Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: hmqThvMXSMkGkWQlJjPN+J/RIkkOXEXLjlUQzUoECFE=
Subject key identifier: C8:6B:D9:6E:9B:7A:23:AD:26:BF:25:24:25:7F:C5:FA:87:F2:6F:23
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01A08A554A6488491E328A9EE40AA2367CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0E31
Signing time: Thu 10 Sep 2026 08:00:40 +0000
Manifest this update: Thu 10 Sep 2026 08:00:40 +0000
Manifest next update: Fri 11 Sep 2026 08:00:40 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: F0Jn8+Ou3nExJtmRZs+rjXxjRMzfa9QQgn60CPI19/s=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:4a:64:88:49:1e:32:8a:9e:e4:0a:a2:36:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Sep 10 08:00:40 2026 GMT
Not After : Sep 11 08:00:40 2026 GMT
Subject: CN=c86bd96e9b7a23ad26bf2524257fc5fa87f26f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:a1:ce:e2:10:eb:a2:64:2a:14:61:fa:a0:
85:4c:17:32:f9:6b:d1:15:bb:6d:3e:9c:f0:02:bd:
6c:ef:25:a3:82:23:18:02:24:c7:48:80:62:e3:a6:
82:f4:c0:e6:9d:95:d5:5b:f9:5d:1f:7b:79:e6:78:
ea:63:e6:47:79:31:e4:aa:cb:ec:e5:4e:bf:21:5c:
11:1a:88:5b:bf:52:3e:f3:f2:48:90:a7:1d:49:7d:
51:cb:9b:08:15:39:24:c6:d8:f2:27:9d:c5:8c:2d:
3e:d4:3f:52:59:eb:d1:9d:07:6a:50:9d:80:87:a5:
84:77:52:3c:07:9c:4c:8d:66:f7:75:da:5b:0b:03:
13:d8:cd:44:08:d6:43:b1:5b:cf:f6:70:0f:a6:7c:
80:61:96:3f:99:f7:8e:57:0d:ce:8d:3b:4b:5d:26:
cd:f2:f0:2d:b7:ad:10:b1:6c:53:c6:5b:03:db:6c:
cd:02:61:d5:26:13:00:66:c7:c8:8d:c5:96:3b:cc:
c5:6c:60:7a:b5:ad:d0:fb:91:40:36:61:07:e7:69:
cb:ea:fb:ac:39:c7:6c:ef:ee:1a:a9:06:cc:3a:9a:
fa:4e:73:11:c1:6c:48:b6:cf:d0:06:9c:71:32:6d:
9a:6e:e0:d2:61:9d:e5:ae:ca:63:0b:2d:db:18:8c:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:D9:6E:9B:7A:23:AD:26:BF:25:24:25:7F:C5:FA:87:F2:6F:23
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:d8:bb:5a:7a:c1:81:77:66:98:9b:3c:eb:9a:c9:36:69:
a7:0f:7a:71:2f:b6:a3:ac:17:42:3f:f9:09:c4:f9:ec:f7:d1:
1f:04:e3:61:11:47:99:bc:e3:f1:b9:57:b6:1e:a5:90:32:f7:
e1:25:dd:b9:49:09:77:e9:fb:fe:f1:46:8f:22:89:f0:d5:76:
18:c3:2e:19:d0:44:8b:50:5d:d0:6e:de:91:a9:7f:1e:7a:0c:
39:7b:38:d1:86:7c:d4:16:00:d3:b4:cf:0e:2f:fc:bd:34:95:
a5:54:27:26:ec:4d:73:0c:96:71:e9:4c:64:55:d4:ec:4d:76:
29:ad:06:7d:b1:2d:65:56:bd:aa:5f:10:0e:36:3a:41:b6:1d:
bc:ca:55:9e:16:3e:a3:10:1a:1f:96:0f:27:b1:2f:8a:f3:76:
71:e9:c9:eb:23:25:02:62:c5:aa:74:96:39:70:8b:be:aa:97:
21:85:78:33:06:8a:0a:f5:61:30:0f:38:0c:89:ad:06:73:5f:
82:d2:c4:84:61:40:35:9f:e3:4f:4c:61:d4:03:27:89:f4:dd:
cf:9a:76:64:a7:28:54:f6:74:77:c1:3d:2b:0b:49:2e:cc:03:
31:bf:ed:94:08:37:7b:61:d3:31:54:c8:94:c8:1c:65:bc:2a:
78:ff:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:41 2026 by rpki-client