Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: JGQzVJlBwlTyLHwONTJM/T6K9epVnQIsTwKhQhdzVtk=
Subject key identifier: F9:64:83:E1:F6:8B:83:9B:F4:DC:C3:C7:F8:A9:50:82:40:60:16:0A
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019D992B3F3A58B0471E2CEC977191D7B4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 0685
Signing time: Fri 17 Apr 2026 02:00:41 +0000
Manifest this update: Fri 17 Apr 2026 02:00:41 +0000
Manifest next update: Sat 18 Apr 2026 02:00:41 +0000
Files and hashes: 1: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: hVwYk5TdZzb/7MhkXvEbIHZ8HMGddqEvtV1hJGmUKJI=)
2: j7EcdTVdpUhojTeG57M6lKnsMnE.roa (hash: Fq6R274Vo4z+UeWj5Q+OONHLBGJAcI1+7ZlArfIpltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3f:3a:58:b0:47:1e:2c:ec:97:71:91:d7:b4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Apr 17 02:00:41 2026 GMT
Not After : Apr 18 02:00:41 2026 GMT
Subject: CN=f96483e1f68b839bf4dcc3c7f8a950824060160a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:35:8c:0c:1e:8c:2a:38:54:e5:9a:ac:09:
1b:e2:11:0a:a9:4f:69:d8:b0:84:86:b8:4c:be:33:
68:c5:d0:55:b3:72:bd:a7:ea:b6:e9:a9:ff:a1:c9:
79:ec:fe:db:d7:fc:6d:71:c9:3d:bd:ff:06:17:72:
1a:80:55:13:67:42:fe:fd:bc:49:15:f6:18:d2:12:
d6:f0:d6:8e:f5:60:31:be:fd:59:94:84:bd:55:66:
5b:ee:c5:3c:d3:7e:58:0f:91:a1:f6:21:ae:ed:82:
d9:5d:68:bd:62:07:33:e4:d1:d1:15:d5:03:b2:44:
a7:e7:e7:ab:cf:b7:0e:69:31:07:ac:ba:cd:aa:fa:
88:c9:89:2a:e3:2c:02:79:a9:76:e6:ca:47:45:aa:
9b:40:0c:a2:e3:d0:6c:ed:60:c3:0c:33:5b:df:31:
71:b7:70:7b:f8:64:8f:22:4f:72:32:06:e1:84:d2:
6f:4e:f7:19:8e:3f:b8:27:8d:d7:36:44:aa:65:33:
4a:6c:4a:40:8e:97:f6:a0:40:a9:83:1c:aa:88:da:
09:bb:94:ba:e2:23:5f:47:b1:bd:4e:cf:f6:3d:1a:
17:7b:81:61:d2:f3:5c:6c:19:d7:7a:08:48:19:42:
2b:fa:be:e3:6c:9b:98:0d:86:13:ae:0a:63:3d:be:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:83:E1:F6:8B:83:9B:F4:DC:C3:C7:F8:A9:50:82:40:60:16:0A
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:9f:fa:89:99:00:ae:e9:55:b7:c1:ca:e0:39:ed:d7:e7:
39:ef:d8:fe:b0:f1:25:78:b3:24:2f:d6:3c:a3:0d:d6:bd:41:
d1:27:29:c7:e0:13:5e:09:78:27:22:a6:36:10:0b:d2:d1:0e:
6c:b3:14:2b:d7:9e:28:51:00:47:b9:f7:c4:24:7c:db:5b:1c:
c8:5e:d3:df:b2:8c:23:d6:a9:7b:00:b5:e1:df:04:ba:26:c3:
87:7a:56:6b:27:16:bd:e6:4c:22:fa:9f:43:b0:44:4a:98:6f:
35:71:e2:b3:ec:8f:e2:26:aa:41:47:01:aa:ad:2a:82:07:44:
6d:d0:c6:7c:66:58:6c:ee:36:b4:1e:db:dc:cd:61:31:38:50:
8e:ab:d7:dc:92:b4:24:e0:15:f6:9b:10:5b:7a:35:e0:15:6c:
7a:d2:90:00:bf:b2:54:73:d6:b0:da:e6:e4:ae:d5:9d:b8:82:
0c:b0:ca:da:0b:09:dc:88:98:a1:6c:cc:08:a1:54:86:0c:4e:
c0:55:c0:9d:f1:34:72:83:83:5c:5b:92:f9:1b:fc:43:a9:aa:
e6:14:29:b4:3d:a5:41:2b:a0:c3:e6:4c:30:e3:7a:8c:1c:89:
34:31:83:e3:e3:69:bb:d7:38:76:e0:77:c0:73:8c:35:50:3a:
d7:5d:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:40 2026 by rpki-client