Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: o1nBMac/XhQCPHEL7KAiKYWfCi0ynMRRUEo90iU9EeE=
Subject key identifier: 2C:E4:10:C2:FD:E7:91:8A:04:24:67:E5:96:70:19:8B:F8:ED:14:F6
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 01A1822B91741A91A6EF2BBEFA5740514FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 0223
Signing time: Wed 28 Oct 2026 11:00:55 +0000
Manifest this update: Wed 28 Oct 2026 11:00:55 +0000
Manifest next update: Thu 29 Oct 2026 11:00:55 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: dKPm2zOsMhxqtHm0hF9GMWMhPYS7ZKevzSxExyeLPVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:91:74:1a:91:a6:ef:2b:be:fa:57:40:51:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Oct 28 11:00:55 2026 GMT
Not After : Oct 29 11:00:55 2026 GMT
Subject: CN=2ce410c2fde7918a042467e59670198bf8ed14f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:78:94:ef:37:b1:47:de:7d:21:b5:c5:83:
f1:ca:ed:7e:07:99:3b:19:94:e0:03:4f:06:02:f2:
8c:8f:72:1d:84:ef:aa:08:74:58:33:9e:72:43:d8:
83:9e:9f:43:1b:3b:f1:d1:42:84:77:47:d0:59:40:
2e:87:70:9a:1e:92:6b:ab:29:6b:c2:54:5b:eb:95:
19:a5:72:bf:96:aa:63:f5:b6:7b:1d:55:af:c8:d7:
9c:46:f1:a4:70:22:ea:09:34:7c:40:ec:83:33:49:
8e:72:9d:38:d3:59:a0:37:fa:8c:ac:4b:9d:3b:67:
2b:73:41:a7:d1:61:7f:99:be:59:00:d3:dc:b4:55:
97:52:11:2f:af:e6:01:ff:3f:ff:69:30:7d:2e:e5:
f8:56:33:26:48:32:89:88:f3:e0:28:4d:cd:46:a1:
f4:f0:d3:21:16:15:80:22:89:f2:3d:aa:33:07:ce:
d9:c5:62:ad:55:e6:2a:42:fd:a7:b5:8f:bf:33:54:
ab:23:1a:ac:40:99:7f:bd:2b:cf:70:4b:58:70:cf:
f2:54:11:06:46:0f:61:29:54:3b:96:b7:aa:c8:8f:
8c:57:b4:87:12:68:a0:eb:5b:3d:f7:1c:0b:28:47:
8f:4f:44:e7:a8:23:01:0f:c8:47:32:7f:5e:46:2d:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:10:C2:FD:E7:91:8A:04:24:67:E5:96:70:19:8B:F8:ED:14:F6
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:51:39:69:9b:c5:a8:70:ef:1a:2a:06:45:10:bb:cf:3f:5d:
b0:b8:e9:7d:50:40:1b:3a:68:69:d6:91:6b:30:87:4e:45:96:
20:72:87:72:29:b4:d4:35:0e:3a:69:90:38:14:1b:c0:e1:c1:
b2:1d:99:0e:9c:ac:3c:71:bc:fc:34:51:34:bc:8f:64:e2:86:
0b:3a:de:97:89:04:06:b3:d6:56:4f:29:ca:10:4a:d6:c5:6c:
ae:49:1d:78:ea:a7:32:97:27:84:00:40:26:07:90:7f:0a:cf:
fc:88:23:56:30:bc:2d:0c:27:4f:f1:2b:42:28:96:f8:f3:93:
70:e2:db:c9:2c:df:da:aa:c7:c5:f4:e1:3a:67:e3:d4:70:bb:
5a:4d:c4:54:04:56:d1:b7:27:23:8e:8c:1f:ef:83:37:e2:97:
4d:f5:21:59:75:30:05:36:32:fb:18:84:4f:5c:a9:63:05:8f:
35:50:e3:f8:35:e5:17:74:3e:36:af:f8:13:8c:fb:d6:55:b8:
98:1b:e8:07:a9:24:26:f9:58:83:18:e5:33:24:16:cc:af:3c:
ad:b0:dc:94:8e:67:58:01:d0:84:e7:4a:7c:6d:75:e0:04:90:
33:f2:0a:01:a4:10:89:15:a4:13:84:97:d3:dc:34:e1:7b:06:
14:1d:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:10:49 2026 by rpki-client