Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: NyWYnq7m1VUT+S6TpvUaxv9WlOZMoF04hmlXkh4HuAk=
Subject key identifier: 45:AC:A3:E1:73:EC:23:15:6D:75:F8:F9:6A:EC:7C:B0:FA:E1:4F:A5
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 019FA14E36CC1B800A7EFBEBB1DD94D5D535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 012A
Signing time: Mon 27 Jul 2026 02:01:25 +0000
Manifest this update: Mon 27 Jul 2026 02:01:25 +0000
Manifest next update: Tue 28 Jul 2026 02:01:25 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: VvjbUPQlYMaObuBG584pgmDmAhji8enrw7KAEb8fg3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:36:cc:1b:80:0a:7e:fb:eb:b1:dd:94:d5:d5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Jul 27 02:01:25 2026 GMT
Not After : Jul 28 02:01:25 2026 GMT
Subject: CN=45aca3e173ec23156d75f8f96aec7cb0fae14fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:78:0e:f4:95:84:48:a6:bc:c2:0f:14:8b:
6d:ec:77:e2:89:91:31:d9:1b:2e:cc:5c:f6:22:27:
e4:64:cb:2e:1f:46:9c:d4:fe:16:5b:5c:cc:05:08:
02:c5:ac:b2:41:57:49:cb:4d:63:91:6e:e9:46:ef:
8b:54:80:8d:c1:20:b3:09:15:87:ba:e8:ae:91:f8:
bc:73:c7:c9:6d:f1:07:28:99:82:a4:4e:c4:27:04:
62:c4:a1:ac:aa:20:3e:0e:42:9f:ad:71:5e:fb:7a:
5e:60:e2:10:38:2b:6b:07:4d:d7:e0:ff:d9:8c:e2:
af:a1:da:f4:e0:46:f4:78:25:01:9b:43:79:87:fc:
f1:2b:ff:07:64:b2:46:75:5f:b2:c6:c3:91:50:f7:
93:a9:fb:3c:00:82:a4:16:1b:17:2e:e8:27:8e:6f:
dc:aa:81:fb:49:cb:86:e0:da:12:96:1b:ca:a7:95:
2e:fc:01:9b:1d:90:1d:31:13:d5:f7:61:ca:27:d9:
20:73:36:3e:33:6c:0a:10:08:af:1b:7c:06:2a:e4:
71:53:54:07:e6:65:13:34:af:09:36:f6:e0:33:d0:
8e:96:22:89:70:16:a0:48:bd:72:d7:d7:ef:ae:8c:
08:0c:08:00:2c:04:d1:19:3f:d3:da:de:06:5e:8a:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:A3:E1:73:EC:23:15:6D:75:F8:F9:6A:EC:7C:B0:FA:E1:4F:A5
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1b:f3:c7:6a:09:56:7f:d7:e5:e8:bb:40:5e:38:5f:df:f0:
f5:69:ca:66:b8:0d:26:e0:0d:b4:5e:54:2f:a4:7d:40:7b:44:
51:87:8c:b4:df:87:36:c2:97:b0:f2:0e:d9:44:cd:60:a9:48:
52:e7:23:1a:af:a2:6b:fe:82:b0:54:0a:f3:c7:3f:42:6c:25:
aa:2f:f6:ef:13:48:93:5b:49:6f:22:55:66:43:e9:e5:58:9f:
40:18:f6:16:0e:8a:e4:e7:25:2b:a7:e1:82:43:28:d9:d8:c2:
e7:a4:ef:20:bd:3e:f2:46:f6:2f:c1:18:c7:fd:0b:62:ff:a2:
87:02:aa:ae:04:bc:02:6e:11:f2:30:7b:98:54:91:fe:6d:8a:
4b:1f:e3:0e:b5:8c:44:5d:16:b7:64:48:08:a1:c6:de:b0:b8:
a7:3e:a4:fd:88:de:c7:06:68:78:ef:05:13:e3:44:52:ac:2f:
5d:6e:2d:41:d7:86:e4:f1:7d:ea:02:ef:b4:cf:80:fe:2f:05:
a9:ee:98:15:08:47:c3:48:71:29:92:61:24:c0:a6:f9:e7:7d:
58:26:e8:80:f1:b9:4f:17:e7:76:79:55:a4:69:b9:f4:0a:7b:
ee:d8:c5:aa:3b:c3:64:a7:d4:e3:1b:7e:49:69:11:f5:a0:ff:
d0:52:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:37:01 2026 by rpki-client