Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: ht1HwCZ14ybgjCRwIY9Gi11YagU8GWrtfbwHabTr2oo=
Subject key identifier: D0:78:32:FF:74:DB:3D:AF:14:92:35:4D:27:C1:C0:20:D0:D7:0E:57
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019FA1168027CD0361E27E27A7CE82773EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0FA6
Signing time: Mon 27 Jul 2026 01:00:34 +0000
Manifest this update: Mon 27 Jul 2026 01:00:34 +0000
Manifest next update: Tue 28 Jul 2026 01:00:34 +0000
Files and hashes: 1: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (hash: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80=)
2: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: XRK6OWVKYEHN9tlt5uAR63hW07RkXXy17aX84fcM6fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:80:27:cd:03:61:e2:7e:27:a7:ce:82:77:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jul 27 01:00:34 2026 GMT
Not After : Jul 28 01:00:34 2026 GMT
Subject: CN=d07832ff74db3daf1492354d27c1c020d0d70e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:c6:2a:0c:fe:64:a4:92:ed:50:db:dc:f2:
8e:ff:80:90:fc:4e:40:cc:20:de:3e:53:ce:af:90:
e0:b7:47:4d:d8:52:4a:66:17:e7:c5:7d:b9:de:ec:
11:25:49:d5:5c:3d:45:7f:9b:6e:c0:a6:d4:51:74:
4b:17:bb:7c:6a:b0:a5:ce:27:b5:63:7f:9e:ae:60:
bf:4e:2c:4e:19:db:40:e3:6b:a9:86:e5:b2:33:75:
a8:cf:65:04:ef:95:fc:21:91:36:c3:82:96:41:ab:
36:ec:2f:02:3b:d0:59:a7:4e:51:59:18:a1:0c:18:
26:1c:9f:57:ad:c0:02:8d:96:ed:2e:7b:bc:9a:47:
73:a1:ce:79:97:98:3b:77:93:cf:78:57:66:9d:4d:
14:f0:12:06:6d:3d:f2:59:93:9f:0b:b6:e4:e4:6d:
ad:38:57:44:e5:be:2d:71:53:f7:3b:93:ac:a3:ee:
ef:c0:90:f6:f1:0a:f0:82:67:da:5e:84:99:28:32:
47:58:cc:a1:46:4f:e1:03:72:37:42:f4:d3:27:1b:
62:be:6e:bd:4b:9b:3c:ee:df:8e:f1:57:31:30:a9:
6d:91:c0:ae:71:0c:1a:77:61:62:20:5f:cf:be:ce:
9e:08:8e:7e:52:3a:87:d8:75:01:a7:ba:f6:7e:5d:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:32:FF:74:DB:3D:AF:14:92:35:4D:27:C1:C0:20:D0:D7:0E:57
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:dc:68:01:de:c8:cb:31:55:fe:b5:95:51:21:ed:17:e7:
d7:4f:17:a4:df:3e:8c:51:5a:ac:15:6a:8f:1b:d2:55:f0:6a:
b2:36:fb:cb:82:58:67:ca:bd:38:2d:93:12:7c:83:55:92:bd:
46:79:a7:2c:5c:80:89:32:b6:d3:d4:59:49:69:5c:57:2b:03:
62:ba:f2:41:cc:c7:ea:4e:44:1b:b4:f1:ca:ca:40:9e:9c:b3:
3e:8f:99:02:f7:f9:09:c1:45:32:6f:78:7f:22:1f:28:83:75:
e5:bb:c7:d0:df:6a:f6:3a:25:72:0b:37:d9:ba:92:00:15:f0:
79:03:39:dc:2f:93:0c:d9:17:86:fc:0c:52:19:52:f2:1d:a6:
bc:65:17:f7:62:25:8f:95:29:56:0c:15:86:02:23:3e:5f:2f:
9d:b4:f3:4b:02:80:25:b7:42:73:5f:ef:4f:46:57:08:b0:74:
2c:0a:12:0f:1e:4a:40:c8:47:f0:da:62:61:1e:ff:6a:17:f7:
30:40:8f:53:35:7f:c0:6b:0f:29:11:41:24:4c:c2:ca:24:38:
4d:ad:88:1f:9a:2b:05:b9:59:3a:dc:71:a4:69:e2:b7:5f:28:
9c:47:d0:8c:e9:1f:9b:37:56:d9:ab:00:a5:3e:f0:36:56:ca:
3f:57:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:50 2026 by rpki-client