Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: svGPn13rzx2thwsJ1Q4F45abuFq+2/cEuOdjZrclsdU=
Subject key identifier: 80:18:6C:BB:DC:77:40:82:88:9A:BC:9B:7D:E0:0F:A6:A4:8E:65:0B
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019DD12CF9688C4CA3FBD92E724937E6D8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0CC8
Signing time: Mon 27 Apr 2026 23:01:18 +0000
Manifest this update: Mon 27 Apr 2026 23:01:18 +0000
Manifest next update: Tue 28 Apr 2026 23:01:18 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: Ab75HYV7IZ7vZDAatlM4XzdIaEdgSxf+eKMVMKc/ijE=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:f9:68:8c:4c:a3:fb:d9:2e:72:49:37:e6:d8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Apr 27 23:01:18 2026 GMT
Not After : Apr 28 23:01:18 2026 GMT
Subject: CN=80186cbbdc774082889abc9b7de00fa6a48e650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:26:60:f8:50:9d:0b:0f:ce:2d:f8:cc:b1:
31:49:11:e6:d2:1c:78:cf:4f:b9:15:81:67:26:16:
ef:df:4a:01:f1:bd:80:96:21:58:01:1c:a2:e2:73:
17:20:02:eb:31:80:64:45:4b:7f:69:ea:4d:c4:16:
31:6e:e3:8c:50:55:4a:fd:e3:8f:8f:7f:50:74:2e:
26:b9:04:b9:03:31:30:84:12:37:d4:2d:22:2c:8e:
2f:17:d3:39:df:b0:4e:55:03:e4:a2:e0:fe:87:74:
09:89:94:f7:b5:f7:75:43:29:26:91:70:e4:82:12:
a2:39:ed:a0:65:61:cd:e0:fc:23:50:ce:30:23:51:
bb:c7:67:a8:57:fa:63:76:a5:93:9a:eb:eb:44:41:
f3:2e:8a:9b:3f:6a:de:f9:41:37:a8:30:f7:fb:08:
a8:11:14:24:84:5f:58:11:91:32:e7:6c:7e:25:87:
53:03:2e:8f:f0:89:c0:d6:2f:f5:b2:76:20:a3:98:
26:0a:ad:e1:52:3c:c7:78:9a:d5:0e:5d:4f:c0:5c:
83:c5:35:6e:3c:24:1e:b3:e7:2e:1f:f6:71:3e:4c:
e5:22:ee:3b:41:54:01:10:5a:a8:8a:c3:1f:81:e8:
9a:d3:39:2d:c5:cd:b8:80:0e:7d:c3:de:33:c1:13:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:6C:BB:DC:77:40:82:88:9A:BC:9B:7D:E0:0F:A6:A4:8E:65:0B
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:dc:7f:34:c2:e9:4a:fc:04:7d:9a:bf:66:24:b3:f2:f6:
07:1d:c5:07:08:2a:e3:56:bd:db:ba:b3:65:e8:2f:18:d5:13:
95:0f:c8:38:d6:cb:fc:9a:26:95:a5:4e:75:c1:df:e0:d2:4e:
ba:f4:a9:a1:c3:f1:b4:01:f0:d7:5a:f4:40:6b:14:38:06:c6:
f6:10:47:3a:2c:2d:27:cb:aa:34:b1:aa:0c:ae:17:39:06:e7:
bc:cc:5f:23:23:39:1b:e6:a8:b5:4a:34:a2:a0:43:d9:02:43:
c9:10:95:2b:37:60:47:64:84:a9:da:92:66:a7:1b:ae:30:57:
c6:2d:3b:59:5a:db:d5:1f:73:d0:97:f1:48:0b:35:02:10:0f:
ce:d4:ed:92:11:84:77:ba:c8:7c:5c:07:5f:ee:3f:4a:5e:4d:
01:ed:68:7e:6f:bf:7f:5e:9e:e5:1a:b9:2a:ed:ff:cc:d8:22:
76:5c:80:9f:e6:02:29:b9:32:2a:e8:ba:a0:25:c3:86:6a:46:
2f:65:34:96:23:57:2a:a1:c0:88:a5:7f:e1:92:cc:8a:57:2f:
f0:b3:a7:d2:ce:7f:69:9e:bd:3a:90:88:f8:3c:3c:45:3b:42:
e3:6d:4e:b0:bb:1a:6f:e3:c2:b7:c7:30:fb:f5:42:4d:e9:57:
32:5b:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:21 2026 by rpki-client