Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: eKvsngHiPFQbgzPoPS/ebPZkDgNx4mdWfQHHrjuu+ZA=
Subject key identifier: BE:F1:2A:66:82:DC:41:A2:77:6C:C9:DB:2E:D3:03:F5:78:21:B9:46
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019FAC3F2870C32B6D4E8F03980878A49FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0DBE
Signing time: Wed 29 Jul 2026 05:00:47 +0000
Manifest this update: Wed 29 Jul 2026 05:00:47 +0000
Manifest next update: Thu 30 Jul 2026 05:00:47 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 4KHKnizaRhQSTpyDxztI2m+lSNFOo7czIMNDgGiCyO0=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:28:70:c3:2b:6d:4e:8f:03:98:08:78:a4:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jul 29 05:00:47 2026 GMT
Not After : Jul 30 05:00:47 2026 GMT
Subject: CN=bef12a6682dc41a2776cc9db2ed303f57821b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:f1:48:bd:2e:59:82:59:be:6d:d0:40:e6:
55:67:5d:e6:14:7d:26:40:98:a1:97:40:79:a3:7e:
86:0b:1c:7b:d1:2c:3a:32:03:1d:8d:52:ca:ca:a1:
84:8f:59:cb:08:21:10:f1:f0:e2:89:59:8d:48:0a:
06:3c:a6:fe:d1:54:8a:71:1d:d4:ff:ff:a1:5b:53:
bc:ef:97:9e:86:98:e5:4c:c4:33:86:ae:15:03:14:
13:b4:bc:08:5c:0e:fb:2f:09:d0:14:92:a6:71:a4:
ef:f2:45:5d:70:3e:39:23:13:a8:5a:e8:fd:ff:29:
77:74:ab:9d:e5:85:11:57:af:14:68:0d:88:37:84:
42:19:0f:36:54:af:26:46:2e:1c:98:93:3c:3d:c7:
23:d2:4b:dd:15:f0:92:22:dd:e9:ed:fe:e0:a5:0e:
0a:b3:78:fd:7d:da:bb:90:9a:9a:c9:25:18:bd:a0:
7a:99:e7:4c:9f:02:b9:b5:81:8a:a2:97:66:85:b6:
81:e7:46:18:58:e7:3c:79:55:70:0f:3d:d7:f6:60:
59:8a:8c:5d:89:0c:6a:10:6b:00:34:cd:b5:78:18:
6c:71:d4:9f:37:7a:42:9e:10:e8:47:34:39:13:f4:
3e:d7:71:d7:e5:12:90:da:a7:06:c1:67:bc:e5:b1:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:2A:66:82:DC:41:A2:77:6C:C9:DB:2E:D3:03:F5:78:21:B9:46
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7e:0b:64:c0:d0:55:8e:a8:50:86:b2:c8:5f:93:bd:4e:2d:
1f:2d:59:90:7a:7d:de:aa:a8:e0:6c:18:06:f6:62:a3:0a:a0:
ce:33:d7:f7:27:1b:a9:60:06:da:fa:66:5a:8a:56:e5:00:f0:
65:41:8d:07:c0:ad:6d:c4:2b:7f:b0:4e:0c:2d:65:32:2b:5f:
16:1c:ed:f5:17:7b:d5:65:e3:54:3c:18:eb:db:bb:fb:9d:07:
58:c4:a5:3a:76:dd:c8:d6:20:44:e7:cf:9b:d1:1c:55:a9:f4:
66:ca:bf:16:0f:2c:29:79:d3:cc:f6:9e:7c:d5:9a:56:1b:89:
7f:72:cf:83:59:16:74:e2:bb:05:c2:2c:ba:a6:b5:84:fe:d6:
51:47:37:0a:86:2a:65:16:64:b9:ab:80:f1:3e:4f:f0:04:c2:
5b:8b:e8:ce:5d:7e:7e:db:da:e7:1d:a8:b1:4d:cc:fe:ca:29:
2e:a5:96:56:c2:72:6c:ba:4e:1a:69:39:f4:3b:bf:dc:7e:45:
53:51:88:71:4e:ad:f0:2a:46:f9:fc:4c:2d:e7:70:f9:96:b6:
d9:08:1c:47:f0:0a:b7:bf:e4:5e:4c:a8:7e:48:4a:e2:36:8b:
6c:9b:a4:49:66:8d:ba:06:8f:d6:02:68:20:87:45:0e:95:75:
98:44:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:35:45 2026 by rpki-client