Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: iuFtiDbOEfqfzN/Fl7/iSZ1hfquZJQGnAyBhkyqhoQY=
Subject key identifier: C7:84:41:2F:CB:F4:9F:3B:BA:38:D4:19:58:84:66:0A:9F:3D:02:64
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019E1E6C095689609CE214CA4E9742610473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0CF0
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: TSnKgtt9qTOHMtbhaEfH/adCHFfqt8+Qv3z3/f8xt1o=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:09:56:89:60:9c:e2:14:ca:4e:97:42:61:04:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=c784412fcbf49f3bba38d4195884660a9f3d0264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:7b:07:1f:c7:58:c1:c6:74:da:90:c2:b3:
4c:83:87:c1:08:25:21:dd:33:1f:2b:08:cf:f4:fd:
2b:c2:6c:4d:56:49:e1:6c:2d:cf:35:1f:dd:51:0b:
c7:63:af:40:6a:5f:a3:c1:e4:6c:51:c8:a6:3c:72:
e3:69:94:d9:16:83:cf:c9:9b:44:15:c1:69:8e:a3:
10:0f:0f:4f:63:6f:4f:03:13:0a:6d:a5:6a:1b:0f:
67:23:7e:5f:16:29:b0:1f:e9:1c:da:2e:c4:9e:31:
c8:40:e4:bf:21:ea:8a:11:c0:dc:3c:04:61:70:dd:
94:0e:71:e0:4f:5c:a3:b6:3b:e7:65:10:f3:3d:29:
eb:a3:bd:63:21:fe:ae:13:4f:43:f9:47:ae:9a:f3:
c7:7a:0b:9f:d2:b7:55:30:84:92:8a:37:a8:83:4a:
41:be:1a:3c:b5:e7:aa:a0:f9:34:4f:15:98:5f:8e:
4c:8b:ae:82:1b:0c:74:eb:c2:40:66:d7:92:0b:18:
33:1b:80:49:03:13:e2:02:b3:e1:20:21:a7:e0:95:
6a:75:b4:4c:e0:ef:25:32:9e:58:67:48:f3:47:d7:
87:51:46:03:42:68:d9:f1:4e:38:10:66:76:d0:1e:
25:00:78:1b:1a:6d:11:78:1f:e4:ba:cf:42:7c:44:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:41:2F:CB:F4:9F:3B:BA:38:D4:19:58:84:66:0A:9F:3D:02:64
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:49:01:c3:fd:d0:e7:62:00:4c:d8:7a:4e:0b:86:d2:48:
aa:02:26:f8:e6:32:21:8d:41:68:1b:4f:ae:47:a7:9b:88:29:
5c:9f:ed:15:f3:e9:c2:08:b8:42:fc:3c:c4:78:0e:ce:7c:55:
23:6e:64:ea:8d:5f:53:6a:0f:dc:90:26:c5:d8:2d:fe:20:cc:
75:1e:18:1a:db:98:6e:57:e0:80:f1:2b:0f:9f:19:83:cc:35:
94:f1:c9:b4:53:4e:b6:c8:be:04:00:0f:14:e7:fc:35:86:b1:
77:63:cf:b4:fb:50:76:46:9c:bd:34:d5:cf:f6:6e:0c:85:71:
6b:eb:38:f4:33:b4:2a:21:2d:31:5f:c1:81:64:fe:a0:f8:be:
34:e0:7d:27:91:fd:b3:45:ed:ff:e6:24:20:98:63:b1:14:3c:
9c:9a:12:2b:50:a5:4b:13:10:2e:ae:08:0f:a3:0e:4e:1f:78:
f9:bd:2f:04:9a:b3:81:3e:55:02:bc:8e:f0:d7:23:64:f8:13:
fc:27:5c:5f:88:3d:e9:8a:bc:08:6d:37:f3:a9:06:f4:a0:ad:
63:b4:4e:56:ef:c0:22:c4:d8:ec:00:e2:5c:ec:8c:6e:9d:aa:
4a:f8:98:58:73:18:01:6e:8a:37:b1:7e:6f:1e:89:8e:7e:82:
c1:af:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:58 2026 by rpki-client