Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: HubDYvdjLubQkIDOj55Wiz6s8hmAGZoNjeRn2s+LdRY=
Subject key identifier: EC:5E:5B:AD:1F:5F:33:4F:AE:CA:38:29:6B:FF:FD:04:24:6D:59:FA
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019D371B4A6DF31613CD2043F01DAF73A9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:28 +0000
Manifest this update: Sun 29 Mar 2026 01:00:28 +0000
Manifest next update: Mon 30 Mar 2026 01:00:28 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: nbDboz0+jqZTcNMNkogE+8UyWUKgbHR6zZr3A9sKzSA=)
2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4a:6d:f3:16:13:cd:20:43:f0:1d:af:73:a9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Mar 29 01:00:28 2026 GMT
Not After : Mar 30 01:00:28 2026 GMT
Subject: CN=ec5e5bad1f5f334faeca38296bfffd04246d59fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:bd:81:c8:d7:07:d8:9d:e2:2e:ca:03:46:
9d:9c:38:89:dd:0e:91:32:cb:f4:33:5a:b8:52:3a:
48:60:26:07:a6:02:47:6c:6e:65:fd:ed:5c:2d:42:
52:06:10:8c:fd:e9:76:e5:3a:c3:4d:31:56:00:5b:
71:b6:84:46:ec:80:f8:b8:db:77:11:5d:1d:81:2e:
00:22:b2:9e:d8:19:e1:5b:2f:6d:a3:ea:c3:29:72:
02:83:a9:07:2a:16:64:4e:91:41:a5:ac:77:ff:4c:
58:ad:10:88:9b:8a:50:db:e8:b2:7a:20:4f:96:64:
bb:c5:c8:16:ff:15:96:af:fe:bc:df:8e:13:04:c2:
08:05:11:f4:4c:7f:b5:c8:1f:36:95:2d:de:ab:09:
94:c4:23:dd:3a:f7:fd:bb:30:4e:d3:19:f5:f4:f4:
7b:03:10:45:27:76:cc:c5:78:e9:65:18:50:b2:67:
04:18:f5:97:33:ee:b5:ea:cf:c3:e4:65:0f:2e:02:
13:f7:63:e7:a1:55:85:4c:18:83:ff:32:c1:e8:b0:
13:39:ef:8f:ec:5a:8f:cb:ff:d3:22:d8:ad:21:b9:
35:7c:a9:92:16:3b:a8:fe:7b:bf:88:86:aa:a7:2a:
a1:32:a1:53:d9:3b:36:22:c0:2e:0a:50:53:31:61:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:5B:AD:1F:5F:33:4F:AE:CA:38:29:6B:FF:FD:04:24:6D:59:FA
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:9c:f8:79:8c:72:cc:04:da:a0:84:b5:d3:11:40:6f:92:
04:68:b1:bf:4f:14:2e:3c:e9:96:92:ea:ac:9b:7d:82:29:5d:
55:63:6a:32:90:04:e5:a7:54:b7:52:62:29:e9:ba:5b:25:08:
bc:f8:66:e5:bb:52:f5:9a:3e:a9:fc:2a:68:ee:e8:94:22:da:
82:2c:bf:a2:80:d3:9e:04:db:8e:9f:d8:a0:ab:85:77:ef:f4:
e6:ae:42:2d:31:cd:25:bb:02:11:a1:a0:6d:d1:14:25:c7:0f:
40:0b:d6:f1:ec:c2:de:90:e9:e6:1a:df:49:41:62:78:63:05:
50:cf:ca:16:74:27:23:f4:3b:f9:b0:cb:a8:4b:14:fd:58:0f:
28:ec:88:6b:cd:2f:e2:5d:ea:59:5a:7b:d9:96:8d:ce:fc:cb:
44:32:66:e8:d8:a0:06:49:49:59:83:61:ea:04:90:71:54:b9:
65:06:93:16:d8:63:17:92:8e:03:b6:da:17:51:19:ab:76:37:
2d:06:cb:9d:18:61:70:09:5d:74:04:9c:f0:d7:82:bc:f2:95:
b1:da:69:81:c8:3e:12:f6:7f:6b:80:f0:15:3e:7d:bd:ae:d5:
22:b2:45:f6:8e:5b:73:13:a4:99:d4:e2:8f:6c:7c:24:b2:30:
19:ad:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:28 2026 by rpki-client