Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: iMqmenpA6A+Jqk99gfg+MYQ+Flr6CsTZcoChNr4uG9w=
Subject key identifier: 33:D2:69:4A:4D:F2:F5:7B:32:6F:E3:B5:D6:91:E7:78:C9:35:27:C3
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019EB8EAD29569947E6307D7F5D83147BD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0D40
Signing time: Thu 11 Jun 2026 23:00:57 +0000
Manifest this update: Thu 11 Jun 2026 23:00:57 +0000
Manifest next update: Fri 12 Jun 2026 23:00:57 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: p8f4scefs182eZ9L07CjDf6xutpSauNNhLsbKInk/NU=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:d2:95:69:94:7e:63:07:d7:f5:d8:31:47:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jun 11 23:00:57 2026 GMT
Not After : Jun 12 23:00:57 2026 GMT
Subject: CN=33d2694a4df2f57b326fe3b5d691e778c93527c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:2c:05:4f:d2:75:ab:db:d2:22:9d:69:91:
66:3d:13:1e:f8:9e:fe:4f:42:e7:38:de:00:03:25:
8b:68:b9:3f:b7:a6:d7:4c:70:02:c6:72:b4:1f:85:
30:8d:31:2b:41:5d:29:09:89:2b:f1:30:08:29:ac:
be:40:12:52:0c:35:cd:24:81:b6:91:aa:32:f9:02:
51:e0:dd:2e:73:50:61:fc:01:ff:a0:05:bd:8d:74:
24:cb:31:d6:ed:a4:36:99:6d:3f:be:a2:61:8a:93:
e3:87:43:81:04:72:2b:90:09:24:99:88:79:50:a9:
96:67:10:2e:d5:d5:e4:2f:3c:6c:c6:a7:6e:36:cb:
cd:31:b1:e0:5e:57:2d:cb:c0:fc:b5:da:26:82:cd:
ac:38:23:7f:56:83:7d:60:81:25:b4:04:f5:d5:d4:
40:a1:7b:14:ce:19:27:ea:d8:66:b4:25:4a:30:c0:
73:55:34:cc:5e:e6:e6:e2:4e:03:55:49:51:05:16:
86:07:86:aa:52:ec:89:99:e1:2f:8e:91:1f:58:25:
e8:b1:48:55:68:c5:da:65:77:1d:d9:07:84:a5:12:
d2:f0:d4:58:04:7b:e8:24:99:75:07:6f:73:32:2a:
9c:88:d9:1f:bd:a1:bd:bc:47:5e:dc:d1:65:32:ec:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D2:69:4A:4D:F2:F5:7B:32:6F:E3:B5:D6:91:E7:78:C9:35:27:C3
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:26:d0:34:15:f2:b6:5b:b2:69:34:fc:52:d4:7b:2c:c3:23:
f3:33:19:20:e0:eb:b6:ef:8c:1d:d8:2c:d2:7c:f5:cc:8a:2e:
f1:57:a3:b8:38:6e:6b:27:10:9f:ca:67:5d:db:57:84:e0:55:
9f:96:25:22:76:0e:68:9b:61:32:d9:e0:35:83:e5:fd:9c:da:
fd:a8:b2:8e:90:f2:5b:b0:65:e5:65:fe:b4:37:ba:97:45:55:
41:a4:63:1d:49:22:86:59:d0:29:bd:61:4f:23:59:e9:e5:cf:
8e:97:46:c6:fb:d8:79:2f:2d:46:42:30:fd:57:cb:09:db:fc:
b6:55:45:58:99:c6:fa:44:4a:89:68:39:f7:db:29:b6:b7:a8:
87:fa:b2:fd:74:81:84:d3:c9:9a:0e:db:55:07:d8:32:a3:25:
aa:db:d7:75:a4:a5:33:d5:2a:76:8b:56:c1:2b:fd:e9:7e:f5:
a4:fd:f1:fb:76:c2:69:2f:a4:06:53:94:14:73:bb:91:82:6f:
1a:24:4e:a4:15:e0:19:bf:7f:b4:d7:15:c2:65:01:d2:30:f0:
55:89:5a:9f:b2:f1:0a:ca:23:d8:28:70:75:48:0a:e4:47:2f:
34:61:73:fb:78:46:33:dc:1b:7f:47:38:3c:da:54:89:37:d3:
85:cc:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:45:57 2026 by rpki-client