Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: 1Jqy0uNF6zFQxvrnnF30HmFEc0vxbGOa0NMHqLZb3l4=
Subject key identifier: 67:D9:59:F3:3C:3B:7D:76:4D:57:05:14:6B:90:47:2E:D4:41:C0:85
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019CAC103000C30620567A100A146570F060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 1581
Signing time: Mon 02 Mar 2026 01:01:07 +0000
Manifest this update: Mon 02 Mar 2026 01:01:07 +0000
Manifest next update: Tue 03 Mar 2026 01:01:07 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: mu9g/M/aalgtr92UqmsLYvUrxNY7STCUFMYaP2Ywxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:30:00:c3:06:20:56:7a:10:0a:14:65:70:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Mar 2 01:01:07 2026 GMT
Not After : Mar 3 01:01:07 2026 GMT
Subject: CN=67d959f33c3b7d764d5705146b90472ed441c085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:fd:29:16:c9:a6:05:7e:02:f5:91:05:b5:
63:69:86:e9:e7:e8:6f:30:55:30:c2:a3:8f:1e:f5:
c8:d9:3b:a0:96:d3:ea:59:c1:e3:3c:1d:87:5a:ab:
ae:1f:25:1c:5f:51:9f:02:7c:cd:b1:de:96:41:59:
1c:8d:e7:ae:37:bf:4a:fe:19:a5:d3:57:61:f9:aa:
90:b7:06:39:6c:3a:5c:8c:5e:f5:46:91:a2:31:b1:
19:83:ec:54:1a:e9:a3:8a:a9:c0:24:ab:02:0b:9f:
d3:0a:90:ef:04:de:2a:86:d6:1d:73:0b:e1:ed:c5:
ac:f6:0c:b9:13:82:f1:5a:aa:7d:52:d2:c5:7c:22:
44:31:41:f8:ac:ca:ec:67:f1:38:74:52:5f:3b:f8:
02:11:ec:b1:55:c8:08:51:fd:91:2f:50:4f:4f:c5:
8b:7c:cf:ca:0f:30:2f:f5:aa:fe:e9:3e:29:6f:9e:
7f:a3:3d:ff:71:34:2f:cd:76:fc:6a:b5:61:e9:42:
ec:ba:a9:a7:2b:db:15:9e:b4:dc:60:e4:b0:33:ae:
1b:e7:f6:da:9d:bc:a8:1c:ee:62:27:e5:f6:12:bb:
ee:22:26:9c:ab:bf:fa:51:c3:4b:76:23:d9:d0:a3:
b9:cf:4e:7d:40:de:cc:99:b0:97:66:24:3f:63:50:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:59:F3:3C:3B:7D:76:4D:57:05:14:6B:90:47:2E:D4:41:C0:85
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:5d:44:e9:d4:4a:7f:aa:db:49:72:27:a4:e9:0e:1e:39:
30:2a:1c:7a:96:b5:a0:6b:04:af:63:39:b6:16:fb:4b:e9:67:
2a:0a:a3:4a:a5:bf:25:10:0d:64:2f:37:85:de:f0:cc:96:71:
e8:01:5e:9c:bb:23:9a:32:de:87:b6:1b:41:93:ad:1c:75:aa:
3d:ee:b3:a5:3f:f9:3f:b2:be:2c:77:c0:4a:3e:49:02:70:63:
fc:96:43:e0:e1:e0:dc:8b:33:b9:4e:79:58:d8:de:ea:d6:f3:
ba:bc:8b:80:41:b7:eb:db:af:97:2b:26:63:9e:1b:17:76:92:
e5:7c:40:64:32:4a:98:4e:df:48:4f:75:46:77:6f:c4:f0:22:
d1:9a:23:13:e4:ad:39:73:fc:be:5e:cb:1d:dd:44:07:ad:43:
c9:91:b1:d4:c7:96:76:db:34:e4:4e:51:7f:87:0a:97:6d:3c:
f0:e1:8e:2c:8a:09:b9:da:69:1a:f8:52:e9:ba:87:ce:6e:98:
92:fb:ba:ea:29:cc:d7:71:f7:b5:cc:8b:b1:12:f8:df:b9:6b:
f8:f6:fc:35:51:fe:08:7a:a3:14:99:48:d7:15:29:1b:bd:ae:
fa:e8:b2:a8:7f:35:3e:5a:51:a6:16:1e:d7:1b:9e:a2:d0:e9:
f7:81:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:46 2026 by rpki-client