Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.mft
File: OHDyZTyyMJVBySwZYhCIeJ0StC8.mft (raw, json)
Hash identifier: OFUxut6ivxw+feyJKAhNtMvtHskFFdDS7FfQ74CEii0=
Subject key identifier: 2B:D3:53:BD:15:F1:93:E7:B7:B5:CB:32:D8:F2:D1:C1:04:6B:FE:9D
Authority key identifier: 38:70:F2:65:3C:B2:30:95:41:C9:2C:19:62:10:88:78:9D:12:B4:2F
Certificate issuer: /CN=3870f2653cb2309541c92c19621088789d12b42f
Certificate serial: 019D3A1CA18862F36CE7639D82EC511119DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHDyZTyyMJVBySwZYhCIeJ0StC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 15:00:47 +0000
Manifest this update: Sun 29 Mar 2026 15:00:47 +0000
Manifest next update: Mon 30 Mar 2026 15:00:47 +0000
Files and hashes: 1: OHDyZTyyMJVBySwZYhCIeJ0StC8.crl (hash: OlEk6lltWDJws8enpQvV5hAd4ctrEAK8Zb/TGtpCRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHDyZTyyMJVBySwZYhCIeJ0StC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a1:88:62:f3:6c:e7:63:9d:82:ec:51:11:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3870f2653cb2309541c92c19621088789d12b42f
Validity
Not Before: Mar 29 15:00:47 2026 GMT
Not After : Mar 30 15:00:47 2026 GMT
Subject: CN=2bd353bd15f193e7b7b5cb32d8f2d1c1046bfe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:7f:5d:0e:47:0e:ec:19:b1:e6:9b:d8:b1:
07:2d:f8:f6:7a:ec:41:4f:b3:d8:b8:80:bd:0e:d6:
49:99:2c:b5:2a:c9:68:83:f3:fd:03:54:86:cd:8e:
bf:7f:ee:b2:15:0d:4a:4b:e6:ae:c3:ef:c8:2e:6e:
91:84:f2:fb:46:61:6b:b9:34:29:84:49:3a:52:ce:
04:c6:7a:82:3c:cc:28:a1:a5:08:13:ce:a0:1b:84:
54:fa:26:30:87:c1:7f:33:10:08:2c:7e:7a:9a:d8:
60:57:3a:38:80:67:06:a8:d5:4f:71:7b:99:f0:2d:
c6:ae:13:f9:93:47:89:2e:0a:f7:d6:2b:7c:22:4c:
ab:69:a1:c1:8b:36:34:07:02:18:b8:57:8a:be:9f:
4e:8b:8f:65:b0:cd:21:4c:44:47:d5:1d:1f:b9:39:
83:cc:d8:0d:7d:9b:b9:4a:88:c1:7a:3b:cc:fc:5b:
b4:d2:90:3d:e1:6a:f4:9b:5a:66:71:80:4a:46:0d:
a1:39:97:94:8a:d6:6f:7c:91:de:88:e2:09:e4:db:
09:91:48:de:28:08:ec:83:7c:e0:17:29:bf:a6:87:
ab:d8:c7:35:0c:98:d6:eb:34:27:a5:6a:45:7b:59:
b5:79:67:af:29:43:3f:c8:2c:e1:61:82:5c:e1:8e:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:53:BD:15:F1:93:E7:B7:B5:CB:32:D8:F2:D1:C1:04:6B:FE:9D
X509v3 Authority Key Identifier:
keyid:38:70:F2:65:3C:B2:30:95:41:C9:2C:19:62:10:88:78:9D:12:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHDyZTyyMJVBySwZYhCIeJ0StC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e680c1-0606-4ebc-a264-5bf0c934d8f8/1/OHDyZTyyMJVBySwZYhCIeJ0StC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:a8:02:1e:70:8c:37:83:75:80:63:66:06:23:ef:5a:af:
53:f9:11:75:5e:61:cb:62:dc:70:3e:28:07:59:2c:8d:c4:e2:
2b:d6:ad:ef:67:46:8c:7f:c9:04:c5:8e:ef:ce:cc:7f:c4:a7:
81:80:1b:25:7f:5f:e4:e9:70:d4:78:ad:8c:de:e5:60:ce:36:
38:51:b9:54:97:41:1a:7e:29:53:07:23:68:5c:0e:c0:79:ec:
5b:40:de:c8:b8:b4:39:34:97:c6:8d:1d:a7:ff:ce:79:26:8b:
ba:32:64:dc:1f:c5:76:ba:b9:68:bc:aa:14:b1:1c:ac:fe:48:
3d:51:f3:93:bb:db:42:d7:66:29:c9:57:41:7f:ca:a4:6a:c6:
cd:e6:99:df:ea:1e:5b:c1:1e:eb:a6:ed:71:02:01:f2:d0:ef:
14:a5:32:23:4b:53:95:23:78:9b:f1:53:0f:80:f1:44:68:c8:
3b:98:bd:ee:7c:36:1d:c3:fe:94:a1:95:e8:6e:2f:db:63:ec:
51:b0:3a:16:47:6c:ff:e9:77:f4:5f:af:8a:dd:69:08:52:a6:
9b:eb:ad:f0:cb:e7:fd:e2:90:05:fb:6f:a4:f3:64:ee:c9:c7:
1a:ad:47:37:a4:30:f4:15:66:26:5d:38:93:9f:3a:77:73:dc:
ec:b2:ce:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HKGIYvNs52OdguxRERndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NzBmMjY1M2NiMjMwOTU0MWM5MmMxOTYyMTA4ODc4OWQx
MmI0MmYwHhcNMjYwMzI5MTUwMDQ3WhcNMjYwMzMwMTUwMDQ3WjAzMTEwLwYDVQQD
EygyYmQzNTNiZDE1ZjE5M2U3YjdiNWNiMzJkOGYyZDFjMTA0NmJmZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HZ/XQ5HDuwZseab2LEHLfj2euxB
T7PYuIC9DtZJmSy1Kslog/P9A1SGzY6/f+6yFQ1KS+auw+/ILm6RhPL7RmFruTQp
hEk6Us4ExnqCPMwooaUIE86gG4RU+iYwh8F/MxAILH56mthgVzo4gGcGqNVPcXuZ
8C3GrhP5k0eJLgr31it8IkyraaHBizY0BwIYuFeKvp9Oi49lsM0hTERH1R0fuTmD
zNgNfZu5SojBejvM/Fu00pA94Wr0m1pmcYBKRg2hOZeUitZvfJHeiOIJ5NsJkUje
KAjsg3zgFym/poer2Mc1DJjW6zQnpWpFe1m1eWevKUM/yCzhYYJc4Y7eqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvTU70V8ZPnt7XLMtjy0cEEa/6dMB8GA1UdIwQY
MBaAFDhw8mU8sjCVQcksGWIQiHidErQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0hEeVpUeXlNSlZCeVN3WlloQ0llSjBTdEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lNjgwYzEtMDYwNi00ZWJjLWEyNjQt
NWJmMGM5MzRkOGY4LzEvT0hEeVpUeXlNSlZCeVN3WlloQ0llSjBTdEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lNjgwYzEtMDYwNi00ZWJjLWEyNjQtNWJmMGM5MzRkOGY4
LzEvT0hEeVpUeXlNSlZCeVN3WlloQ0llSjBTdEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5eoAh5w
jDeDdYBjZgYj71qvU/kRdV5hy2LccD4oB1ksjcTiK9at72dGjH/JBMWO787Mf8Sn
gYAbJX9f5Olw1HitjN7lYM42OFG5VJdBGn4pUwcjaFwOwHnsW0DeyLi0OTSXxo0d
p//OeSaLujJk3B/Fdrq5aLyqFLEcrP5IPVHzk7vbQtdmKclXQX/KpGrGzeaZ3+oe
W8Ee66btcQIB8tDvFKUyI0tTlSN4m/FTD4DxRGjIO5i97nw2HcP+lKGV6G4v22Ps
UbA6Fkds/+l39F+vit1pCFKmm+ut8Mvn/eKQBftvpPNk7snHGq1HN6Qw9BVmJl04
k586d3Pc7LLOgg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:32 2026 by rpki-client