Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: 3Wjb3qQzp5nnVfFJa0LetrTleVtjC9kdyK4aJ1usSXw=
Subject key identifier: 28:84:EB:54:CF:58:F3:62:56:9C:B6:B3:7F:9D:1F:64:6F:B6:96:69
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01A0E32BB700E28F7D17FB6C3FF7DC538EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0E5F
Signing time: Sun 27 Sep 2026 14:01:27 +0000
Manifest this update: Sun 27 Sep 2026 14:01:27 +0000
Manifest next update: Mon 28 Sep 2026 14:01:27 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: F9vxcGqN28/CmzxYA5ILkbn2Ym9UxRMgd5T8bxoW25o=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:b7:00:e2:8f:7d:17:fb:6c:3f:f7:dc:53:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Sep 27 14:01:27 2026 GMT
Not After : Sep 28 14:01:27 2026 GMT
Subject: CN=2884eb54cf58f362569cb6b37f9d1f646fb69669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:4c:2a:20:b9:3b:fe:f0:37:d2:4b:5f:b7:
04:eb:ad:89:b8:02:55:4a:4b:05:27:0d:ff:5d:1b:
50:7b:69:d5:4a:47:fe:7f:d2:f8:b1:a8:fc:6e:ac:
94:b7:b4:32:b5:01:10:8c:c1:9f:02:e4:84:b4:94:
e2:6d:96:ab:e7:9a:de:3d:cc:1f:a0:aa:e3:1a:78:
85:77:49:1b:95:ca:c0:dd:6b:4b:ed:3c:6b:00:33:
b2:56:17:f0:d5:87:b3:f7:8c:51:62:a6:a4:9f:04:
e3:78:d3:34:76:e5:1d:da:a8:21:59:98:4f:44:cd:
7d:7a:64:a2:9a:3e:eb:43:31:39:79:51:4c:42:f0:
2e:36:a2:3b:03:01:0a:75:e5:c7:5f:7e:95:a8:c8:
60:b3:b6:d6:75:3f:92:3c:b7:61:2c:cc:3c:97:fc:
78:45:ea:90:09:7d:25:ef:d5:2e:f3:62:e6:6d:44:
47:ca:f3:e7:67:2b:e1:2a:39:7c:e8:6c:f3:3f:5e:
22:c0:36:a7:ad:8e:64:c5:5e:ca:42:87:53:92:93:
42:07:05:13:21:6d:a0:36:c9:ec:70:16:7c:ca:6b:
c6:d8:30:68:7c:63:87:b9:9e:29:d2:19:ce:df:fb:
44:29:46:42:71:47:4e:65:ca:21:37:29:f3:7d:a5:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:84:EB:54:CF:58:F3:62:56:9C:B6:B3:7F:9D:1F:64:6F:B6:96:69
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:35:c9:ac:c3:55:e2:ec:46:44:61:56:2b:cd:61:ff:4f:
0f:7e:c3:96:70:05:c4:9e:f7:52:03:49:01:ac:b5:4d:ce:58:
d1:a3:6a:47:69:79:d2:73:ce:84:1f:d1:3b:35:3e:fb:55:9c:
9b:b2:25:e2:9f:71:b3:c3:1a:4b:12:eb:84:5f:a8:d0:e3:dc:
4f:6b:c6:9e:df:bf:5f:28:49:c9:7d:6f:73:10:9b:f9:35:d9:
af:54:63:2f:df:0e:7b:30:6d:f9:96:ea:23:5b:fc:d8:57:c4:
ca:9d:91:23:2d:2c:d7:27:9f:f0:8d:2c:33:e0:9f:d0:0e:65:
7b:ea:8a:53:19:7b:4d:62:fb:59:0f:72:a9:10:af:9a:7f:88:
39:c5:94:27:4a:2d:ad:f4:74:80:55:80:0a:a8:c1:ff:32:32:
2e:56:b8:5f:29:71:e1:be:ff:63:92:7c:eb:27:3f:e4:e8:4f:
fe:56:ac:c1:97:52:68:83:ef:70:d7:b3:f5:a1:df:21:7e:b0:
1e:1f:fd:ff:27:c0:a7:aa:7b:02:37:4a:70:4b:78:c2:0b:42:
18:24:02:b0:af:ed:27:81:ac:d7:4a:3b:27:da:45:67:4d:cf:
b7:90:60:4a:91:95:c2:33:03:e9:dd:47:eb:49:fc:16:6e:72:
f3:5c:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:20:44 2026 by rpki-client