Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: sG5GlGAukBHkzAM7WnSEvgEez29AirtDO0Z3vCQyCs0=
Subject key identifier: C1:CE:05:A0:E1:9A:EE:03:31:A8:C3:86:D0:2B:0B:F9:D4:F5:0E:C6
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 019DCF7533240042CCB5C3456C3090E990BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 38
Signing time: Mon 27 Apr 2026 15:00:57 +0000
Manifest this update: Mon 27 Apr 2026 15:00:57 +0000
Manifest next update: Tue 28 Apr 2026 15:00:57 +0000
Files and hashes: 1: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: 6D/WYkriNKNV2lsIEg5zuGqs25PRQw+rV+gA+z2FKtE=)
2: uk5oJnqF0PODLJKkwCtzhu53pDE.roa (hash: 3F33zr53N9ca1op6IC6X2t9KJw98HAgichDRUnHN0LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:33:24:00:42:cc:b5:c3:45:6c:30:90:e9:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Apr 27 15:00:57 2026 GMT
Not After : Apr 28 15:00:57 2026 GMT
Subject: CN=c1ce05a0e19aee0331a8c386d02b0bf9d4f50ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:5e:0c:47:a0:cf:48:24:68:65:28:f5:02:
dc:4b:3a:50:b0:74:7f:a5:64:72:47:1d:dc:9e:00:
dc:11:12:e0:3c:28:e2:11:84:53:5e:9e:b6:bd:a7:
73:e6:b4:5d:dd:f0:33:88:fa:56:d6:8c:6f:a5:10:
ca:cb:26:f4:7a:6b:de:64:a3:09:8d:62:57:6c:ec:
f4:cf:3b:98:4e:ae:57:f8:56:af:0d:d5:4e:f5:ba:
38:89:10:65:9d:37:2c:97:60:74:b4:f2:95:7e:a2:
ef:52:fa:2c:ee:ab:61:93:69:51:57:9f:15:b1:18:
e1:ce:df:8d:4c:fa:cc:66:f1:7c:cb:11:9c:3d:f2:
4b:22:7f:3b:26:cc:30:5f:1a:bb:8b:58:6d:87:af:
21:ca:e7:01:28:fd:c8:04:2f:15:c9:92:f8:bd:d3:
c1:10:38:1f:8b:4f:52:4c:bf:66:97:cc:64:8d:cf:
2d:13:8c:10:19:45:48:4a:47:2e:30:55:ad:ee:e8:
0c:e3:f3:b8:b5:20:52:a8:0c:f2:29:73:ea:37:a0:
b5:0b:dc:d5:68:e2:61:81:25:d2:fd:1a:65:86:f5:
49:27:f9:fa:fd:09:71:1a:47:44:8a:60:75:d7:d0:
40:12:0a:7a:60:9a:0f:4b:3a:ed:39:dc:99:0e:c7:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CE:05:A0:E1:9A:EE:03:31:A8:C3:86:D0:2B:0B:F9:D4:F5:0E:C6
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:0e:29:47:f0:46:5b:7f:ca:35:66:0f:06:c1:3a:4b:77:
84:53:27:96:e3:1a:3f:2e:54:14:cb:3e:ca:3d:0c:cd:ae:e9:
98:f1:a4:0b:da:f3:82:52:6d:5a:b8:cd:fe:02:07:8c:98:13:
3c:78:c6:8c:85:e0:4b:b1:cd:9f:11:07:d4:91:f9:74:fa:cb:
a4:72:4a:1d:53:ed:55:b8:fb:90:7f:9d:69:68:c3:f9:20:33:
87:73:5b:08:45:85:80:6e:0a:7f:ba:86:ed:2e:be:24:6b:97:
d4:9f:e2:7b:19:bf:a7:1e:03:44:46:a1:2b:97:93:c4:44:7a:
7f:ce:3f:3a:5b:b8:2c:4d:ba:1f:10:5d:d2:d7:6b:5a:3d:ea:
f0:8c:e0:35:12:62:db:9b:18:c7:db:37:dc:0c:48:54:02:e5:
96:14:b7:4f:ee:10:d6:69:00:e9:43:27:81:fe:af:a1:f2:fc:
06:e7:45:88:50:33:32:73:38:ff:76:12:81:18:5c:fb:01:70:
84:35:d5:24:33:ee:71:07:be:80:aa:4d:88:cf:6f:0f:2f:3d:
f8:5f:05:9e:e1:74:56:1f:c9:c4:fa:42:1a:4e:d0:a8:57:ca:
6a:a4:66:80:69:df:07:d9:87:8c:72:d0:aa:73:58:bb:1d:aa:
88:41:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:04:08 2026 by rpki-client