Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.mft
File: oHCD-EEjzspEu3jQ_A1k_7j-IuY.mft (raw, json)
Hash identifier: WsnpcamPySn2oex3XIYD8CtTQw+1kg/RoSaW3e/3CXU=
Subject key identifier: 9C:57:DA:91:80:28:6E:AF:4E:82:25:D0:32:1E:C9:9F:9F:EC:6C:EB
Authority key identifier: A0:70:83:F8:41:23:CE:CA:44:BB:78:D0:FC:0D:64:FF:B8:FE:22:E6
Certificate issuer: /CN=a07083f84123ceca44bb78d0fc0d64ffb8fe22e6
Certificate serial: 019D37896599D1857BC15FF23880465C243C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHCD-EEjzspEu3jQ_A1k_7j-IuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.mft
Manifest number: 25
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: oHCD-EEjzspEu3jQ_A1k_7j-IuY.crl (hash: tRNc3U9Oif4RA8Tw1frK8fsnZuj8k3ejYZZUY4tTTI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHCD-EEjzspEu3jQ_A1k_7j-IuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:65:99:d1:85:7b:c1:5f:f2:38:80:46:5c:24:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07083f84123ceca44bb78d0fc0d64ffb8fe22e6
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=9c57da9180286eaf4e8225d0321ec99f9fec6ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:2a:c7:f5:aa:ce:62:94:d2:66:33:cb:f3:
32:d1:50:fd:7b:12:46:36:31:73:1e:f1:a5:d7:77:
76:16:1f:95:99:be:7a:76:ab:60:4d:46:f9:dd:b8:
5a:15:b3:33:7c:bb:77:a0:63:da:82:30:a7:53:12:
e9:9e:73:fc:3e:0e:44:d1:80:27:c4:c8:e1:55:e3:
31:5f:8e:17:12:1c:e4:ad:51:1c:28:b9:c6:04:5b:
23:82:1a:74:3f:cb:10:51:47:00:6d:c8:b1:66:f0:
13:f7:2d:98:62:2b:ef:fe:24:f2:d7:2a:38:e9:82:
74:e0:e4:95:8a:c8:6b:39:29:3d:69:ff:4f:2d:04:
d1:09:dd:e6:05:74:09:95:88:ab:03:75:e4:da:7e:
cb:8e:c6:3a:9f:45:be:f0:0b:48:b2:d7:2d:2f:15:
57:e9:c2:22:b6:2c:53:be:5b:c1:22:8b:23:91:43:
b8:08:93:d9:84:07:00:50:00:52:2a:b9:ea:47:38:
c0:b8:3a:c9:9e:81:43:fb:81:6c:12:52:c3:95:29:
78:bc:48:a9:80:0b:40:02:4a:21:0b:b5:ff:29:eb:
87:31:fb:a5:73:96:98:70:46:22:ec:b7:48:73:1f:
95:38:4b:9d:ae:8c:e3:7c:74:81:2a:cf:be:9e:8d:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:DA:91:80:28:6E:AF:4E:82:25:D0:32:1E:C9:9F:9F:EC:6C:EB
X509v3 Authority Key Identifier:
keyid:A0:70:83:F8:41:23:CE:CA:44:BB:78:D0:FC:0D:64:FF:B8:FE:22:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHCD-EEjzspEu3jQ_A1k_7j-IuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6ace96-9795-4115-abf5-18e25585e7b8/1/oHCD-EEjzspEu3jQ_A1k_7j-IuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:cd:58:4c:58:3c:5f:fe:dd:a6:fb:7a:11:41:37:b2:51:
d3:3e:45:48:a9:ac:fc:b5:1d:6b:da:15:a2:a0:eb:5e:09:ff:
9f:a3:8f:5a:20:ba:81:e8:4f:8c:50:cc:0e:1c:a7:be:9c:7a:
af:7f:a1:9b:11:13:d9:7c:1c:6e:49:a3:46:6f:d8:33:7e:5f:
aa:ab:d3:bd:dc:0a:3a:89:98:21:4f:04:13:29:09:61:01:cd:
76:5d:58:bf:b1:41:1f:b1:ed:08:66:a0:d9:86:62:2f:1f:9a:
b6:a8:16:49:01:bc:16:cf:d7:6d:28:73:cc:80:9e:20:51:1f:
4c:4a:b8:24:79:ba:cb:aa:45:0a:3a:db:71:0d:fb:da:6e:13:
83:25:ae:1e:fb:f9:36:23:e2:4c:26:bc:1a:4f:42:bc:70:07:
99:1b:88:a4:16:5a:0b:cb:e6:65:b9:fc:7e:77:ba:ad:7e:ff:
83:bd:62:45:ae:05:5c:1c:04:1a:16:f7:0e:ce:2d:f5:27:81:
38:5f:89:0a:20:d2:8d:af:61:d2:7d:3e:18:3b:a0:0c:14:05:
61:3a:50:f9:4e:92:76:6c:b6:ca:4c:c1:bd:e5:6f:11:b2:1a:
19:d9:67:1e:c2:af:8e:f8:b1:a1:0b:36:f9:61:bb:79:bc:f5:
8e:25:b1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWWZ0YV7wV/yOIBGXCQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzA4M2Y4NDEyM2NlY2E0NGJiNzhkMGZjMGQ2NGZmYjhm
ZTIyZTYwHhcNMjYwMzI5MDMwMDQ0WhcNMjYwMzMwMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg5YzU3ZGE5MTgwMjg2ZWFmNGU4MjI1ZDAzMjFlYzk5ZjlmZWM2Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsYqx/WqzmKU0mYzy/My0VD9exJG
NjFzHvGl13d2Fh+Vmb56dqtgTUb53bhaFbMzfLt3oGPagjCnUxLpnnP8Pg5E0YAn
xMjhVeMxX44XEhzkrVEcKLnGBFsjghp0P8sQUUcAbcixZvAT9y2YYivv/iTy1yo4
6YJ04OSVishrOSk9af9PLQTRCd3mBXQJlYirA3Xk2n7LjsY6n0W+8AtIstctLxVX
6cIitixTvlvBIosjkUO4CJPZhAcAUABSKrnqRzjAuDrJnoFD+4FsElLDlSl4vEip
gAtAAkohC7X/KeuHMfulc5aYcEYi7LdIcx+VOEudrozjfHSBKs++no0wIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxX2pGAKG6vToIl0DIeyZ+f7GzrMB8GA1UdIwQY
MBaAFKBwg/hBI87KRLt40PwNZP+4/iLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hDRC1FRWp6c3BFdTNqUV9BMWtfN2otSXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82YWNlOTYtOTc5NS00MTE1LWFiZjUt
MThlMjU1ODVlN2I4LzEvb0hDRC1FRWp6c3BFdTNqUV9BMWtfN2otSXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS82YWNlOTYtOTc5NS00MTE1LWFiZjUtMThlMjU1ODVlN2I4
LzEvb0hDRC1FRWp6c3BFdTNqUV9BMWtfN2otSXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlPNWExY
PF/+3ab7ehFBN7JR0z5FSKms/LUda9oVoqDrXgn/n6OPWiC6gehPjFDMDhynvpx6
r3+hmxET2XwcbkmjRm/YM35fqqvTvdwKOomYIU8EEykJYQHNdl1Yv7FBH7HtCGag
2YZiLx+atqgWSQG8Fs/XbShzzICeIFEfTEq4JHm6y6pFCjrbcQ372m4TgyWuHvv5
NiPiTCa8Gk9CvHAHmRuIpBZaC8vmZbn8fne6rX7/g71iRa4FXBwEGhb3Ds4t9SeB
OF+JCiDSja9h0n0+GDugDBQFYTpQ+U6Sdmy2ykzBveVvEbIaGdlnHsKvjvixoQs2
+WG7ebz1jiWxKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:09 2026 by rpki-client