Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: nPqmnhtKcq0s2uzHbB9JgY62Ts/koNEfjJWl/frbXes=
Subject key identifier: 9F:C2:73:B5:16:01:9B:E4:0E:D3:A6:2E:B9:89:70:78:93:F9:73:91
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 01A18940399DA4A197F2F003A32AC1AB3D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 19B6
Signing time: Thu 29 Oct 2026 20:00:49 +0000
Manifest this update: Thu 29 Oct 2026 20:00:49 +0000
Manifest next update: Fri 30 Oct 2026 20:00:49 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: hI57DjuIpZ21kT86lDFl1SNtcChSgTQlKe8yyqwLV0E=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:40:39:9d:a4:a1:97:f2:f0:03:a3:2a:c1:ab:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Oct 29 20:00:49 2026 GMT
Not After : Oct 30 20:00:49 2026 GMT
Subject: CN=9fc273b516019be40ed3a62eb989707893f97391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:66:f8:84:30:66:22:79:18:4a:8c:3b:c7:
21:2b:99:57:e2:b1:de:f3:f1:33:89:54:c0:29:12:
65:1d:47:fc:28:9a:73:37:55:26:05:ee:49:29:7a:
be:95:f3:1b:ea:37:e6:85:9e:f6:c8:bc:7d:45:ef:
71:85:93:ef:69:fb:ce:99:9a:b2:f1:16:f1:20:3e:
70:30:1b:4c:11:71:98:ac:b2:a9:e7:2a:f0:4a:58:
f4:10:76:be:eb:54:37:06:7b:7d:7d:c6:e0:cc:c7:
a2:ff:66:e1:16:02:5b:96:0f:b8:93:93:b4:7c:a8:
18:82:26:15:c1:27:72:73:65:6a:dd:22:e0:49:31:
24:db:37:be:8d:8c:b9:12:76:4e:80:28:04:8f:d9:
9e:55:0e:07:94:da:33:df:ff:92:f5:71:e5:41:65:
4b:91:11:2b:9c:b1:5e:a6:66:17:36:55:4d:c8:3b:
d6:ab:2d:b9:a0:da:51:23:e4:34:79:a3:4c:c1:3e:
5a:23:1e:66:cc:a9:53:7f:5f:28:3e:28:62:2e:35:
21:60:fd:69:cd:99:8a:86:d6:47:94:b0:2a:ad:17:
ca:b2:a9:75:9d:d0:29:38:2b:54:d2:01:b9:db:4f:
ed:e1:4c:55:ef:4d:ee:9d:2b:6b:45:6e:43:66:05:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:73:B5:16:01:9B:E4:0E:D3:A6:2E:B9:89:70:78:93:F9:73:91
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b2:8f:df:18:b8:af:d0:13:4f:6e:c6:5e:cc:48:98:60:70:
e7:ff:f6:ee:5f:95:93:78:3e:34:20:7f:10:0d:2f:68:ee:f5:
2c:85:b9:c4:9d:60:02:37:76:d4:e0:c5:30:d2:a3:d2:16:0e:
96:70:f0:2b:e0:3d:70:dd:f2:73:30:d2:ad:da:90:33:f2:b6:
2d:5b:e8:e0:34:87:0b:9d:ba:9e:12:8c:64:c9:0f:f5:af:cc:
a4:cc:7d:66:f3:3b:ed:83:91:2e:02:f4:8a:51:47:cd:de:0c:
6c:8e:68:d3:41:36:4f:7c:f4:4a:a3:8d:17:27:ba:4f:6f:5f:
51:d9:f0:d2:6b:8b:28:a5:76:d2:d7:54:c5:87:31:5c:68:bc:
81:8b:ba:34:ed:ca:26:80:d4:a3:e9:e8:b6:85:c4:a9:6c:61:
3f:c0:df:5f:64:23:f5:be:c4:f5:33:27:9d:5a:ad:a0:a8:b6:
7b:a8:3b:17:a4:0c:5e:e2:64:90:cd:77:9a:87:e4:10:53:0f:
4a:a9:b9:b2:d3:ee:8d:b4:19:84:62:99:55:6c:05:3b:cf:37:
9d:a9:31:2e:9c:2a:63:ee:8b:c2:a9:c1:5d:86:35:b9:89:79:
5b:d6:44:69:be:c7:98:e6:d4:92:49:27:b3:0c:2f:f9:ba:10:
dc:7b:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 03:00:51 2026 by rpki-client