Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: W9Hrd7iOQvBJLBl62Gme38QHb383egZy9X2ydPkr7nw=
Subject key identifier: 47:80:98:48:04:D4:D6:30:A7:26:61:1D:3F:A5:BB:A1:A9:42:71:44
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019CE5FFA4621FE474E5BBA301018ACBFBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0E3C
Signing time: Fri 13 Mar 2026 07:01:02 +0000
Manifest this update: Fri 13 Mar 2026 07:01:02 +0000
Manifest next update: Sat 14 Mar 2026 07:01:02 +0000
Files and hashes: 1: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (hash: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80=)
2: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: 6508fHqlRrlfGruYDRxX2wrb1eVRjrk+juzmgvb+LDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:a4:62:1f:e4:74:e5:bb:a3:01:01:8a:cb:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Mar 13 07:01:02 2026 GMT
Not After : Mar 14 07:01:02 2026 GMT
Subject: CN=4780984804d4d630a726611d3fa5bba1a9427144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:ce:9d:9c:7b:bd:48:b9:04:2c:bc:03:e5:
a8:73:fd:ef:6b:99:7b:26:f7:b0:1c:90:c2:ab:9d:
e1:e0:57:b6:4e:29:66:67:f0:b7:8c:de:2f:27:23:
9c:6b:bf:33:b7:0b:2a:67:f3:89:7f:7e:dc:31:94:
c1:28:f5:ca:91:ff:86:96:0d:d2:36:77:4e:2e:10:
fc:35:3d:1d:1c:e5:e0:b5:da:2b:b5:2d:04:4a:e0:
4a:7c:68:88:14:3c:e6:c4:ac:8b:09:3c:81:04:15:
f7:24:20:eb:46:46:ee:a0:2e:63:e8:79:87:89:2a:
19:ee:36:ff:68:f6:34:2b:87:28:c2:a9:49:64:af:
77:6d:41:89:08:24:f4:fe:3a:5c:2d:7b:6c:d1:ed:
3a:f9:04:76:6c:46:4c:17:61:b4:a3:6f:03:25:49:
8b:17:da:09:ad:d3:a1:7e:4d:b9:5e:d6:fa:39:18:
45:67:09:2e:8b:68:da:83:ce:df:41:17:72:7c:38:
24:73:d4:de:28:b3:4c:66:f0:5c:ce:e0:0c:8d:08:
48:bf:70:df:41:86:f4:5a:88:0a:ab:95:7a:5d:f7:
fb:1b:7e:e2:98:0d:9d:8b:66:0b:39:ed:ba:f3:d4:
42:61:e8:dd:2e:1f:8f:89:ab:5b:6c:5e:dc:a3:34:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:98:48:04:D4:D6:30:A7:26:61:1D:3F:A5:BB:A1:A9:42:71:44
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:05:63:9c:ee:86:55:fe:37:07:0a:c9:2a:fb:94:35:cd:
b7:a6:78:cc:3a:0e:90:92:59:fb:03:82:a8:ab:34:1b:a2:bc:
a8:e5:77:3d:5c:70:f0:75:fa:43:94:c4:b7:de:fe:98:cc:b3:
fb:b7:7d:00:5e:22:2e:41:08:95:16:aa:56:90:1b:16:d1:6b:
af:ad:f8:4f:ba:48:08:a6:a5:a9:cb:39:3c:cc:fe:94:4e:fd:
d5:35:56:15:01:50:ec:a5:c8:01:f2:91:98:41:e8:98:fe:f5:
4d:02:a0:25:d7:8a:0b:de:f4:7b:08:77:b9:59:37:e1:d4:f0:
2d:52:c4:29:de:87:3d:51:b5:27:a7:b2:69:fd:66:2a:38:0e:
bd:a1:fb:24:4e:fe:5e:7b:ae:f4:8b:7c:0a:00:9f:84:7b:6d:
02:d6:68:f5:d5:83:42:7a:3d:0f:f7:b1:a6:a3:92:be:ec:8b:
1c:88:69:52:dd:e9:b1:63:f9:30:a9:82:e9:a3:80:de:81:97:
97:3d:3f:b2:04:2f:25:82:55:f6:12:78:60:51:22:da:4c:cd:
11:0d:3c:ab:8e:d1:24:52:77:24:df:50:d8:e4:1c:50:65:7a:
65:b4:d8:0a:86:fe:1d:8f:c1:b1:83:92:ae:99:ef:04:46:06:
55:52:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:47 2026 by rpki-client