Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: A/EORbwsaLsnNvDiMLpa7dWfvcGWsavauEg9LD0uTKE=
Subject key identifier: 33:67:D6:1E:34:6B:6D:3D:F7:77:65:9A:5C:E7:04:B2:A3:90:AF:68
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 019CF4293653DAB1C5F8E9DFA79A84CFA410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0CFD
Signing time: Mon 16 Mar 2026 01:01:07 +0000
Manifest this update: Mon 16 Mar 2026 01:01:07 +0000
Manifest next update: Tue 17 Mar 2026 01:01:07 +0000
Files and hashes: 1: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (hash: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: vphw/Df2w2e/HmL1moClrJshNofP0jK4RmyEM3rDjlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:29:36:53:da:b1:c5:f8:e9:df:a7:9a:84:cf:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Mar 16 01:01:07 2026 GMT
Not After : Mar 17 01:01:07 2026 GMT
Subject: CN=3367d61e346b6d3df777659a5ce704b2a390af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:fb:a5:e4:d1:3d:15:f1:9e:33:b6:ef:87:
fd:af:2a:53:c3:41:00:61:50:e6:d9:07:04:e0:dc:
5b:f0:66:15:90:6f:84:d0:b6:2b:18:58:7c:39:6a:
6e:12:64:5c:24:ca:46:47:35:ca:bb:75:81:72:8d:
b8:8a:54:ca:07:c2:04:1c:36:71:8c:73:5c:05:f7:
32:49:a1:bc:b0:33:ce:6f:e8:2c:bf:34:83:c9:52:
bb:71:0f:ec:08:a5:02:7b:36:47:a2:66:43:31:a0:
95:b7:8d:57:d8:4c:b6:ff:c6:d5:9b:7f:ef:ed:82:
1e:c6:fb:76:55:3a:27:6b:21:d0:fa:2e:af:7e:15:
3f:9d:fb:3d:5b:5b:e2:94:b8:4a:f4:3f:20:72:d2:
7a:77:ee:05:04:c2:02:48:ee:66:5e:4c:b9:a3:a4:
88:b3:79:c0:1d:5a:f6:f6:7b:e2:b1:3b:4d:01:05:
58:90:96:ab:36:83:a8:bc:6b:b8:53:75:8a:07:f3:
fa:49:97:47:1f:8f:f6:a8:65:e3:59:93:89:13:9c:
fa:76:85:b4:3e:79:0c:38:f7:a2:c8:e3:46:42:da:
a7:17:bb:d1:84:4c:6d:2d:ff:70:ba:44:26:c9:5b:
f1:6d:6a:b2:bc:50:e3:31:b4:30:d3:44:91:11:17:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:D6:1E:34:6B:6D:3D:F7:77:65:9A:5C:E7:04:B2:A3:90:AF:68
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dc:1a:da:bd:23:4c:b8:75:59:78:d9:97:4c:02:02:32:ba:
ec:91:c9:ea:0b:4b:c0:88:fd:03:8a:cf:a7:df:5e:cc:89:9a:
25:74:e7:ce:5b:39:a1:c6:3b:84:a1:61:b3:01:9b:85:55:c4:
c3:54:f7:cf:86:4b:b2:ad:61:91:cb:00:a4:89:7f:92:dc:d1:
b0:96:23:fe:00:b8:1c:6c:d9:b8:70:c1:01:f0:86:1c:21:fb:
05:1c:dd:65:26:54:d9:ef:0d:31:78:6b:3b:17:57:13:f5:cf:
b7:d0:33:2d:98:04:d4:00:c6:0f:90:60:b3:ca:a9:a2:08:e5:
a2:cb:41:e1:5b:aa:8f:71:6a:c3:89:e8:46:77:a8:f8:b4:4d:
1f:5d:62:7a:78:cd:ac:b5:5d:06:a3:27:10:2e:b1:e4:4c:2b:
52:98:ed:ba:62:a8:bc:f9:3a:08:61:4f:eb:e4:40:3e:12:48:
1f:75:f7:12:a3:dc:9f:2c:fc:9d:3f:67:e3:c0:15:f8:7c:7c:
bc:e1:7c:c9:e1:00:c7:32:c6:7e:6d:fb:31:03:0b:16:81:7d:
dc:15:82:be:11:ef:fb:53:82:c4:36:f7:c3:14:9b:76:95:b9:
aa:50:6c:22:a6:c1:e3:69:96:96:6c:d1:10:9f:fb:3f:ca:3b:
19:b5:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:14 2026 by rpki-client