Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: qaNWIvdIc2w4lEMhtkMjCfNfZs0m7jnp8T30a2oNFnc=
Subject key identifier: 59:98:D3:ED:B7:C5:A4:DF:7E:7E:D2:3F:4F:48:75:94:82:EA:BF:0E
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 01A08C43A748679B74BAC32449ABD6784CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 1933
Signing time: Thu 10 Sep 2026 17:00:39 +0000
Manifest this update: Thu 10 Sep 2026 17:00:39 +0000
Manifest next update: Fri 11 Sep 2026 17:00:39 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: Vtr62haPgrcoJQYG2HqEeRcZKmg7bPPYnzDqe6ZhzgI=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:a7:48:67:9b:74:ba:c3:24:49:ab:d6:78:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Sep 10 17:00:39 2026 GMT
Not After : Sep 11 17:00:39 2026 GMT
Subject: CN=5998d3edb7c5a4df7e7ed23f4f48759482eabf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:11:f2:c8:7a:57:74:e7:f2:ea:8b:d5:59:
33:52:63:f8:75:9e:18:91:f1:8c:64:cb:1e:dd:d1:
cc:f1:5d:6d:34:7d:ce:93:48:00:9a:e3:cb:de:12:
36:ab:97:19:dd:71:17:3c:d7:89:ed:c3:08:43:c5:
3f:08:f2:a0:13:e6:6a:c8:ec:4c:40:a4:70:bb:41:
76:31:18:04:7d:ae:ca:93:78:25:cc:bc:42:de:01:
d7:f8:a7:3b:c2:81:ca:0b:de:96:d0:9b:b4:9e:e7:
a6:4b:5c:a6:ce:b6:9d:ab:2d:5b:b6:f8:7e:29:f8:
3d:8c:0c:a9:38:0e:a6:49:bf:4f:6a:11:3b:f2:0f:
95:97:ba:43:81:63:e0:1c:8f:6d:85:3b:c0:10:98:
0a:bb:bb:4f:75:44:a6:95:68:60:55:e8:8f:d6:ad:
96:ec:32:fb:78:93:2e:73:3a:65:f1:94:f8:d2:b9:
76:87:a6:20:ba:a2:59:cf:f8:dd:e5:62:00:c4:f7:
25:aa:f9:8b:89:45:12:7d:cc:35:86:85:8a:8b:fa:
d4:92:35:39:b3:50:98:4d:29:92:92:d4:37:55:c6:
a2:30:be:30:e6:40:d4:e0:cf:d0:d2:98:f4:ea:e4:
2f:a8:65:45:36:25:4c:77:bd:3a:36:e9:b0:7d:2b:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:D3:ED:B7:C5:A4:DF:7E:7E:D2:3F:4F:48:75:94:82:EA:BF:0E
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:a3:d5:06:29:01:af:b3:b1:a8:05:4f:d3:a6:19:92:c6:
f6:58:6e:5b:e2:7e:1b:21:85:74:dd:5e:6e:6e:61:53:a6:cc:
84:63:d1:f8:6e:66:6e:10:74:ff:92:12:f3:29:87:81:37:e3:
38:d9:0a:f9:bf:3e:b7:4d:eb:d7:d5:b9:0a:22:1d:2d:c7:36:
be:c2:08:84:f0:e3:8e:c3:8f:8f:07:2f:cc:97:f6:32:5c:85:
23:c7:fc:0d:b0:62:29:fe:06:4e:d2:f5:e5:cb:2e:c0:ff:57:
54:58:0a:13:45:13:31:b9:2c:c3:82:21:5f:d8:a8:4f:4d:ea:
35:f6:e0:03:9e:d2:35:7e:80:44:c1:b0:4e:4c:45:e3:6f:09:
f5:ee:a6:50:8a:28:33:d4:1f:e0:45:b4:5d:d6:3c:5b:4d:3b:
50:53:6d:4a:8b:49:87:36:c2:01:9a:de:58:f3:9f:d5:a4:28:
8a:3a:da:e1:90:65:fb:00:4a:ac:12:88:ab:eb:32:dc:7a:7d:
26:70:c4:50:c6:7d:e2:7e:1d:2b:11:95:87:3a:ed:69:16:85:
79:09:27:87:0e:94:26:6b:fb:5c:d7:87:68:55:69:d5:b0:46:
f6:93:da:a2:8c:3e:dd:c5:8e:f2:ae:29:00:13:a2:f6:1a:b1:
3b:72:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:51 2026 by rpki-client