Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: sOJfPAJ5ATpypuf9ShT/MQivMm6Sb7p7sKxdRvq4aHQ=
Subject key identifier: 9B:D7:0A:C3:42:D8:D0:96:F6:66:EC:18:DE:C9:B5:9A:8E:57:6C:4F
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019EB76AB1DEFC2487C83B4DAE39DFA3D2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0F2D
Signing time: Thu 11 Jun 2026 16:01:23 +0000
Manifest this update: Thu 11 Jun 2026 16:01:23 +0000
Manifest next update: Fri 12 Jun 2026 16:01:23 +0000
Files and hashes: 1: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (hash: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80=)
2: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: eIDQTU1lkhE8954y/gXRFXrSRUEeUemQkt2O0uXyt+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:b1:de:fc:24:87:c8:3b:4d:ae:39:df:a3:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jun 11 16:01:23 2026 GMT
Not After : Jun 12 16:01:23 2026 GMT
Subject: CN=9bd70ac342d8d096f666ec18dec9b59a8e576c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:03:00:6f:ea:b1:8d:c7:20:1e:45:46:f4:
94:8d:b2:d4:ba:e5:bf:f8:84:64:7e:5e:9a:7d:3b:
ff:c1:eb:38:f8:b8:48:02:0c:c8:be:4d:e5:d0:97:
f5:fc:e0:1a:78:79:a2:f8:f2:e3:7d:dc:bf:b1:06:
c8:b4:4f:6d:c3:03:ba:09:b1:93:2e:5f:de:bc:e7:
c4:f5:7e:a6:10:85:ba:a2:2a:5d:8a:25:3f:01:5c:
28:7b:aa:f0:82:4f:a6:63:49:f6:d3:77:ed:f7:97:
95:d8:4a:ba:5d:e6:a1:5c:14:57:f8:00:2e:72:2e:
66:44:16:91:91:58:40:6d:e9:e7:45:47:fd:aa:c8:
5e:ba:a6:33:c6:72:f2:c2:6f:e1:64:4e:61:f4:54:
e6:21:4f:19:45:47:69:59:36:94:09:11:ca:f1:4e:
2a:91:ed:81:bd:fc:0f:de:16:28:36:3d:46:95:d7:
45:09:f7:4a:f0:26:e7:78:84:9d:ac:8b:ab:22:9d:
ff:9b:4d:cf:98:dd:db:9a:35:1d:3d:48:71:cd:35:
2a:7b:b6:2f:dc:56:bc:2c:4c:80:2c:9d:5c:d9:ef:
7d:d1:e0:47:88:41:ce:fd:a4:20:d4:7d:fb:70:5d:
5f:d3:2e:e9:44:e8:df:85:04:16:f6:37:e0:ba:04:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:0A:C3:42:D8:D0:96:F6:66:EC:18:DE:C9:B5:9A:8E:57:6C:4F
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:a5:b1:65:04:99:d2:e9:98:e7:c3:b8:2d:89:ef:2c:f4:
22:6e:0d:93:f1:0b:5d:f1:5f:e4:b2:d6:d3:b4:55:25:d7:bb:
2d:aa:52:56:52:29:f0:1a:ce:49:f8:3a:ce:fa:66:65:f8:ef:
99:8b:b7:19:6b:a0:d9:d7:a7:46:77:96:14:a3:49:16:52:fe:
2b:a0:1b:fd:70:1a:96:93:4b:00:0e:7a:38:ce:97:d7:69:8a:
f0:70:17:4d:48:6a:fc:d2:05:e3:60:28:90:62:a8:d8:3e:8f:
b6:a7:9c:40:35:0c:3c:46:dd:42:ab:30:95:86:0c:82:2a:11:
54:94:7a:91:1d:f1:e9:0e:74:8a:8a:50:ae:13:2c:12:62:2c:
e7:71:97:0d:49:af:d5:31:0a:70:48:ff:5b:4b:7a:83:79:7f:
70:d8:6f:e0:96:15:1c:38:e6:28:5a:4a:8a:c9:2c:27:0d:a9:
96:6c:d0:9f:1c:e0:34:f4:d9:6e:65:f5:82:06:5e:9f:cc:09:
84:76:4f:5a:b3:31:23:9b:fa:aa:a7:73:e2:2d:e5:15:85:8c:
06:9a:5c:18:30:a6:d5:d0:d2:dc:d4:bc:1a:90:12:61:9c:63:
91:4a:b1:8b:9b:6e:10:7e:76:63:42:f3:59:86:38:eb:03:b9:
55:4f:68:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63arHe/CSHyDtNrjnfo9KzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMWEwYzAwMTZiOWIzM2Y5M2U4YTdhMzkzZDA5MTkwZDVl
MTg0OTkwHhcNMjYwNjExMTYwMTIzWhcNMjYwNjEyMTYwMTIzWjAzMTEwLwYDVQQD
Eyg5YmQ3MGFjMzQyZDhkMDk2ZjY2NmVjMThkZWM5YjU5YThlNTc2YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rsDAG/qsY3HIB5FRvSUjbLUuuW/
+IRkfl6afTv/wes4+LhIAgzIvk3l0Jf1/OAaeHmi+PLjfdy/sQbItE9twwO6CbGT
Ll/evOfE9X6mEIW6oipdiiU/AVwoe6rwgk+mY0n203ft95eV2Eq6XeahXBRX+AAu
ci5mRBaRkVhAbennRUf9qsheuqYzxnLywm/hZE5h9FTmIU8ZRUdpWTaUCRHK8U4q
ke2BvfwP3hYoNj1GlddFCfdK8CbneISdrIurIp3/m03PmN3bmjUdPUhxzTUqe7Yv
3Fa8LEyALJ1c2e990eBHiEHO/aQg1H37cF1f0y7pROjfhQQW9jfgugSyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvXCsNC2NCW9mbsGN7JtZqOV2xPMB8GA1UdIwQY
MBaAFDoaDAAWubM/k+ino5PQkZDV4YSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjkt
MGI2NDU5Nzc1YjY0LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjktMGI2NDU5Nzc1YjY0
LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjylsWUE
mdLpmOfDuC2J7yz0Im4Nk/ELXfFf5LLW07RVJde7LapSVlIp8BrOSfg6zvpmZfjv
mYu3GWug2denRneWFKNJFlL+K6Ab/XAalpNLAA56OM6X12mK8HAXTUhq/NIF42Ao
kGKo2D6PtqecQDUMPEbdQqswlYYMgioRVJR6kR3x6Q50iopQrhMsEmIs53GXDUmv
1TEKcEj/W0t6g3l/cNhv4JYVHDjmKFpKisksJw2plmzQnxzgNPTZbmX1ggZen8wJ
hHZPWrMxI5v6qqdz4i3lFYWMBppcGDCm1dDS3NS8GpASYZxjkUqxi5tuEH52Y0Lz
WYY46wO5VU9oLA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:11:49 2026 by rpki-client