37:30:63:ab:40:d8:70:f4:e1:e8:0d:ce:29:df:
3c:01:33:2e:31:f6:c4:9b:a8:ef:3e:12:08:c4:4f:
ec:7b:8c:f3:db:22:78:c6:50:29:fe:0a:76:46:4b:
66:cf:63:ef:bb:54:85:88:35:c8:ef:93:bb:58:8a:
e6:e7:8b:86:c5:12:0f:df:f8:98:64:be:c3:d3:01:
ce:22:58:74:10:bb:a3:71:4e:05:de:54:10:ff:ae:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:CE:AB:81:A6:67:D7:67:99:5D:42:DD:7F:42:A6:61:30:BC:B0
X509v3 Authority Key Identifier:
keyid:A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:30:a8:c8:79:59:32:78:f5:17:8c:80:e9:2e:b0:85:96:44:
7b:3b:af:14:c6:1d:c7:d3:ca:cc:86:44:77:ea:ba:8a:9f:52:
e7:5b:7b:e3:f6:d1:17:db:90:ce:bd:c4:60:55:35:3d:6a:ca:
ea:ae:f7:9e:72:97:da:70:d0:f3:f4:00:5f:84:3f:c4:b0:84:
4d:49:8e:e0:d2:a3:67:f2:ca:99:98:2c:97:76:3b:41:32:6d:
24:27:d0:98:2c:48:53:c6:ff:52:64:cb:1b:65:2f:26:5c:c9:
9e:b0:42:c6:aa:1e:a4:c2:b7:e5:60:64:b2:50:4a:d4:03:ca:
43:b3:ae:da:aa:6e:2d:b7:e6:d0:06:4a:11:af:36:8c:20:09:
0f:a4:c1:93:bc:87:b1:d5:60:f8:d5:9b:38:24:fe:ce:ff:7f:
8e:62:7b:c0:bc:a0:1d:73:e5:fb:b5:de:00:1e:11:ed:78:96:
88:ba:d3:1b:0a:89:e7:58:a3:05:9f:43:96:a6:8e:05:c5:36:
e8:cb:01:9b:1a:7a:a4:f9:3e:49:56:18:2b:66:f8:36:01:06:
d3:39:c4:ed:cc:20:d1:93:1d:10:dc:50:89:ef:1e:01:b8:eb:
71:be:e7:f7:0c:70:28:76:c8:4b:1c:98:07:61:ac:a5:e3:d2:
fc:66:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:41 2026 by rpki-client