Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: ky2Tm5brHgXqDfpteSeHKkbGGwH8/i8PChlIkuZBwto=
Subject key identifier: 6F:22:9D:2B:7C:4E:30:55:DF:45:B1:90:B9:FC:B8:7F:55:F2:13:16
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 01A0C7469EAC81E9BE5DA93610D33C4302DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0EF8
Signing time: Tue 22 Sep 2026 04:01:29 +0000
Manifest this update: Tue 22 Sep 2026 04:01:29 +0000
Manifest next update: Wed 23 Sep 2026 04:01:29 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: Y8eMGxiuzdsBgG2iqEdwJl7G7oCVCYmUAd/LyES6qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:9e:ac:81:e9:be:5d:a9:36:10:d3:3c:43:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Sep 22 04:01:29 2026 GMT
Not After : Sep 23 04:01:29 2026 GMT
Subject: CN=6f229d2b7c4e3055df45b190b9fcb87f55f21316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:c7:fc:09:53:e0:59:1f:09:7c:ac:ea:84:
c2:8c:9b:41:a5:4b:8f:16:3e:9a:cc:c0:87:61:1c:
52:13:8b:0c:e1:7b:ce:83:26:e6:07:d1:0c:76:57:
a3:aa:1d:1d:ce:6d:32:30:2a:41:1c:83:5f:e3:fa:
39:6c:7a:ed:4b:cc:11:aa:00:6d:8a:68:ad:6a:56:
b2:7a:ef:58:37:34:c4:9f:a7:8a:ed:64:22:b8:da:
a7:11:84:5e:0a:d4:84:6b:0a:62:00:e6:7d:02:60:
ba:d6:fa:4f:34:21:74:35:03:83:08:8f:5b:e4:60:
a3:91:9f:e3:eb:03:99:fd:1d:2a:de:6f:82:b4:8c:
a5:2b:a2:d4:30:7a:4c:55:d3:dc:eb:34:06:66:8d:
27:f6:e2:01:14:2c:82:7a:a6:00:fb:74:6a:02:0c:
19:b2:63:7d:06:53:fd:15:a0:bb:a1:79:c5:49:ca:
30:52:a8:e2:0b:2a:87:db:9e:16:89:54:59:09:90:
67:df:0b:ed:e3:f9:48:1f:9a:56:30:36:fb:7b:5d:
b7:d2:f9:6b:24:ea:57:f8:cb:14:c5:89:61:9f:29:
70:98:aa:f8:e7:3f:b3:c6:1d:44:42:07:84:77:aa:
6e:21:4c:c1:22:d2:fd:c8:6f:49:24:8b:21:07:64:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:9D:2B:7C:4E:30:55:DF:45:B1:90:B9:FC:B8:7F:55:F2:13:16
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:97:dd:51:53:d3:35:e7:b5:df:03:02:9d:49:53:3b:b5:fc:
c8:e6:9b:26:47:dd:f9:63:4d:a2:62:aa:c0:20:b2:f4:d0:8a:
fc:65:1e:4a:6e:fc:cb:05:3a:91:80:b5:cc:65:5b:58:b7:8a:
8b:d6:8c:8d:6c:bd:4c:23:54:42:b2:fc:14:8a:bf:85:0a:87:
24:f0:23:38:48:72:5b:dc:9d:b4:ed:60:54:f1:41:c5:9d:9e:
11:c7:64:c6:e8:19:ea:bf:ed:09:06:86:22:5f:bd:5a:77:3e:
25:8f:cb:0c:6d:f4:35:c9:69:e4:bb:ec:ab:95:ce:1d:86:40:
42:eb:00:4a:63:2e:6e:f9:42:a8:cb:b3:c1:52:e8:a8:19:d1:
fe:a8:bc:b8:6d:b2:13:fd:35:21:d0:75:06:6f:2a:38:33:8f:
ad:d5:b4:76:5d:85:9a:8f:83:2c:a6:09:20:1a:7f:9e:31:6e:
54:e4:c8:de:07:f0:c1:cd:45:8c:be:3d:0a:ba:37:2c:97:8d:
09:fb:8a:67:5d:70:c1:68:b5:3e:4d:76:49:c4:41:ad:c7:60:
45:4c:6b:47:9e:da:04:36:ca:c9:15:f1:d3:9a:a6:eb:01:69:
da:b4:8d:67:c7:5e:d7:db:05:b2:53:11:55:af:92:31:d6:f6:
6c:37:bc:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRp6sgem+Xak2ENM8QwLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5
ZDM2OGQwHhcNMjYwOTIyMDQwMTI5WhcNMjYwOTIzMDQwMTI5WjAzMTEwLwYDVQQD
Eyg2ZjIyOWQyYjdjNGUzMDU1ZGY0NWIxOTBiOWZjYjg3ZjU1ZjIxMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpzH/AlT4FkfCXys6oTCjJtBpUuP
Fj6azMCHYRxSE4sM4XvOgybmB9EMdlejqh0dzm0yMCpBHINf4/o5bHrtS8wRqgBt
imitalayeu9YNzTEn6eK7WQiuNqnEYReCtSEawpiAOZ9AmC61vpPNCF0NQODCI9b
5GCjkZ/j6wOZ/R0q3m+CtIylK6LUMHpMVdPc6zQGZo0n9uIBFCyCeqYA+3RqAgwZ
smN9BlP9FaC7oXnFScowUqjiCyqH254WiVRZCZBn3wvt4/lIH5pWMDb7e1230vlr
JOpX+MsUxYlhnylwmKr45z+zxh1EQgeEd6puIUzBItL9yG9JJIshB2TNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8inSt8TjBV30WxkLn8uH9V8hMWMB8GA1UdIwQY
MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt
MzEyZTViNDkxMTQ2LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2
LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZfdUVPT
Nee13wMCnUlTO7X8yOabJkfd+WNNomKqwCCy9NCK/GUeSm78ywU6kYC1zGVbWLeK
i9aMjWy9TCNUQrL8FIq/hQqHJPAjOEhyW9ydtO1gVPFBxZ2eEcdkxugZ6r/tCQaG
Il+9Wnc+JY/LDG30Nclp5Lvsq5XOHYZAQusASmMubvlCqMuzwVLoqBnR/qi8uG2y
E/01IdB1Bm8qODOPrdW0dl2Fmo+DLKYJIBp/njFuVOTI3gfwwc1FjL49Cro3LJeN
CfuKZ11wwWi1Pk12ScRBrcdgRUxrR57aBDbKyRXx05qm6wFp2rSNZ8de19sFslMR
Va+SMdb2bDe8JQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:07:51 2026 by rpki-client