Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: FcsCACFNrJEoFX4NLjbD4LraL5w8hwqB0v3TyQUtoN0=
Subject key identifier: 44:0E:49:FE:4D:4F:F5:DB:72:4F:A7:AE:14:1F:AC:99:40:55:6D:5B
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019D26601493FEEC779AC32155052CFBEFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 02A6
Signing time: Wed 25 Mar 2026 19:02:04 +0000
Manifest this update: Wed 25 Mar 2026 19:02:04 +0000
Manifest next update: Thu 26 Mar 2026 19:02:04 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: I2lBPVuVdQTo6jJNXYHj2YhFWeFhtAdCW0EyvXu+F80=)
2: xjtZklR-zKEZ526c5JfoxAgcZ98.roa (hash: P/TjyPt4uvrFDGoV5aG27wuJfG3S4it2FVzEdH8POos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:14:93:fe:ec:77:9a:c3:21:55:05:2c:fb:ef:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Mar 25 19:02:04 2026 GMT
Not After : Mar 26 19:02:04 2026 GMT
Subject: CN=440e49fe4d4ff5db724fa7ae141fac9940556d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:2f:a0:0c:c5:4e:c2:b6:e1:5b:10:51:ed:
e5:5e:b9:6e:f0:06:9b:42:ed:89:7a:0e:ef:03:4f:
03:de:b1:05:d1:68:04:03:5c:e7:f4:2a:0a:95:20:
e3:59:66:b0:dc:b3:d4:33:2c:01:08:d0:57:de:30:
37:3e:3e:67:35:d1:96:db:89:7f:e3:f1:a0:ea:0b:
f6:6a:d8:d7:4c:ae:d8:ac:29:60:2b:dc:f8:d9:77:
21:e3:2a:d0:7f:1b:c3:06:1f:30:07:7f:05:60:0c:
b2:d1:fe:e0:d0:3d:85:e3:79:11:b1:e3:b4:a8:2c:
c5:d7:89:02:7a:4d:ed:83:36:76:03:f3:40:76:df:
cd:c3:2a:f1:75:d3:9d:fe:85:dc:00:7a:36:dd:73:
53:bf:01:90:1f:44:44:4a:7d:8d:47:c8:f4:84:f4:
26:75:a5:78:8a:fa:af:3e:e6:e7:90:11:ce:77:75:
85:e9:e5:7e:ae:1b:5e:d4:1c:45:6b:ce:11:fd:b6:
7e:fa:4d:86:4b:43:73:4d:d2:b0:2a:da:9a:4a:ad:
17:88:1f:d0:b1:d4:b6:c9:65:c1:8b:7c:26:0a:01:
97:a2:a6:5c:9c:7d:80:db:a9:9b:28:9d:66:90:f5:
b4:aa:76:31:73:72:bd:52:0a:19:2c:34:cd:ec:bc:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:49:FE:4D:4F:F5:DB:72:4F:A7:AE:14:1F:AC:99:40:55:6D:5B
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:61:2a:6e:d3:d0:12:a8:9e:1b:e4:09:4a:d4:11:9b:01:ad:
4b:a5:00:c8:35:f8:ef:90:41:7e:9b:19:ed:7e:fa:f8:80:88:
ca:0a:78:6d:a9:38:e1:14:8a:bb:0d:0b:fd:97:97:16:cb:e1:
4d:c1:a3:ca:1b:c5:6d:72:e7:1f:84:fd:b6:98:0c:bb:86:84:
96:eb:ca:4d:16:13:7c:73:34:9e:70:bc:18:58:30:54:b2:f7:
18:51:71:54:40:67:e3:ed:3b:cd:ae:ee:a0:10:91:3e:03:f3:
cd:c6:b3:60:f9:6c:8b:23:eb:39:42:e7:70:09:b1:4d:2c:ca:
26:6d:03:f8:ea:2f:70:7b:fa:0d:8c:21:80:98:7d:67:e7:33:
1f:58:2b:31:be:6f:63:94:92:9c:ce:08:9b:50:5e:6a:c1:bd:
04:65:1d:02:a1:ff:5f:0a:eb:a1:3d:93:3a:c7:c1:ff:0e:0e:
ae:85:66:27:98:3a:79:52:14:cb:56:44:99:ae:d7:45:e5:2e:
92:a9:4f:2f:4f:b8:3a:7d:73:d2:f8:19:8e:d5:18:b1:b8:3f:
88:71:6a:70:59:9f:17:34:a0:5e:c0:4b:27:54:7c:df:87:5e:
97:ad:a5:c1:8c:01:53:f0:87:1c:70:38:aa:35:46:a3:05:f8:
74:76:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:59 2026 by rpki-client