Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
File: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft (raw, json)
Hash identifier: mq+iPKK8YW4q6RXK+hkTGUxDff3IOJ82zFPKX5enwyk=
Subject key identifier: 7E:27:94:F5:B2:A7:0A:10:7D:04:AC:AE:F2:97:C1:4B:C6:35:25:58
Authority key identifier: A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
Certificate issuer: /CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Certificate serial: 019D9BBE3B6F6580F6B486BEB66844295F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
Manifest number: 73
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: 8zHxjb_mmV0JsMrNprnGTu9CPmU.roa (hash: xguh2vgCy/zW4Ej9WmgnSI8V8ugA63OiLSYijedgqr0=)
2: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl (hash: xdXKXl0Q4Q1nqj86+nRczKpA8JPMnIx4CTtQBJMlYyw=)
3: pMAiTF1ySg9ogcwhwA1KzWh15ZU.roa (hash: cD1iyHvMqU0IUOL/sirhVf8EXZ1S7JtYKgjAxXeAnfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3b:6f:65:80:f6:b4:86:be:b6:68:44:29:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=7e2794f5b2a70a107d04acaef297c14bc6352558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:fe:20:60:df:55:e3:d2:b1:28:21:5d:24:
64:6e:3c:fb:5e:34:9c:39:95:45:2d:d3:4f:30:11:
a6:39:3c:5b:f7:49:be:7c:94:9d:40:05:48:dc:25:
44:2a:e8:73:bd:c4:2d:b8:b7:75:fc:e1:44:d6:f5:
fb:09:72:81:f0:d5:7e:58:ea:aa:7b:a1:62:d5:c7:
ff:87:eb:42:0a:57:77:69:6c:7b:8e:af:8a:d9:1b:
ec:81:76:74:94:fb:bd:75:74:dd:62:c1:b3:29:99:
9e:db:54:fa:b1:9d:19:f4:fb:eb:e8:90:bf:87:0f:
29:77:21:10:14:51:47:bb:a2:2d:6c:91:aa:79:bf:
4b:39:b4:b9:b4:40:91:15:1c:2f:6a:9d:91:ca:07:
e0:d7:91:98:60:5c:4f:dd:c9:94:49:7e:08:b5:74:
27:78:97:5c:b4:87:27:cc:32:10:6a:b2:e2:2f:36:
4d:db:9e:d8:ef:24:99:ed:7b:3d:93:36:a6:f9:e7:
c4:60:e4:90:ca:92:4f:7a:6d:01:55:81:da:4f:5c:
17:cd:e9:e2:b5:87:91:0a:9f:e2:7d:7a:c1:be:51:
6b:88:79:bf:0f:05:04:82:6d:89:17:07:c1:92:5b:
42:47:62:ee:cb:fe:8e:9a:26:c5:db:52:25:5c:42:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:94:F5:B2:A7:0A:10:7D:04:AC:AE:F2:97:C1:4B:C6:35:25:58
X509v3 Authority Key Identifier:
keyid:A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:c9:99:12:66:a9:de:d2:2f:c6:6a:96:e9:5c:b9:5a:f9:
1f:e4:bc:92:a6:40:07:45:a7:6a:51:ca:1c:3d:a6:05:18:c9:
b5:e9:cb:bb:a4:43:04:2f:46:4a:48:a7:f4:f5:14:5c:aa:fa:
3b:52:9b:22:bf:1d:4b:38:cc:78:8c:7c:76:79:6b:ea:d9:ae:
0c:ab:01:f9:b1:6a:17:e9:88:25:40:f1:e6:54:86:ae:8d:2b:
1a:7e:ab:c4:8a:69:a3:96:c7:15:65:80:35:45:07:27:16:0f:
03:ec:d9:88:0e:83:94:e8:dc:72:d3:a3:a1:b5:9e:52:1e:16:
96:f3:de:c5:2e:89:8c:dd:53:07:b9:1e:3f:f9:84:16:93:ab:
8d:c8:bc:2d:3a:95:18:43:92:a2:e6:87:86:c8:d1:f6:88:f2:
40:8c:69:1d:c7:5d:39:2c:e7:1d:76:b5:18:07:6a:0c:fd:f5:
15:88:36:a9:67:91:e2:9f:3b:d3:2a:5a:1d:59:72:29:9c:1f:
49:ed:e0:d7:bb:e6:38:43:ec:5b:91:7d:e9:e8:ff:9a:33:0a:
b3:71:25:b3:58:37:bf:26:18:12:6c:2e:29:ac:b8:3b:63:61:
6e:53:8e:ae:ee:63:b6:40:f4:52:75:ab:4b:99:ec:b5:6b:dc:
56:71:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:17 2026 by rpki-client