Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: WKxA8IErMeMIJzHYkXqonGu0YeyZgEhTf2wJvPnqCAY=
Subject key identifier: AE:E5:98:CF:AB:FF:F0:0F:6A:4B:0A:C7:1F:AB:13:E9:8D:64:C3:C7
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 01A0890C51E364412BC57CF707F8C38787D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: 01A2
Signing time: Thu 10 Sep 2026 02:01:21 +0000
Manifest this update: Thu 10 Sep 2026 02:01:21 +0000
Manifest next update: Fri 11 Sep 2026 02:01:21 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: Yy30epjvHU5UBJsqRyj9sUrv6Xji73P1d1mKlnlvkbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:51:e3:64:41:2b:c5:7c:f7:07:f8:c3:87:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Sep 10 02:01:21 2026 GMT
Not After : Sep 11 02:01:21 2026 GMT
Subject: CN=aee598cfabfff00f6a4b0ac71fab13e98d64c3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:a1:f1:4d:6d:26:85:42:ae:50:6f:78:7f:
dd:53:9c:72:e6:34:0b:40:29:0c:61:31:d9:c9:06:
da:d8:a4:44:36:dd:47:6e:a9:f0:bf:7a:60:db:c2:
5d:e9:de:6c:e4:85:f7:44:d0:87:3d:66:01:b4:6d:
3d:ae:e2:85:23:3e:4e:10:2b:82:4a:6f:68:69:0e:
70:45:71:95:fa:9b:c3:9d:2f:79:e1:8e:cb:2a:1e:
0a:94:41:1e:3e:74:06:e6:fc:82:84:11:1c:b7:c6:
28:cb:aa:48:a9:97:ad:2f:49:b5:f5:fd:01:63:4c:
79:c1:c0:f5:c4:f4:5e:f3:bf:95:39:75:1e:a2:31:
02:d3:da:e1:c7:a9:c6:60:d7:ae:26:7b:71:97:10:
15:57:ad:71:9a:07:ad:9a:2f:b3:2c:af:e6:c5:2f:
80:1f:f5:90:4c:71:e1:c2:1e:07:03:ef:28:00:b3:
fb:a9:05:7f:bc:2c:84:dd:25:d5:7d:fb:4d:06:74:
10:4d:07:cd:de:77:87:a2:df:f1:ec:bc:59:b3:6d:
df:aa:bc:73:e1:81:ec:ca:98:d1:0d:28:fe:22:65:
e2:e5:ab:43:61:af:c1:71:e1:78:ed:88:4c:6d:65:
b5:eb:ef:c5:50:61:22:be:d8:2d:41:13:5a:d0:8d:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:98:CF:AB:FF:F0:0F:6A:4B:0A:C7:1F:AB:13:E9:8D:64:C3:C7
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:35:a4:f1:05:da:c7:db:a0:de:84:72:c4:af:94:5c:92:c9:
94:f0:ab:30:45:d4:5f:a6:53:4f:7f:84:22:7a:c1:2c:e8:14:
88:b0:8b:28:90:20:c1:a7:33:36:74:45:86:d2:30:54:1e:56:
96:fd:28:ad:41:8f:32:a1:5f:fc:7f:8a:1a:77:38:7b:ee:fb:
8b:12:db:b7:79:ec:b4:9c:2f:e0:08:96:a9:31:f1:05:96:eb:
4e:94:30:46:d9:83:eb:19:aa:0d:7e:2a:25:2c:17:5d:c0:12:
e1:04:50:1f:28:81:46:86:cf:70:db:72:49:38:ad:da:5f:8b:
5f:cb:58:b8:9c:a4:3f:02:9e:0c:06:07:b0:f5:76:b2:7b:83:
e7:88:86:f3:ce:f7:75:21:c8:cf:04:c7:86:cb:93:4b:81:cd:
be:1d:38:98:5b:5f:4a:1e:15:39:c1:2f:c2:f9:c4:3a:b8:55:
34:03:23:53:de:61:93:bf:d2:b8:7f:9b:81:eb:3d:d7:29:62:
23:61:4e:f4:bf:9e:c6:15:2a:93:d6:92:d1:df:fe:fa:8a:93:
ad:cf:7c:4b:3b:2c:e9:70:cd:b5:06:38:cc:fe:4f:c2:8a:69:
c5:c0:3b:3a:7f:b1:05:43:1a:f3:c0:b9:72:51:af:c8:28:41:
77:06:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:59 2026 by rpki-client