Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: HY5k4A4tOifUz7v7R03OxsQeLMNsuZG4quVjNqFGXS0=
Subject key identifier: 04:31:D5:C7:DE:46:77:CE:33:68:6F:E6:EB:E7:0A:59:FA:F3:50:F1
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019CABD9C7540EDDB36DC89F110B73C1C92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 13D7
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: Rk2MCvhwf6H2Cgc3CYOM1ZJfsKhPei8FGZG4P6SyqUQ=)
2: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (hash: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c7:54:0e:dd:b3:6d:c8:9f:11:0b:73:c1:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=0431d5c7de4677ce33686fe6ebe70a59faf350f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:7d:39:71:15:fb:46:e3:49:fa:9a:6f:f5:
61:91:e8:d1:3c:16:3d:a2:d8:1f:62:91:52:7f:d1:
62:59:72:67:a7:e2:10:a5:35:d5:d9:d6:30:6a:1c:
1e:ed:2c:ef:51:4c:4e:2d:ba:db:d6:86:a5:83:6a:
f7:5e:f9:c5:bd:0b:51:6e:f8:56:6e:3e:a5:1c:2d:
c5:50:18:6c:78:2e:77:26:75:17:b6:70:82:cd:c3:
6b:a7:90:9e:85:63:d2:2c:db:f0:f3:d4:90:3f:8d:
ee:99:90:d6:15:d1:ad:c4:5e:06:b6:e3:62:a5:23:
35:45:83:78:f3:8b:e5:bd:ca:07:38:84:0c:58:da:
95:ea:6f:84:ba:d3:f3:72:56:37:eb:ff:53:23:ac:
64:0d:3d:e4:c1:36:1a:92:ec:a3:7d:8e:a7:a4:fd:
2c:ac:5a:6b:71:80:d6:7a:fa:d5:f6:95:68:bc:23:
54:df:48:23:9f:ff:77:ed:f6:3d:12:69:e1:4f:e5:
5f:a5:ea:c3:81:25:fe:73:88:91:ad:62:cd:36:c3:
02:38:20:4f:c3:8b:48:d9:de:e2:a7:78:91:63:21:
d4:9e:c0:a8:a0:6f:ee:c4:31:7f:ae:8e:b4:ab:90:
a2:83:40:0a:cb:48:96:fc:40:13:10:1e:47:14:ec:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:D5:C7:DE:46:77:CE:33:68:6F:E6:EB:E7:0A:59:FA:F3:50:F1
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d6:fd:24:f9:5c:55:7d:9d:32:82:74:b0:23:1e:0c:17:18:
f5:f1:20:73:91:ab:9d:a6:65:b5:ea:1f:4e:74:91:c7:b7:79:
b6:c4:e7:e9:08:30:21:be:26:51:3d:cc:db:14:17:5b:c9:61:
f1:05:d7:3e:28:d7:36:98:56:1c:b2:ba:f1:5a:29:53:73:3f:
d3:6e:53:72:41:d4:a2:a6:4a:f8:4c:61:29:e9:a4:05:04:5b:
22:7d:7a:43:bb:dd:db:ae:fa:9b:9d:5a:4b:88:36:be:8f:0a:
4e:3d:25:89:ab:1c:f5:c1:52:e2:07:68:2f:5c:fb:75:a8:0d:
fb:b3:e7:16:cb:f3:9e:ba:62:76:21:d1:44:42:4e:f7:a7:f2:
f7:88:c2:b0:36:c0:c5:7e:91:16:75:20:eb:08:bf:d4:45:2e:
84:74:32:ce:20:92:ae:09:75:d4:61:d0:54:b0:7c:75:8c:ac:
37:b3:ef:60:90:f1:aa:69:d8:08:58:64:bd:8b:00:48:0b:09:
b9:b2:15:ff:83:82:5b:3f:68:08:93:01:8c:a0:98:79:6b:6b:
7b:ea:0a:5d:3e:8a:13:a1:b4:ca:c2:41:0d:e5:aa:0a:37:17:
be:d3:b7:73:06:9b:a8:3d:67:39:30:eb:8f:9e:f5:77:fe:50:
de:4c:2b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cdUDt2zbcifEQtzwckqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0
YjI0ZGYwHhcNMjYwMzAyMDAwMTQyWhcNMjYwMzAzMDAwMTQyWjAzMTEwLwYDVQQD
EygwNDMxZDVjN2RlNDY3N2NlMzM2ODZmZTZlYmU3MGE1OWZhZjM1MGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVR9OXEV+0bjSfqab/VhkejRPBY9
otgfYpFSf9FiWXJnp+IQpTXV2dYwahwe7SzvUUxOLbrb1oalg2r3XvnFvQtRbvhW
bj6lHC3FUBhseC53JnUXtnCCzcNrp5CehWPSLNvw89SQP43umZDWFdGtxF4GtuNi
pSM1RYN484vlvcoHOIQMWNqV6m+EutPzclY36/9TI6xkDT3kwTYakuyjfY6npP0s
rFprcYDWevrV9pVovCNU30gjn/937fY9EmnhT+VfperDgSX+c4iRrWLNNsMCOCBP
w4tI2d7ip3iRYyHUnsCooG/uxDF/ro60q5Cig0AKy0iW/EATEB5HFOxSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQx1cfeRnfOM2hv5uvnCln681DxMB8GA1UdIwQY
MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct
NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5
LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdb9JPlc
VX2dMoJ0sCMeDBcY9fEgc5GrnaZlteofTnSRx7d5tsTn6QgwIb4mUT3M2xQXW8lh
8QXXPijXNphWHLK68VopU3M/025TckHUoqZK+ExhKemkBQRbIn16Q7vd2676m51a
S4g2vo8KTj0liasc9cFS4gdoL1z7dagN+7PnFsvznrpidiHRREJO96fy94jCsDbA
xX6RFnUg6wi/1EUuhHQyziCSrgl11GHQVLB8dYysN7PvYJDxqmnYCFhkvYsASAsJ
ubIV/4OCWz9oCJMBjKCYeWtre+oKXT6KE6G0ysJBDeWqCjcXvtO3cwabqD1nOTDr
j571d/5Q3kwriA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:31 2026 by rpki-client