Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: wtSUjvBCpEx2rZdeZvecZxGSrahxkvcNZ9534YxXqLI=
Subject key identifier: C1:51:A5:68:50:11:CD:1F:8E:2E:7A:BC:FB:0B:81:66:A7:03:1B:4A
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019CE5913E3CB0A5222E538ABCEE0DC821AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0C4E
Signing time: Fri 13 Mar 2026 05:00:26 +0000
Manifest this update: Fri 13 Mar 2026 05:00:26 +0000
Manifest next update: Sat 14 Mar 2026 05:00:26 +0000
Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: m+4JJZ/8zF7Qwrtxqo2MwSrf5ooGuyncX/2BZ1jBdAM=)
3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:3e:3c:b0:a5:22:2e:53:8a:bc:ee:0d:c8:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Mar 13 05:00:26 2026 GMT
Not After : Mar 14 05:00:26 2026 GMT
Subject: CN=c151a5685011cd1f8e2e7abcfb0b8166a7031b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:77:8e:d1:15:f2:a0:ae:3c:74:0d:3a:ae:
0f:1e:f0:ad:9c:5a:78:89:dc:f8:9e:23:9a:f0:12:
6d:c6:b3:10:8e:35:b7:17:28:ad:0a:28:47:90:0c:
1f:f9:0c:11:25:d0:d9:b8:f1:c3:f8:30:03:b9:3f:
56:2c:d4:30:34:e3:6d:b3:6f:4b:50:6a:69:23:62:
9c:06:75:a7:8f:78:1b:a4:4d:16:55:5c:68:04:04:
77:dd:c8:c8:94:1e:ab:54:85:21:6c:88:5d:51:ba:
94:2a:d7:27:61:76:82:2c:b2:3a:db:e7:d1:b3:73:
ab:8a:57:a7:cd:22:02:f0:b6:5c:ad:4a:2a:64:29:
24:d0:7d:7e:f5:a3:92:21:96:8f:eb:ed:ef:5d:1b:
42:04:4f:19:a6:76:da:05:b9:18:53:9a:6f:05:80:
c5:02:50:30:81:0c:f6:64:db:20:31:0f:0f:ef:30:
ba:28:1f:9f:71:1b:36:8c:02:e0:db:ae:ad:9f:c5:
d6:8b:e6:d9:61:e1:76:d8:1c:3a:23:22:76:7c:06:
f0:13:7e:58:76:64:10:5c:f1:26:70:ab:1f:cb:44:
61:a5:d5:f9:e9:91:c9:11:37:00:1a:9f:b5:1e:34:
c1:79:41:5f:40:1c:06:7a:11:79:68:fd:05:7f:62:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:A5:68:50:11:CD:1F:8E:2E:7A:BC:FB:0B:81:66:A7:03:1B:4A
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8b:b8:47:6d:3c:c3:32:11:f4:cc:c5:0d:92:03:ba:fd:e1:
0a:f5:df:c5:70:05:0e:d1:9c:f7:b7:47:aa:f5:67:5b:66:b1:
47:3c:5f:cb:2e:8e:51:2c:c0:2c:af:de:e3:f7:1f:61:a2:1c:
5c:63:de:1d:15:b5:09:70:31:63:2b:df:ef:4f:0b:a0:0e:6e:
53:55:21:41:a5:95:54:22:20:e3:21:a6:2c:c4:1d:eb:f8:96:
07:64:03:ca:4d:68:a7:b7:9f:5b:c0:77:b3:89:52:91:a9:8d:
4d:a7:77:6a:be:5c:39:1b:d1:c1:aa:f8:35:1c:cd:de:12:04:
03:bb:82:6a:c8:8a:d6:71:56:29:ca:17:6b:68:38:46:f8:b8:
f0:9d:c6:e0:f5:ef:fa:af:6d:d5:ed:cd:0f:2e:95:2c:10:fc:
58:42:7c:b5:c6:a2:ed:30:32:5e:00:ea:c0:22:3a:d1:b5:94:
83:1d:6d:f1:c8:14:3d:8d:43:b9:1e:11:38:00:9c:6c:a6:ae:
1f:13:fe:ce:28:c2:10:95:58:d7:b9:7a:6b:53:5e:33:f3:2f:
9d:68:f0:1e:3b:83:34:07:4d:d7:6d:7c:de:ca:87:3d:a8:e8:
39:7c:d0:ed:39:17:5b:57:7e:0f:57:7e:a0:13:ec:e0:7d:a3:
a1:59:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:57 2026 by rpki-client