Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: XoXg2Y5QynnIXHZWhSq+VoMML4mF2Wz29YG+p7FwA7k=
Subject key identifier: FC:86:62:5F:B6:EE:B6:DF:9F:C6:2A:4E:F6:45:17:E1:B2:B7:76:65
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01A17DAA937BF8D229A4316030F696BCDB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0EAF
Signing time: Tue 27 Oct 2026 14:01:33 +0000
Manifest this update: Tue 27 Oct 2026 14:01:33 +0000
Manifest next update: Wed 28 Oct 2026 14:01:33 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: UX7/FyPow4rjmSNxXB1R+Pq11ffI2ElvgAKHxxaw1vo=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:93:7b:f8:d2:29:a4:31:60:30:f6:96:bc:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Oct 27 14:01:33 2026 GMT
Not After : Oct 28 14:01:33 2026 GMT
Subject: CN=fc86625fb6eeb6df9fc62a4ef64517e1b2b77665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:89:19:c7:5d:b7:80:ef:b5:fb:42:3b:88:
0f:bb:15:db:cc:17:50:50:92:be:2d:77:3c:53:bf:
e0:f4:27:4f:e5:d2:fe:b1:26:c7:58:39:41:b7:9c:
61:b0:97:a3:f3:6f:70:f6:88:2f:8e:66:4f:5a:e5:
e5:f4:41:33:84:9a:54:3c:e5:9b:5f:9e:24:9d:d6:
78:f1:3f:50:a9:80:28:6c:c6:e0:45:80:9f:41:09:
0f:58:3a:7b:2a:61:a0:8c:15:59:52:49:40:81:f3:
7f:c3:bd:09:1e:e5:d6:91:d9:88:be:74:0e:45:c4:
0d:d8:33:d4:ed:54:fe:af:bd:c7:20:90:2a:dc:26:
a0:d1:45:74:7b:d2:98:56:f7:e0:d0:15:10:91:14:
68:15:15:17:d6:fc:e1:39:71:64:ee:80:72:46:ca:
90:31:b4:8e:ea:d2:79:15:e3:53:ec:9d:a6:78:53:
e4:74:1e:9b:ad:9b:d8:b7:06:60:69:d6:ee:d5:cb:
09:d8:3d:6a:bb:25:e5:48:51:d8:c9:10:50:74:ba:
45:47:45:a4:35:21:09:6d:eb:10:da:e7:36:17:22:
b5:88:13:2b:84:85:94:5e:63:fe:a9:44:9b:2e:4e:
88:20:bb:6f:c5:bb:83:20:ce:0f:ae:9c:7b:51:2d:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:62:5F:B6:EE:B6:DF:9F:C6:2A:4E:F6:45:17:E1:B2:B7:76:65
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:f0:dd:35:18:6f:fc:ea:22:32:ef:eb:02:d6:1d:b6:19:
50:26:81:e8:e6:a6:dd:a1:3f:c7:19:70:2c:2e:a2:7d:9e:51:
37:46:9f:92:52:97:a1:6d:e2:42:ab:b1:12:89:e9:e4:b3:18:
48:56:90:32:e1:87:98:dc:c3:7f:a3:94:4a:f7:2f:ce:f0:e9:
8e:e8:4b:e2:07:41:22:89:8d:46:6c:f9:c5:a3:02:e9:63:2c:
a9:e2:17:ba:dc:06:5f:a4:f7:cc:97:c9:4d:09:4c:2f:6e:c6:
1f:f9:c3:44:8d:b2:55:ae:35:f3:d8:21:f8:73:b8:c0:04:cd:
a1:23:ce:9e:00:ea:fb:e8:82:85:fb:eb:5c:5f:ac:0b:75:67:
cc:c1:de:83:41:75:71:5d:2a:a5:5e:c4:4b:28:3b:7f:63:42:
db:ef:7c:97:71:d0:c6:2e:98:45:72:b1:d1:b2:d8:0d:14:4a:
05:34:33:c5:94:2b:71:f3:1b:02:9c:b0:78:b8:54:90:79:24:
b5:be:72:b9:62:1c:06:3f:44:02:08:e8:a9:44:3a:62:a1:06:
11:5b:4d:df:ec:65:4e:f7:7a:cd:a1:00:f9:12:ae:0f:23:87:
c4:8d:76:7a:3a:86:b6:0a:2a:81:bd:4d:71:2a:bf:17:0c:63:
56:5d:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:54 2026 by rpki-client