Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: Sfbct+rXsc6DHmVpB/O50XPzqtAqRI8Ym0VXN837y9g=
Subject key identifier: 00:43:76:CB:75:33:8C:72:7F:0D:AE:02:13:05:0D:5F:51:24:DD:B1
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019CABA1B86FBB73638B354F9F9BABB9622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 17AE
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: O4Vm5CUd43dAje+H9FB9P70qobJ3joQTlAeVi9agT/g=)
2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b8:6f:bb:73:63:8b:35:4f:9f:9b:ab:b9:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=004376cb75338c727f0dae0213050d5f5124ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:8a:71:6e:a9:1f:06:18:83:73:f2:1c:92:
a2:a6:c8:87:81:15:5d:e4:e2:65:22:5f:d5:cf:7b:
61:78:0c:42:95:37:bb:a0:43:02:9e:68:2b:c4:26:
a4:ac:4b:61:cd:6f:f3:6c:b0:72:70:dc:66:f1:4c:
5b:74:87:f3:b3:cb:35:ab:c6:a7:b3:18:09:e9:06:
6b:fd:22:fc:d6:81:b9:43:69:1e:79:1f:72:94:72:
4f:c7:f2:40:60:c7:a1:c7:83:3f:ba:0d:4f:d8:bf:
b8:70:ca:c0:5c:53:75:df:6e:85:9f:23:fc:c7:6d:
a3:42:5d:2b:82:a9:62:21:f9:20:d2:78:7a:95:2b:
57:49:d3:3c:48:b4:ea:ef:64:d9:20:88:33:0a:40:
a6:c6:44:f3:4b:4f:5e:97:51:5c:b0:a2:73:d6:7e:
aa:63:11:d1:e1:25:f3:22:58:af:94:f7:1c:a5:f5:
95:0b:a9:06:b0:36:65:5e:6e:71:9c:35:d6:75:fa:
2d:38:45:03:4b:ae:d5:1c:8d:ad:09:dc:6b:42:9d:
f0:7b:cf:44:92:c3:c0:a8:22:05:50:f2:a3:1d:a5:
f7:9e:d7:e0:56:fd:91:36:58:c9:0c:72:8f:6b:49:
ba:a7:bf:07:05:8c:70:ed:80:38:48:bb:42:d2:e4:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:43:76:CB:75:33:8C:72:7F:0D:AE:02:13:05:0D:5F:51:24:DD:B1
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:b2:bf:12:ae:ba:ba:8e:b1:89:7f:dd:9e:95:7e:9a:88:
37:ea:a8:23:b3:66:3c:64:e1:6a:28:89:23:16:c5:12:cc:ef:
78:b8:fd:6d:93:65:c7:1f:fa:b8:70:0b:58:b0:02:57:b4:3b:
76:67:e7:16:5f:ed:cf:57:9a:e1:58:03:4a:15:7e:80:de:84:
30:eb:ba:60:79:17:ad:59:9d:59:e0:b0:b0:ea:df:c1:d0:7f:
11:8a:3d:f3:a3:6f:2c:c9:7a:9f:ba:2d:4a:e8:f8:2d:ab:37:
b8:d4:9a:78:c4:19:99:6d:90:6a:ba:7b:57:73:8a:62:06:46:
67:c6:dc:9b:b6:9b:cb:76:fa:e9:70:f9:9b:ab:68:26:00:3d:
03:f8:7b:a6:3c:19:08:36:17:5f:56:6a:3d:16:d2:23:b1:d9:
4e:bd:e0:da:27:d6:ec:e3:a1:e1:b3:d7:7e:6e:59:68:42:b5:
06:cc:7e:56:80:80:69:36:8e:3c:c6:51:f3:03:16:5e:39:a5:
54:15:2b:11:91:fa:12:40:9e:56:34:e7:6d:6d:88:d6:87:75:
c9:88:cf:8f:bb:89:6e:44:79:32:84:9e:8d:be:e7:5a:65:f6:
40:93:86:ea:05:5c:bb:ad:fb:1b:fc:a8:83:4c:ba:2c:2d:df:
29:ce:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:32 2026 by rpki-client