Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: 9Hny2ruR4NO1Vf3nKc0PYtcvALK5u0pAnaeO2ISmgOc=
Subject key identifier: 70:70:9A:35:8F:E2:09:0F:90:E6:78:16:D1:A1:91:A4:3F:4D:24:BD
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019D992B27D64B7C41676ECF43CFFA8B184A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0CAB
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: NqhqKcrdg002JpKF5vup6n+xYd8SXLCKypnS3pqsPyM=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:27:d6:4b:7c:41:67:6e:cf:43:cf:fa:8b:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=70709a358fe2090f90e67816d1a191a43f4d24bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:db:54:2f:b3:e7:70:88:d3:54:6b:b8:24:
4a:fa:73:ed:00:d6:ef:bd:2d:6f:56:32:45:85:ac:
b6:a1:da:bc:a2:23:60:e7:f8:37:54:20:7d:92:82:
31:67:e1:80:ad:94:61:2e:7d:92:24:3c:81:51:9c:
12:9b:12:24:75:d0:81:4c:9d:50:52:78:a3:67:6e:
e3:d6:2c:26:67:93:ce:e7:9b:41:2d:85:c2:cf:5c:
47:c9:37:ed:15:99:2b:b7:35:b3:2b:1c:63:97:d2:
3e:07:59:25:8d:b4:23:5c:b5:19:10:0f:13:e3:4d:
bb:b1:e0:03:92:13:81:6a:88:6c:58:e9:48:51:0f:
9b:78:41:7b:26:29:d3:3c:2e:2f:47:3e:ed:89:6f:
19:c3:bb:d8:e2:d5:78:04:4f:76:3d:12:95:59:36:
a5:a7:fc:bd:4e:47:cd:01:9e:aa:12:ad:6a:97:ba:
e2:e0:61:82:61:82:6d:18:c9:97:74:f0:fa:a4:f1:
5e:12:0b:d9:f0:d9:09:69:18:ab:9a:68:a1:99:99:
ac:08:5c:53:4f:ea:b8:3d:20:9e:76:d1:6d:46:2a:
17:62:0f:b4:4e:3d:96:aa:99:90:7e:85:c2:58:38:
21:70:94:3c:ce:0a:19:44:e6:cd:7d:39:cd:6c:aa:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:9A:35:8F:E2:09:0F:90:E6:78:16:D1:A1:91:A4:3F:4D:24:BD
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:1f:c1:ca:d6:2c:ab:38:65:7f:30:fc:28:08:8c:21:9b:
25:f6:c6:0a:a7:19:92:b2:7b:d7:08:6a:47:1b:9e:60:01:57:
c1:8e:49:b1:8c:63:03:62:ab:51:a8:67:35:85:ba:fb:40:49:
70:e4:25:83:83:9d:3a:67:a9:49:55:43:7c:da:fa:be:fb:0f:
6b:56:4a:a3:01:1b:90:49:55:de:c7:44:25:61:66:34:54:e1:
b9:27:2a:d8:f0:8a:46:e5:d3:9e:fc:75:81:c5:f1:72:4a:6c:
8c:45:e2:ae:d5:19:8e:a2:d0:5a:97:84:a4:a1:b1:f8:d8:1a:
5a:1e:89:8c:61:c0:8a:00:e8:28:73:9f:d8:7c:85:88:80:26:
97:9a:76:6c:29:3e:e5:11:a2:c1:fe:76:31:a1:fa:47:b6:e1:
25:41:67:81:ac:a1:22:85:7e:3e:3d:7d:2a:a4:35:89:de:bf:
66:80:14:af:f5:ea:f0:2b:64:bd:a0:14:a3:97:7a:be:cb:64:
e8:6e:1f:f9:fb:43:bb:e9:16:24:d6:d9:64:1a:66:b7:6c:e8:
73:20:b7:67:00:82:f2:04:de:83:eb:6e:78:c2:8a:18:00:83:
4b:73:79:f7:ad:d4:23:18:69:15:02:46:97:06:0b:9e:d4:ac:
1b:95:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:41 2026 by rpki-client