Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: yuxUeMyc5ud89LWjqSRNsVYIGZUTDF5WUto7R4Imx7E=
Subject key identifier: 7B:59:E1:53:C2:44:FE:9B:2B:FA:B4:73:11:C7:77:6B:49:AF:7E:29
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019D273B3328301CCDD5D95B67456D8A5A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 17EE
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: u7vqJBOTqlwZ9ah1W7FAS7yXVxhrANrnaoPP54CDpTo=)
2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:33:28:30:1c:cd:d5:d9:5b:67:45:6d:8a:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=7b59e153c244fe9b2bfab47311c7776b49af7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:98:96:ec:63:2e:4a:fd:86:89:e4:9e:a7:
64:56:ec:83:50:1b:c3:61:49:ac:e3:81:27:6e:d4:
b6:21:70:dc:d7:9c:ab:70:c1:5e:96:d8:9e:19:e5:
21:33:39:b0:fe:6d:73:48:f5:19:0c:e4:fc:31:e2:
2e:3a:95:89:20:1d:c3:8a:09:4d:a0:42:30:a4:f0:
3b:c6:99:eb:ec:de:bd:6f:a1:7d:a4:21:85:81:ce:
e9:4e:92:46:f9:d6:8f:f1:6e:b4:d6:2c:43:bb:d9:
a5:e6:bc:dd:2d:b8:07:f2:09:39:d0:eb:ec:06:f4:
04:04:ae:a7:d2:c9:11:6e:88:41:7f:36:9f:be:8b:
be:22:90:f2:63:3e:6b:a0:46:8c:f0:04:75:f6:83:
a8:75:52:7c:15:7c:12:ba:35:62:21:5b:fb:29:53:
1d:a2:10:30:9e:bc:d0:02:79:66:3a:5d:42:ad:d0:
b2:c6:6e:a3:af:09:07:2a:a4:85:b2:84:e1:15:44:
2d:61:93:87:44:63:74:c4:3c:90:ff:ea:c2:46:8d:
e0:a3:a8:87:e7:d2:4d:60:e1:61:d7:05:9c:17:8e:
f0:97:be:45:52:ed:78:ea:8e:b1:1b:50:40:d8:a9:
36:a0:bd:73:4a:fa:0e:43:88:d5:35:a8:94:cb:07:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:E1:53:C2:44:FE:9B:2B:FA:B4:73:11:C7:77:6B:49:AF:7E:29
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:02:4e:be:51:4c:76:98:95:8c:2a:c8:26:ff:92:ac:f8:
57:e9:b3:50:8a:54:c4:1a:e4:a9:f6:35:43:cf:a2:ba:b4:89:
5b:73:b1:02:d4:d5:f4:02:df:4a:77:05:35:50:2c:99:d5:6c:
8e:2d:43:c5:99:fb:66:14:1b:90:1e:df:bb:fc:2a:7f:68:8b:
60:68:87:e1:b0:3a:ff:90:de:20:e9:06:6e:cf:04:90:e7:c1:
81:7e:df:37:25:bf:5d:3c:6e:ae:31:b0:f4:28:56:c4:f7:f7:
bc:2a:e6:78:d1:5a:d4:0e:1e:b2:f0:89:04:ee:6b:32:b2:2e:
56:09:98:5b:f8:a7:e1:c4:a4:e2:ba:0d:ca:c1:e9:ad:47:50:
de:d5:fa:31:f9:85:fa:70:3b:24:10:40:de:1e:14:07:a4:68:
77:78:34:fc:e3:18:9e:a1:3f:02:9a:8c:78:00:49:b6:bc:d0:
ae:8e:e2:41:aa:fd:04:04:6c:4b:d6:bd:ea:71:fe:29:a8:ee:
fc:8e:89:6e:6b:14:eb:be:02:98:86:b2:32:66:3a:d7:1b:e8:
61:df:35:cc:8f:a3:a6:21:1f:a7:6a:8d:98:91:9e:9d:36:5a:
85:ac:d1:ae:c9:05:65:4b:42:01:94:de:af:46:02:59:54:cc:
2b:fa:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:51 2026 by rpki-client