Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
File: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft (raw, json)
Hash identifier: G3vZRTBdbYKFrTRgBpDeWAf36ZgRfULdWZYpG95DWIM=
Subject key identifier: 22:2C:7A:09:9B:D8:E5:2B:C8:3B:46:FD:D2:F7:A6:09:5C:A3:31:91
Authority key identifier: A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
Certificate issuer: /CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Certificate serial: 019D27E03619E1D0BCD096AA350BC1C83167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
Manifest number: 37
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: 8zHxjb_mmV0JsMrNprnGTu9CPmU.roa (hash: xguh2vgCy/zW4Ej9WmgnSI8V8ugA63OiLSYijedgqr0=)
2: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl (hash: /5dyDiF2IaHyC7EXCr/r3az8JgCuy+C6AyY8pWXTwlE=)
3: pMAiTF1ySg9ogcwhwA1KzWh15ZU.roa (hash: cD1iyHvMqU0IUOL/sirhVf8EXZ1S7JtYKgjAxXeAnfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:36:19:e1:d0:bc:d0:96:aa:35:0b:c1:c8:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=222c7a099bd8e52bc83b46fdd2f7a6095ca33191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:82:40:fd:64:b5:ba:b3:38:f7:19:81:c2:
93:c8:7d:ec:c3:54:44:fb:f1:0a:a3:8a:cf:89:29:
61:4a:ef:14:91:87:c5:2c:6e:6d:7b:8f:f9:0b:81:
8f:46:dc:8f:1b:15:18:8d:63:b3:9e:3f:8c:71:a1:
7f:f4:b8:83:cd:b3:85:2d:85:7c:04:d5:d2:03:f4:
b8:03:27:9f:35:ce:b6:0d:f5:c2:65:73:3c:51:75:
3e:b4:fb:ed:cb:0c:c4:52:93:c4:83:23:0e:a1:b2:
22:b6:5e:60:14:29:9c:d0:08:cb:e4:d0:61:c3:a3:
6d:06:ed:d1:e4:e0:49:0d:4f:30:c4:0d:16:bb:23:
a3:84:a0:4c:f4:07:e6:46:2a:4f:5a:f6:69:96:0e:
f1:b7:04:cb:aa:fc:11:35:03:92:b1:d9:bf:f5:87:
a4:56:9a:44:26:2b:3a:aa:01:71:14:8b:ea:6c:8f:
77:e7:53:f7:bc:3e:16:6c:06:4c:92:f9:24:4d:ad:
40:e7:19:55:12:29:28:e5:ee:ab:f2:53:c0:a4:ea:
91:ce:5b:59:16:83:23:e9:91:25:48:15:35:8e:c3:
44:f8:e3:74:25:70:c0:94:04:06:70:6a:53:88:3a:
d2:96:a1:0a:c7:9b:5f:b0:0c:94:98:47:c8:ae:47:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:7A:09:9B:D8:E5:2B:C8:3B:46:FD:D2:F7:A6:09:5C:A3:31:91
X509v3 Authority Key Identifier:
keyid:A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:5b:c7:c8:2e:be:ba:f5:80:d8:97:21:23:d1:fb:48:f9:
96:77:fc:12:b2:52:24:c9:a8:40:5f:33:a3:f7:38:dc:2a:8b:
a6:36:7a:62:d3:1b:5c:ab:c0:b7:ce:f7:d0:48:83:e5:b8:fa:
27:75:9b:9a:45:46:5c:53:e9:8c:45:7a:08:32:ef:90:8f:0f:
8a:9d:20:29:ea:1e:67:16:26:af:d7:e8:84:dc:75:41:04:f9:
49:ea:96:44:c3:b4:60:45:ec:ce:05:a9:bd:b8:6c:64:5e:75:
cd:d3:66:bd:4c:0c:e8:62:b7:dc:0b:10:d1:99:3c:46:6d:bf:
1e:90:ca:db:79:cf:52:8e:52:e0:d2:ca:8f:2a:8c:2d:2e:fd:
37:6a:95:72:93:06:4a:ff:b3:7e:2b:2e:a2:22:9a:d1:d0:ee:
69:f3:08:5b:80:e1:b7:31:ee:b8:51:19:d4:11:b4:2c:97:bb:
1e:0d:52:84:18:7e:28:2d:c5:94:d7:1f:84:48:d8:ac:80:18:
b2:79:45:04:24:8e:3f:36:c2:6c:0d:91:2f:79:2b:ae:da:6c:
7e:2a:05:66:ec:b9:f9:c4:e8:5e:7b:f6:bd:6b:79:19:79:aa:
b9:06:fd:c2:71:c3:a6:99:f8:3c:40:11:80:cb:37:d4:13:eb:
44:f4:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:18 2026 by rpki-client