Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: 2tfaVWgTnL9DtXq/gVCnSD5nKuInlkQ50BMaxhapT+M=
Subject key identifier: 5D:14:36:7B:BE:4F:8C:15:6C:82:4C:B2:D0:F5:65:6F:EF:AC:C4:51
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 019FAB631C9BCD7F1C0FF9338A2FCCA39AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0E65
Signing time: Wed 29 Jul 2026 01:00:26 +0000
Manifest this update: Wed 29 Jul 2026 01:00:26 +0000
Manifest next update: Thu 30 Jul 2026 01:00:26 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: VeRUhlGktgeHBgXxhSr+lVA9rh6v/alCqE74VYoWcM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:1c:9b:cd:7f:1c:0f:f9:33:8a:2f:cc:a3:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jul 29 01:00:26 2026 GMT
Not After : Jul 30 01:00:26 2026 GMT
Subject: CN=5d14367bbe4f8c156c824cb2d0f5656fefacc451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:c8:4b:e4:24:b8:49:b2:94:f6:67:e7:6d:
38:a7:2c:b0:04:be:46:be:62:73:39:6d:d9:aa:67:
33:82:73:a0:7f:84:30:3c:cb:23:21:ea:46:69:50:
44:e4:c4:49:7b:a0:c2:d4:1d:0b:7d:a1:27:c9:19:
2e:12:59:b8:72:3f:34:30:78:4b:4e:15:90:7e:f4:
fa:51:27:af:8c:9b:9e:ff:61:5d:8f:60:9a:65:53:
f5:59:b5:7b:77:c0:ca:aa:32:05:8f:92:cd:3f:d4:
26:18:12:e8:9f:07:d3:9f:d8:59:7f:e9:c9:d2:31:
e0:90:83:59:c2:33:a3:08:62:86:1c:6e:48:cd:e0:
2b:60:53:d7:88:78:23:07:a4:ff:37:8b:cf:d7:c5:
a6:5a:97:88:b1:4e:6e:25:e3:42:7e:f5:73:59:e6:
98:28:24:ef:8a:f2:29:1a:1a:b2:f1:57:14:d4:fd:
88:50:20:14:a3:d0:97:7d:c1:7b:3c:0d:22:ad:88:
be:38:0e:4e:db:4a:31:ba:f0:2a:7f:4b:ea:dd:18:
ac:21:6b:65:5f:fe:3c:3e:85:45:61:dc:80:e3:fb:
2c:20:9f:36:a8:2a:13:a9:2e:79:c0:79:b2:20:4f:
c9:c7:f7:fa:92:6b:73:d8:3b:ac:a4:2f:b4:c0:e9:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:36:7B:BE:4F:8C:15:6C:82:4C:B2:D0:F5:65:6F:EF:AC:C4:51
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:32:03:a3:74:fa:2b:26:48:61:46:27:8b:e9:bb:1c:00:d2:
58:2a:1a:f9:89:e2:c9:36:fa:54:3e:9b:fb:a2:16:44:44:65:
a0:78:65:4e:c5:30:cd:cc:48:bc:30:37:05:3f:e2:55:56:04:
b7:23:9b:fa:65:0f:50:20:08:8f:52:02:50:f5:73:c1:a1:27:
0e:76:14:1c:a5:17:eb:70:5a:a4:ce:fe:70:75:1f:44:d5:8f:
28:e9:b3:7f:1b:5b:e0:08:bd:9a:b8:1e:a2:8e:9d:a4:b6:b6:
ab:51:f2:ff:f2:7c:37:f9:87:b0:c6:eb:ed:db:9c:32:62:4d:
36:7b:26:56:ff:35:6f:4a:c4:01:12:5a:fa:cd:a8:42:5b:9e:
f8:f3:65:4d:58:d7:cd:6e:2a:a6:39:3f:ec:60:af:9f:fe:95:
f9:00:43:be:30:49:52:b2:a4:39:96:73:06:13:e8:4e:49:67:
f5:64:a2:2e:9f:a3:18:0c:80:64:6b:f1:83:92:16:11:dd:63:
31:45:0f:f1:dc:77:4c:32:1e:94:e2:08:ce:cd:7c:95:7d:35:
53:cc:18:50:74:29:59:e7:07:bd:f7:94:3b:8a:45:bc:64:cf:
c4:69:3f:aa:e0:4c:45:7f:d7:94:e6:ee:a2:de:32:4e:23:52:
bc:66:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:37 2026 by rpki-client