
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File: OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier: pbBli/uCtIpAvbxjcnR1iHrFedQBXBDZ+osELk6jOO4=
Subject key identifier: DC:5A:C5:E5:E4:44:A0:59:81:7E:66:A4:FC:69:2D:2E:23:6B:6C:E4
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer: /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial: 019EB7A09BCE42C66B33AAC764FDFAE6F47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number: B1
Signing time: Thu 11 Jun 2026 17:00:16 +0000
Manifest this update: Thu 11 Jun 2026 17:00:16 +0000
Manifest next update: Fri 12 Jun 2026 17:00:16 +0000
Files and hashes: 1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: sJeEheDtYTtMsyTLZp9RZQ8MkAABzSw3INdw8sQaaJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:9b:ce:42:c6:6b:33:aa:c7:64:fd:fa:e6:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Validity
Not Before: Jun 11 17:00:16 2026 GMT
Not After : Jun 12 17:00:16 2026 GMT
Subject: CN=dc5ac5e5e444a059817e66a4fc692d2e236b6ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:88:53:4c:53:fc:85:12:69:d7:f1:de:ec:
c4:d0:f6:2f:9e:55:95:1a:e4:3b:fa:fb:17:31:5c:
87:ce:56:fe:ed:d3:58:30:1f:ad:0b:c3:7f:c1:3e:
2e:bc:41:be:7b:3a:02:ec:59:78:2f:45:d6:22:3c:
4b:14:e1:29:76:03:e9:0a:4f:5b:e9:6a:ca:b8:b0:
b4:9c:17:64:1e:9d:4c:d7:fa:64:fb:9d:92:ac:6e:
90:c7:0d:68:45:6f:06:0b:0f:bc:20:5f:c3:bb:6f:
fd:b3:49:af:95:bb:b6:57:68:d6:de:ac:27:36:15:
40:46:29:6c:d1:ac:3d:47:d6:fa:26:6b:71:7d:39:
27:bd:50:e6:7f:b2:d2:ef:00:5d:3a:9d:34:61:15:
d8:42:d9:2d:7c:86:18:96:f5:d4:e3:49:af:60:98:
72:ce:da:24:72:28:59:9c:d6:5f:c5:23:03:7f:83:
67:47:a7:e8:d4:20:71:b1:bf:66:2d:a1:7e:b4:38:
cc:dc:66:66:0f:f3:13:21:43:47:61:a6:d2:7d:c2:
ac:d8:4f:47:ff:e3:da:1e:a4:76:08:47:b7:47:78:
55:f7:87:9f:59:cb:b4:46:48:38:91:1f:33:31:57:
0d:24:c5:f9:c8:da:74:64:19:e3:c7:95:e7:5e:30:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:C5:E5:E4:44:A0:59:81:7E:66:A4:FC:69:2D:2E:23:6B:6C:E4
X509v3 Authority Key Identifier:
keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:b7:38:39:e0:2b:0f:86:7e:16:5e:3c:b4:59:5b:a3:cd:
9a:28:39:78:c9:46:46:74:fb:79:e7:fa:b2:d0:36:c4:63:3b:
51:6c:88:65:8c:95:4d:67:62:3a:69:c3:e1:de:37:1e:73:0f:
59:0a:3e:62:35:72:6f:46:bf:c7:8c:3f:69:00:f6:f8:32:91:
e3:d3:a0:70:92:3c:04:94:58:92:1b:07:47:60:04:73:9a:a9:
b2:25:5c:7d:f2:80:6b:3b:84:de:78:01:e5:1b:74:1c:e8:55:
b2:1b:e6:fd:14:6b:f5:14:cd:73:ed:e4:52:18:19:65:99:31:
30:a4:3a:56:23:b1:d8:6c:2f:df:45:e1:dc:e1:75:86:1e:4b:
c5:76:2e:3c:0c:df:33:8d:e2:95:35:52:4c:10:eb:fd:65:c2:
eb:43:3f:a9:f2:96:a0:dd:21:d1:d2:8e:5f:d5:d0:d3:d1:bb:
a6:d4:e3:24:51:96:7b:5a:d5:31:b2:c9:0a:c8:85:b6:18:c8:
48:dc:28:cb:6b:12:18:e9:45:9b:6d:95:74:1c:6b:75:9a:91:
61:71:c4:14:ab:47:15:02:fc:65:ed:28:c4:17:71:29:d7:8d:
37:22:c7:90:96:10:19:19:af:5f:b4:47:bb:4e:12:e5:c3:8a:
45:d5:8f:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oJvOQsZrM6rHZP365vR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTc4YmZmZTMwY2RiNjBlMTQ5MGQyZWE3ZTcxMmY0MDQ5
YmY5ZTUwHhcNMjYwNjExMTcwMDE2WhcNMjYwNjEyMTcwMDE2WjAzMTEwLwYDVQQD
EyhkYzVhYzVlNWU0NDRhMDU5ODE3ZTY2YTRmYzY5MmQyZTIzNmI2Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsiIU0xT/IUSadfx3uzE0PYvnlWV
GuQ7+vsXMVyHzlb+7dNYMB+tC8N/wT4uvEG+ezoC7Fl4L0XWIjxLFOEpdgPpCk9b
6WrKuLC0nBdkHp1M1/pk+52SrG6Qxw1oRW8GCw+8IF/Du2/9s0mvlbu2V2jW3qwn
NhVARils0aw9R9b6JmtxfTknvVDmf7LS7wBdOp00YRXYQtktfIYYlvXU40mvYJhy
ztokcihZnNZfxSMDf4NnR6fo1CBxsb9mLaF+tDjM3GZmD/MTIUNHYabSfcKs2E9H
/+PaHqR2CEe3R3hV94efWcu0Rkg4kR8zMVcNJMX5yNp0ZBnjx5XnXjBZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxaxeXkRKBZgX5mpPxpLS4ja2zkMB8GA1UdIwQY
MBaAFDoXi//jDNtg4UkNLqfnEvQEm/nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82Y2U3MGUtZmM1OC00MTU4LTk4NTIt
Y2FlMWIxODcxYTE2LzEvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82Y2U3MGUtZmM1OC00MTU4LTk4NTItY2FlMWIxODcxYTE2
LzEvT2hlTF8tTU0yMkRoU1EwdXAtY1M5QVNiLWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGe3ODng
Kw+GfhZePLRZW6PNmig5eMlGRnT7eef6stA2xGM7UWyIZYyVTWdiOmnD4d43HnMP
WQo+YjVyb0a/x4w/aQD2+DKR49OgcJI8BJRYkhsHR2AEc5qpsiVcffKAazuE3ngB
5Rt0HOhVshvm/RRr9RTNc+3kUhgZZZkxMKQ6ViOx2Gwv30Xh3OF1hh5LxXYuPAzf
M43ilTVSTBDr/WXC60M/qfKWoN0h0dKOX9XQ09G7ptTjJFGWe1rVMbLJCsiFthjI
SNwoy2sSGOlFm22VdBxrdZqRYXHEFKtHFQL8Ze0oxBdxKdeNNyLHkJYQGRmvX7RH
u04S5cOKRdWP2Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:07 2026 by rpki-client