Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: 56QeIDF1C5KWk2C0ppbjTiS8Cr37KpO8oKAJYQ05FGg=
Subject key identifier: FF:6B:AC:87:13:92:A5:E7:C7:BA:15:7E:A3:4B:3F:D8:41:B8:C8:DC
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 019DDDD5DC5C1EAE5C800B9963B2E5DF9AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0D76
Signing time: Thu 30 Apr 2026 10:01:13 +0000
Manifest this update: Thu 30 Apr 2026 10:01:13 +0000
Manifest next update: Fri 01 May 2026 10:01:13 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: 32mzMeg9GD9AWDaBF1KQdWeQp0X+FNGC+2ABbMDQlrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:dc:5c:1e:ae:5c:80:0b:99:63:b2:e5:df:9a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Apr 30 10:01:13 2026 GMT
Not After : May 1 10:01:13 2026 GMT
Subject: CN=ff6bac871392a5e7c7ba157ea34b3fd841b8c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:61:cc:53:8c:8a:30:1d:41:20:9a:f0:ae:
b1:21:9d:f4:d6:e2:d2:66:ab:b0:54:55:56:3f:8e:
3f:97:b2:6b:12:75:ff:36:15:fb:25:8a:df:c9:64:
dc:0b:74:c1:5d:fe:b2:d8:71:91:b0:d7:58:62:90:
79:6f:01:b8:0f:94:97:a7:6d:d6:49:4b:28:d7:6c:
0d:b8:dd:fa:1a:11:92:4c:52:bb:1a:7f:48:fb:11:
f7:6f:82:44:2f:1a:58:64:40:eb:9e:4c:0e:0d:8c:
f4:88:99:ef:4e:7c:42:6d:14:c4:e1:f5:bc:00:35:
a8:8f:65:4f:b4:c2:3b:01:81:b8:92:62:dc:67:36:
bf:31:90:2b:60:f3:1b:7f:dc:1a:72:c4:0e:ff:47:
fb:78:56:89:72:c3:2c:48:3e:35:84:3f:37:ed:09:
a4:dc:cd:b3:fa:bf:4a:ba:2f:ef:b2:27:40:73:97:
df:8d:7d:d3:33:84:d9:43:89:de:31:9e:16:e6:dc:
c5:85:f7:38:f2:25:d7:44:dd:6b:81:5e:54:db:7a:
6e:13:85:5e:07:fd:d8:8c:12:4d:93:89:15:15:45:
76:c8:5a:95:da:2d:0a:ee:46:fa:a6:05:99:81:06:
73:c8:da:b3:95:d9:ed:d1:72:36:cb:6d:5b:8b:75:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:AC:87:13:92:A5:E7:C7:BA:15:7E:A3:4B:3F:D8:41:B8:C8:DC
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:0a:37:55:6f:b5:a4:c2:96:58:81:71:5b:d7:c0:c2:8a:
b8:b1:7a:8d:6d:18:56:78:32:51:6a:87:75:ae:e8:41:8e:fb:
28:36:2d:ef:30:44:6b:c3:33:2f:f9:e8:4e:f9:2a:e0:06:94:
64:ba:9b:7f:13:31:66:6c:35:6d:de:c7:fb:a6:76:37:9c:c7:
d5:42:6a:a0:90:75:35:02:06:89:08:7b:61:87:9a:09:ab:37:
f3:5d:4f:a4:c0:0f:55:7c:64:85:7a:f7:23:c3:6b:72:02:38:
41:e0:d0:f7:e0:e2:7e:cc:f6:43:e9:34:44:6b:2b:31:91:6f:
47:7e:e9:28:a3:5e:f1:c4:80:f9:1c:78:2a:8c:d9:6a:f1:d4:
b7:ed:b2:de:93:71:2f:0f:bf:10:9f:59:8e:a0:bc:28:58:1d:
b0:b5:a6:90:42:c6:52:cd:1c:1f:75:63:73:20:a5:57:60:46:
c6:0b:c1:1c:26:e5:25:30:42:c7:be:aa:0a:8d:8a:8f:4c:02:
97:74:d0:a8:85:44:16:c0:64:16:d9:d9:ab:7a:97:e6:9a:e2:
9e:e2:37:c5:d0:c5:53:42:97:07:be:4b:e7:f0:a2:79:8c:b2:
92:88:a4:fe:2c:3e:81:ab:a6:62:4b:fb:b8:b1:05:47:7e:e3:
5d:f7:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:44 2026 by rpki-client