Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: k5G2r7zRJ2xTQp8j+l1tS6dT8xoQNHE7BwJR5pSbhmI=
Subject key identifier: BD:FD:EA:52:B2:B6:DD:4B:D6:98:7F:56:EA:BF:00:01:B8:60:57:1B
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019F93246B2E2DF5CBAA1A2B65A5450FDE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0DB1
Signing time: Fri 24 Jul 2026 08:01:05 +0000
Manifest this update: Fri 24 Jul 2026 08:01:05 +0000
Manifest next update: Sat 25 Jul 2026 08:01:05 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 54lBHMpkN6mXtvrz+rgrftOzVoJrH5caZCyITMGa/Ac=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:6b:2e:2d:f5:cb:aa:1a:2b:65:a5:45:0f:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jul 24 08:01:05 2026 GMT
Not After : Jul 25 08:01:05 2026 GMT
Subject: CN=bdfdea52b2b6dd4bd6987f56eabf0001b860571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:c9:72:e7:d8:2a:4c:4a:5c:e6:3f:75:a0:
d5:c5:30:75:b7:2a:5d:b6:85:2d:85:ca:47:eb:67:
0c:06:ea:f7:c8:a6:c7:5c:b4:6f:15:8e:8c:0e:4b:
03:cf:75:b4:43:d4:2b:92:34:2b:c2:d3:e0:95:51:
92:c9:07:b1:86:3f:81:a9:0b:a6:19:21:3c:9d:e4:
03:76:36:a1:6f:92:fc:fe:71:90:e1:40:b2:02:24:
98:94:e1:8d:36:2f:5a:1b:4d:cf:06:80:a8:52:a5:
cf:6d:0e:3f:6f:fb:56:9a:d5:0f:d7:b5:3e:c3:1d:
a5:f2:65:86:e1:dd:0a:79:9b:e1:3f:b6:e2:08:55:
e5:9b:ec:a6:9d:5f:89:52:12:25:b4:b3:5e:a2:29:
c8:54:36:2a:fd:e0:c3:2d:f9:5f:89:b5:29:66:61:
92:30:b2:26:99:a8:09:2c:85:e4:c2:99:c6:a4:eb:
2d:ed:b4:07:22:fe:60:b0:67:fc:0a:2a:08:65:04:
e0:15:13:60:15:c6:01:c8:af:b5:1f:d5:ab:0c:cf:
b5:d9:04:b3:1e:a8:98:49:88:c4:4c:c8:d8:27:cd:
1a:92:55:45:da:e9:be:48:44:d7:00:db:4b:b1:c1:
5e:bb:37:cb:6f:af:84:08:ad:64:4a:14:0c:71:8a:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:EA:52:B2:B6:DD:4B:D6:98:7F:56:EA:BF:00:01:B8:60:57:1B
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ee:2a:51:9c:dc:e7:b7:23:cf:b5:82:27:89:25:e8:c5:ee:
3f:ba:67:94:25:92:cb:c4:c5:4d:d6:67:0a:d4:b8:e8:98:89:
60:38:5e:87:98:83:3d:03:5f:77:59:d9:b0:e1:52:03:d9:30:
e1:46:14:0f:d4:8e:9f:b4:62:02:5c:fc:5a:c2:db:c4:23:47:
b7:11:df:2d:57:da:75:f5:9f:d3:8d:d1:c4:7f:f6:12:1c:cc:
c9:5b:ff:96:90:a0:8d:9d:59:e5:fe:6f:93:2b:83:6f:47:4e:
34:1b:05:32:11:d5:4a:c1:21:ea:54:26:a3:42:e9:94:67:b0:
09:96:d8:95:f1:63:e0:df:4d:64:b3:bc:d4:87:ea:87:12:f7:
c9:ba:60:8f:e8:14:ac:a5:1b:b0:4a:1b:0f:e6:d0:21:42:c4:
3f:fd:ce:2f:91:55:53:9b:25:51:85:4e:ea:7e:43:34:a5:16:
e2:ad:37:7e:01:84:ba:d1:92:0d:91:ec:4e:1c:50:0f:54:0d:
86:f5:ef:85:4f:0e:48:4d:01:61:ba:d9:37:fd:0f:0d:3e:7f:
7f:7c:64:84:d1:e5:8f:2e:28:0b:dd:b5:00:c6:04:9e:58:0f:
a5:37:cd:91:9d:a5:71:46:cb:c4:bb:ee:bb:80:3d:96:11:c0:
e3:26:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:53 2026 by rpki-client