Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: EIuaP+Q0CCc+tRikkfKVIXoKCC7TqSCy9+4zMQu7RaI=
Subject key identifier: 03:CF:05:7F:EC:6A:38:ED:8B:A6:00:3F:AD:0C:6F:A9:B9:1C:76:15
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019FA2976F06B5360C49B90F21239F8CFB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 18BA
Signing time: Mon 27 Jul 2026 08:01:01 +0000
Manifest this update: Mon 27 Jul 2026 08:01:01 +0000
Manifest next update: Tue 28 Jul 2026 08:01:01 +0000
Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=)
2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: kEgS4YRmweOo4DT+0vlezG+Ex4Pts+9ViIJq1NYpTyQ=)
3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:6f:06:b5:36:0c:49:b9:0f:21:23:9f:8c:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jul 27 08:01:01 2026 GMT
Not After : Jul 28 08:01:01 2026 GMT
Subject: CN=03cf057fec6a38ed8ba6003fad0c6fa9b91c7615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:2d:67:38:4d:ba:a9:98:27:f3:4c:f5:d1:
83:4b:4b:55:3a:0d:f0:4f:bb:e2:b6:72:b3:2e:dd:
ee:b0:90:bc:7f:48:34:6c:09:eb:c5:eb:60:7b:7e:
b6:66:48:0a:e3:09:3c:ff:1b:33:12:b0:b4:fb:7d:
da:2b:44:3c:8e:07:e6:7f:25:60:8b:2a:61:be:70:
43:29:5e:a6:43:f4:ba:34:42:a9:77:75:75:3f:aa:
9f:70:01:2e:06:38:b5:f3:ed:66:76:f2:44:2f:cc:
c1:61:d6:e4:f1:de:ae:29:d2:c9:00:3d:f8:15:01:
3b:9d:51:08:4f:75:51:0d:03:54:18:92:74:b0:82:
7d:61:b5:33:e2:75:f1:39:35:f9:ef:ba:81:36:dd:
31:a0:01:1e:76:91:18:57:d4:28:19:0a:23:14:47:
b7:ea:33:a2:6d:93:41:67:bf:2d:20:7d:fa:4d:c6:
f2:7a:d4:a9:84:1a:5b:43:50:8c:d3:8c:cd:f7:b6:
aa:08:69:a7:5e:9e:89:e7:bf:c8:ea:c8:e4:db:6a:
68:17:67:0e:28:38:f8:1b:db:6f:f0:d6:db:48:09:
be:23:17:cc:97:13:4e:c4:50:19:5f:5d:4e:52:33:
c9:64:1d:b2:f9:22:6d:30:e4:5d:17:df:be:b7:fc:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:05:7F:EC:6A:38:ED:8B:A6:00:3F:AD:0C:6F:A9:B9:1C:76:15
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:2b:32:9e:d2:96:34:0c:9c:0e:e8:a7:bd:f2:5f:49:fe:
06:ea:33:98:03:cb:7f:c5:18:df:fb:7e:f0:28:dd:62:40:a7:
ea:3c:2e:5e:df:f6:e1:9f:6f:14:ee:18:9a:e4:7b:99:d3:b2:
99:f3:2e:d1:2f:d0:d8:ac:33:34:d5:80:98:c9:dc:cf:b9:fb:
1f:35:3b:86:a5:ba:ef:b9:bb:cb:63:80:e4:9e:e3:5a:07:a6:
cf:98:2b:1b:ae:e3:ce:46:70:d9:32:fd:c7:3a:b3:f3:58:23:
bc:ae:3d:f7:69:ea:b9:81:6d:7f:90:d8:f4:67:2a:ca:52:9b:
66:28:27:4f:07:6a:55:30:5c:c9:b1:56:f0:67:49:65:e5:02:
84:dd:c5:43:70:20:b1:75:87:c9:90:bf:45:f1:ca:81:a0:43:
3c:fa:6c:14:0f:95:cd:fb:fd:82:74:b7:3d:bc:35:0d:69:ba:
83:2d:a7:a5:7e:b1:48:12:c8:e2:7f:84:53:2c:16:55:fa:a2:
3f:e6:a6:e9:29:6c:aa:b9:00:07:d0:a4:76:aa:73:52:59:e2:
1b:4c:58:99:98:6f:f1:c9:7c:d8:05:c7:13:2a:f3:45:ac:62:
15:ec:76:aa:b0:47:a5:c8:5e:5f:95:ee:66:8c:fb:bc:9c:d7:
f8:2b:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:57 2026 by rpki-client