Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: 7YJ4Lud8pNoEFk96Ir3nGsqcO4rGSFFCauowT/0iZHM=
Subject key identifier: AE:3A:0D:68:86:D3:99:80:BD:87:0F:4B:52:36:76:A6:6B:DA:3D:9A
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 01A0CEFFE1B90945FE37BD93CD2D54B1B812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0EFC
Signing time: Wed 23 Sep 2026 16:01:10 +0000
Manifest this update: Wed 23 Sep 2026 16:01:10 +0000
Manifest next update: Thu 24 Sep 2026 16:01:10 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: SHZfVy94fX8WVnYgh7Bnu3EvZ+KjNDbL54RHiErIEws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:e1:b9:09:45:fe:37:bd:93:cd:2d:54:b1:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Sep 23 16:01:10 2026 GMT
Not After : Sep 24 16:01:10 2026 GMT
Subject: CN=ae3a0d6886d39980bd870f4b523676a66bda3d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:07:db:aa:b8:b0:48:4b:1d:ff:f1:fd:39:
42:1e:cf:e9:55:97:13:56:71:ec:a2:45:e8:b2:39:
11:c0:9f:88:e5:1d:4b:f9:6d:0f:38:97:a6:c0:44:
f7:5d:7e:59:dc:17:f2:64:be:20:41:cd:d1:cd:5d:
f0:5f:58:00:3b:4c:b9:f1:18:72:81:88:6a:f1:6b:
65:93:58:60:5d:71:c2:ed:03:8b:76:94:ca:b9:7f:
9e:e8:e7:ad:2a:dd:80:76:37:22:27:26:92:b3:40:
3c:ba:1d:31:78:b9:d2:74:e7:f2:08:fe:83:eb:0d:
e9:dc:1f:50:15:a4:21:b6:fe:c5:14:24:31:79:f5:
f0:0b:d7:0c:48:de:38:7d:67:ad:4b:58:bf:18:ec:
79:ab:21:6f:d8:85:05:b1:43:96:81:25:b7:6a:8c:
97:5a:e5:cc:03:d4:31:18:cc:df:fe:15:ca:a7:a3:
5a:0f:45:9b:c1:b2:1d:9c:2a:a9:36:22:87:3e:12:
db:95:b7:3c:57:1e:32:11:f6:ec:6b:c4:6f:27:39:
3f:fa:aa:6c:11:a4:17:a0:a3:b7:b3:1f:30:3e:06:
70:bd:06:fe:e2:08:d9:ac:3f:bf:76:ea:5a:b7:03:
94:c4:fe:2c:3c:e6:09:fb:fb:14:11:1c:17:93:3f:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:0D:68:86:D3:99:80:BD:87:0F:4B:52:36:76:A6:6B:DA:3D:9A
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:3c:40:d1:28:6c:07:4d:8a:87:46:c2:54:cc:ec:64:68:
d3:58:69:0e:d6:b6:19:60:f1:0a:1d:b4:db:0d:fc:75:22:a9:
c0:a5:2e:e2:cb:5c:6d:65:2a:21:4c:d9:ca:9c:10:c2:51:0b:
e6:b1:e0:7b:49:f8:2b:4d:28:a6:71:9d:c6:54:cb:7f:35:eb:
61:0b:1d:e7:a4:70:46:80:cb:1d:72:3d:59:d0:ea:bb:f7:f9:
36:fd:41:b3:0c:e0:5b:c3:9f:da:2d:0d:0b:28:82:6d:98:e2:
1d:3b:73:81:2b:a3:0b:b0:09:2c:3a:5c:47:1f:13:c7:3b:be:
13:01:04:43:0b:0c:d2:4c:94:0a:9d:e8:26:ca:b2:f7:fc:91:
47:64:82:e7:85:f6:a3:3c:24:1e:f4:49:3a:61:3c:97:61:5e:
64:e7:f5:ca:26:34:da:fd:c6:e5:5c:9b:92:dd:56:1b:36:46:
ca:96:57:46:76:d8:51:d0:ef:97:07:bf:34:3a:a6:7b:78:0d:
c8:eb:16:f4:01:e6:94:2f:de:e4:4f:05:a1:37:e9:30:2b:5c:
79:2a:f4:7f:36:b4:c8:8d:77:d5:fd:d9:65:e9:e4:8e:89:c1:
af:69:0f:98:f8:34:76:71:d5:5f:f7:68:42:49:3a:b0:26:8c:
b0:c6:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:41:34 2026 by rpki-client