Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: Tx+EueXGIdCAPvYn31zgLtYdiAN0fnwlWDaArWDLSGg=
Subject key identifier: A6:2C:8C:08:60:A6:EF:8E:0F:42:ED:A6:DA:36:3D:4A:9A:17:9B:64
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 019D38D3022E13EBCAF3F2392CA3E551F8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 1233
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: 9BYZzpiXShlmoW3WiFAez7FSreGz/4yIaaa4KPT3ZWI=)
2: opgto3lf-uASZpY1UQFHGbhOzeU.roa (hash: 3TR6BeZ5ansPG9ZOYBmWYTVEtFBiV31qgxyOFhIhE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:2e:13:eb:ca:f3:f2:39:2c:a3:e5:51:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=a62c8c0860a6ef8e0f42eda6da363d4a9a179b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:22:6e:12:46:1e:a4:6d:f3:12:8d:0d:de:
a3:de:a0:36:87:3b:7a:0e:09:35:02:da:c4:3c:4d:
06:a3:14:f2:49:58:94:62:a1:0f:25:80:7b:7b:51:
53:72:59:d1:dc:4c:5d:c0:1c:33:e8:a1:0c:cf:6a:
72:92:23:57:95:61:5d:c2:95:ab:03:d2:57:38:51:
45:4e:2f:3e:1d:5c:a0:0a:31:fd:d4:3c:e2:e8:9b:
8d:cf:e4:52:95:f6:8e:e1:90:a2:f8:bf:b6:59:c6:
15:b9:05:9f:a8:5e:94:5b:f2:c8:39:0d:80:1f:b9:
26:6f:26:3d:13:6e:dc:1f:fb:39:51:3e:51:55:9a:
59:1d:ff:e1:43:ca:db:71:44:70:4a:08:5a:db:a6:
df:b2:30:7e:a9:85:c2:9c:cf:cf:40:32:67:a9:68:
d8:91:95:90:e7:39:ce:5c:4f:7a:90:e1:6b:12:d1:
f8:e9:e7:87:db:32:c9:0c:f3:41:24:24:ef:31:f9:
5c:f2:27:86:1b:31:42:65:bf:fc:29:d3:e9:6c:db:
f6:85:de:cb:8b:b4:d4:cc:30:a3:94:7b:28:07:83:
58:ba:82:c5:ab:7a:a7:9f:88:e7:b7:cb:da:6c:03:
3a:49:98:22:c8:54:94:c3:32:85:25:cc:6b:18:76:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:8C:08:60:A6:EF:8E:0F:42:ED:A6:DA:36:3D:4A:9A:17:9B:64
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:bf:f7:b8:b7:d9:ee:56:74:f6:c8:36:30:15:e3:82:3d:
63:ae:f3:69:8b:2f:d8:06:0d:31:3d:ff:13:31:68:e0:f4:24:
bb:e7:8a:7e:e2:7d:fb:88:1b:2f:e3:f8:ee:be:b4:34:b5:6d:
f3:20:4d:8e:9c:11:60:5c:27:07:ac:66:a1:14:21:cd:d2:e3:
7e:4c:76:4b:7c:de:3e:98:05:a6:d4:70:77:1e:07:dc:bb:93:
f9:e3:22:38:90:d4:46:92:bb:82:da:9f:f1:67:b0:c7:aa:21:
89:b1:51:b1:c3:b0:da:4d:ff:ee:40:33:ed:de:11:8f:68:d5:
37:af:55:01:59:26:ce:6e:ed:d8:31:47:18:c6:26:f4:cb:8e:
c8:ca:ca:ee:57:45:f2:43:01:bd:f2:f6:fc:b7:7e:a7:0d:7e:
9f:6b:d5:52:4e:f2:a3:12:d8:0d:e7:37:32:08:9b:f8:80:fc:
40:10:65:3b:61:73:bf:ef:08:71:d7:8f:dc:b3:f9:cd:4e:ab:
09:2c:48:56:65:99:94:57:52:4e:b8:d1:d3:95:9f:75:e8:f8:
f2:fb:e1:ac:53:6a:9b:ee:4b:83:18:a1:db:e6:fd:4a:33:75:
ee:c3:3a:90:a4:a1:00:43:f2:76:d1:7f:30:c9:52:2b:6c:98:
66:db:c1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wIuE+vK8/I5LKPlUfjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5
OWEyOGYwHhcNMjYwMzI5MDkwMDQ1WhcNMjYwMzMwMDkwMDQ1WjAzMTEwLwYDVQQD
EyhhNjJjOGMwODYwYTZlZjhlMGY0MmVkYTZkYTM2M2Q0YTlhMTc5YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww8ibhJGHqRt8xKNDd6j3qA2hzt6
Dgk1AtrEPE0GoxTySViUYqEPJYB7e1FTclnR3ExdwBwz6KEMz2pykiNXlWFdwpWr
A9JXOFFFTi8+HVygCjH91Dzi6JuNz+RSlfaO4ZCi+L+2WcYVuQWfqF6UW/LIOQ2A
H7kmbyY9E27cH/s5UT5RVZpZHf/hQ8rbcURwSgha26bfsjB+qYXCnM/PQDJnqWjY
kZWQ5znOXE96kOFrEtH46eeH2zLJDPNBJCTvMflc8ieGGzFCZb/8KdPpbNv2hd7L
i7TUzDCjlHsoB4NYuoLFq3qnn4jnt8vabAM6SZgiyFSUwzKFJcxrGHYG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYsjAhgpu+OD0Ltpto2PUqaF5tkMB8GA1UdIwQY
MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt
MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1
LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmW/97i3
2e5WdPbINjAV44I9Y67zaYsv2AYNMT3/EzFo4PQku+eKfuJ9+4gbL+P47r60NLVt
8yBNjpwRYFwnB6xmoRQhzdLjfkx2S3zePpgFptRwdx4H3LuT+eMiOJDURpK7gtqf
8Wewx6ohibFRscOw2k3/7kAz7d4Rj2jVN69VAVkmzm7t2DFHGMYm9MuOyMrK7ldF
8kMBvfL2/Ld+pw1+n2vVUk7yoxLYDec3Mgib+ID8QBBlO2Fzv+8IcdeP3LP5zU6r
CSxIVmWZlFdSTrjR05Wfdej48vvhrFNqm+5Lgxih2+b9SjN17sM6kKShAEPydtF/
MMlSK2yYZtvBIw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:36 2026 by rpki-client