Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: XMGC8KHLhMF5/spy2QgpgvFBc5PO/3kdHK9HWT/4D5E=
Subject key identifier: 1B:FD:B8:74:33:C5:86:CD:BB:FB:CD:E6:55:04:C4:8E:2A:1A:AA:8D
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01A0D79653C6B429DED423CEF112B150C69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0E59
Signing time: Fri 25 Sep 2026 08:02:28 +0000
Manifest this update: Fri 25 Sep 2026 08:02:28 +0000
Manifest next update: Sat 26 Sep 2026 08:02:28 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: axG4M7EPM05s0VldlNrLvBP5MK9Un/j1urQebaC3gQ0=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:53:c6:b4:29:de:d4:23:ce:f1:12:b1:50:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Sep 25 08:02:28 2026 GMT
Not After : Sep 26 08:02:28 2026 GMT
Subject: CN=1bfdb87433c586cdbbfbcde65504c48e2a1aaa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:29:c2:d4:78:84:98:6a:29:3a:2b:51:b0:
75:94:0c:7d:60:8b:cc:8f:9a:c5:c3:23:48:3f:bc:
c5:23:00:9b:23:18:e9:e0:ef:00:60:9c:21:bf:e8:
2d:e9:f7:93:42:97:d1:b2:68:dd:e8:62:3a:87:69:
e4:92:a5:3d:5e:37:26:c9:e0:56:0f:76:15:e1:76:
68:f7:ea:d1:a7:2f:3b:d3:e3:02:95:1e:ea:68:d3:
90:13:0a:2b:49:9a:a4:8a:c5:95:26:ab:72:1b:72:
a3:c7:02:1b:6e:1f:c3:76:6f:16:9c:ec:8a:39:03:
d1:26:5c:3f:0d:b5:75:1e:82:7e:92:c4:03:f4:60:
23:79:d7:67:fc:7e:d7:c2:33:3c:cc:fc:3a:57:bf:
93:f9:26:ec:14:82:cb:0f:30:64:bd:29:78:44:22:
dc:4a:d6:9c:5a:23:2b:64:0c:b6:13:60:af:34:22:
00:24:15:00:d6:24:52:39:23:ee:dc:bc:57:9f:3d:
91:7f:e1:e5:ec:5a:1a:6a:7b:e6:e1:93:e2:0c:2f:
f0:95:2c:ee:e5:5b:78:c3:76:e8:9e:05:68:49:ff:
9d:d3:02:0b:f1:65:08:bf:6e:d1:f2:f3:df:ba:60:
a5:9e:f1:74:8f:27:9c:ad:14:ca:be:08:bd:b3:ed:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:B8:74:33:C5:86:CD:BB:FB:CD:E6:55:04:C4:8E:2A:1A:AA:8D
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:52:5b:34:fd:9c:03:2e:16:c6:e7:c0:f8:93:a9:e5:7d:
54:9a:a5:f7:e3:de:a7:22:a4:50:ba:3e:dc:ab:4b:c6:6a:d8:
c0:68:b2:97:d1:c1:66:64:69:95:21:f1:53:51:f7:2c:6d:bc:
4c:9c:3b:f9:c9:4f:54:69:fe:c9:e7:84:b9:78:59:52:05:3f:
fd:2b:08:44:c7:6f:a0:f1:db:8a:d2:f5:a9:ac:bb:f9:7c:01:
0b:02:61:63:31:fc:79:b5:fa:53:c5:ba:00:9d:05:40:b6:fc:
04:35:2d:96:95:59:00:0d:e2:cb:c0:b6:d1:bf:a9:3d:63:07:
19:b4:44:3e:30:0a:0f:35:02:f0:0c:3b:79:48:f1:40:8a:c1:
7a:83:8c:06:84:4b:e1:4c:08:fc:f6:aa:1c:cf:ff:a8:e9:8d:
75:5c:50:c2:59:dc:23:55:43:4e:9f:3b:e4:35:f0:9a:d1:00:
12:a1:c7:bf:25:27:87:a9:4e:c8:dd:03:b8:3a:e2:1a:4d:b3:
14:98:22:9d:f0:cd:1a:ce:f1:95:c6:a3:f2:1a:53:80:09:3c:
30:94:88:0f:f5:8c:a6:53:2a:93:22:b8:18:34:3e:e1:fb:72:
2a:ec:b6:27:1b:1b:95:e9:f2:a5:24:0c:1e:ed:90:5e:8c:24:
c9:64:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:30:07 2026 by rpki-client