Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: GA1uhAm8+9zlKBJStzC06iHQqq2mbFwxpuGTWwfZyyc=
Subject key identifier: 57:A8:B9:CA:7D:4C:CA:12:3D:E1:5C:D4:D4:7D:47:AE:00:55:4C:54
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 01A0B5E406CE3483BD3EB745FA4109E1EBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0EEF
Signing time: Fri 18 Sep 2026 19:00:14 +0000
Manifest this update: Fri 18 Sep 2026 19:00:14 +0000
Manifest next update: Sat 19 Sep 2026 19:00:14 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: JMU+CPD+Yuz8cMkOhtstc0AOnf/dygSQNGLWyLk8Cb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e4:06:ce:34:83:bd:3e:b7:45:fa:41:09:e1:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Sep 18 19:00:14 2026 GMT
Not After : Sep 19 19:00:14 2026 GMT
Subject: CN=57a8b9ca7d4cca123de15cd4d47d47ae00554c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:4d:c4:ab:60:41:59:cd:5f:b7:2a:3e:62:
7e:07:46:12:57:26:53:80:b9:a5:16:ca:4c:e0:33:
3a:23:ea:f0:14:61:a1:10:ca:dd:e4:bd:c1:3f:29:
2c:7c:94:e9:ff:d1:4f:65:4d:f1:25:ce:de:48:eb:
94:18:1d:b4:07:9d:a8:06:ca:09:85:d0:6b:a9:82:
d7:92:f2:c1:6c:2e:4e:ac:5a:8d:43:5f:07:f5:6b:
dd:ea:51:99:0a:6a:a3:ab:9a:ac:be:de:19:b6:91:
f1:fc:35:b6:aa:1a:1c:c2:c5:35:ab:95:4b:4b:3f:
17:d3:ea:e4:2b:0f:1d:b9:1b:18:69:e1:b1:15:48:
be:b9:44:c9:55:ea:b7:9a:79:5a:9d:42:66:4f:91:
41:05:fb:c0:57:7b:aa:49:2e:53:2f:9b:38:18:35:
ee:76:30:9f:1e:17:40:49:64:ad:96:05:1b:8e:05:
f8:a8:0b:3b:12:1f:c0:b8:68:20:37:53:56:0a:f0:
ad:5c:e1:9d:39:ca:7b:e2:a2:2a:e3:f8:8b:d5:b9:
b4:74:a7:29:1c:8f:32:6c:c3:c2:9e:ee:f8:02:3e:
f1:88:3b:ae:a7:8d:50:c5:29:cc:77:9b:f0:b8:0f:
f5:1d:21:f6:3a:8a:db:d9:c0:40:ef:75:e0:29:85:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:B9:CA:7D:4C:CA:12:3D:E1:5C:D4:D4:7D:47:AE:00:55:4C:54
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:8a:ab:21:58:a1:51:04:b9:07:c4:61:5a:7d:30:21:e4:
25:d5:b6:03:d1:ab:8b:7b:13:b9:0f:9b:bc:3c:bb:1c:64:e3:
4e:3a:e7:5a:8e:eb:fa:be:9a:cd:75:71:f8:44:0d:d6:35:25:
d0:9c:be:92:74:87:0b:e5:c6:14:c6:6f:62:b3:f3:57:05:ab:
0d:95:4b:f5:e5:b9:45:35:4f:09:fc:fa:59:4a:8e:17:b7:6c:
8f:6f:84:30:60:7a:fc:8d:09:ac:6b:5f:51:19:ea:16:ae:4c:
4e:57:15:c6:9d:4b:0e:65:51:e3:af:dc:2d:de:ec:3e:1b:fb:
d2:f1:17:e8:29:e0:16:78:21:3e:0e:27:b2:f2:aa:fd:af:8b:
76:66:4e:80:b4:a1:c9:e4:2d:c7:26:3f:d0:d1:45:ee:3d:fd:
76:7f:da:72:66:5c:9a:56:08:9c:d7:b7:cd:0e:4c:77:16:e7:
fc:4e:b8:f8:7b:13:e5:85:b6:70:aa:cf:82:7e:c2:71:32:5a:
24:af:4a:27:3e:a9:d8:66:c3:10:b8:fc:66:3c:31:7f:9a:5f:
b5:7b:bc:26:90:c4:83:7c:3a:f0:45:06:a6:db:80:74:49:32:
da:5a:bc:c9:46:9a:03:78:71:96:8c:ff:e1:7c:3b:aa:b2:56:
b5:32:70:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC15AbONIO9PrdF+kEJ4eu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5
ZDM2OGQwHhcNMjYwOTE4MTkwMDE0WhcNMjYwOTE5MTkwMDE0WjAzMTEwLwYDVQQD
Eyg1N2E4YjljYTdkNGNjYTEyM2RlMTVjZDRkNDdkNDdhZTAwNTU0YzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rVNxKtgQVnNX7cqPmJ+B0YSVyZT
gLmlFspM4DM6I+rwFGGhEMrd5L3BPyksfJTp/9FPZU3xJc7eSOuUGB20B52oBsoJ
hdBrqYLXkvLBbC5OrFqNQ18H9Wvd6lGZCmqjq5qsvt4ZtpHx/DW2qhocwsU1q5VL
Sz8X0+rkKw8duRsYaeGxFUi+uUTJVeq3mnlanUJmT5FBBfvAV3uqSS5TL5s4GDXu
djCfHhdASWStlgUbjgX4qAs7Eh/AuGggN1NWCvCtXOGdOcp74qIq4/iL1bm0dKcp
HI8ybMPCnu74Aj7xiDuup41QxSnMd5vwuA/1HSH2Oorb2cBA73XgKYV2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeoucp9TMoSPeFc1NR9R64AVUxUMB8GA1UdIwQY
MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt
MzEyZTViNDkxMTQ2LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2
LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXiKqyFY
oVEEuQfEYVp9MCHkJdW2A9Gri3sTuQ+bvDy7HGTjTjrnWo7r+r6azXVx+EQN1jUl
0Jy+knSHC+XGFMZvYrPzVwWrDZVL9eW5RTVPCfz6WUqOF7dsj2+EMGB6/I0JrGtf
URnqFq5MTlcVxp1LDmVR46/cLd7sPhv70vEX6CngFnghPg4nsvKq/a+LdmZOgLSh
yeQtxyY/0NFF7j39dn/acmZcmlYInNe3zQ5Mdxbn/E64+HsT5YW2cKrPgn7CcTJa
JK9KJz6p2GbDELj8Zjwxf5pftXu8JpDEg3w68EUGptuAdEky2lq8yUaaA3hxloz/
4Xw7qrJWtTJwYA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:00:29 2026 by rpki-client