Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: 11zoYMNCWdxUPZy/SgAuYjky3PTiScU2vj9wiD5oRf0=
Subject key identifier: 13:3E:AF:3A:42:4E:07:44:E5:17:1E:12:3E:67:52:FA:B1:8A:FA:17
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019D38D2DFBC5B62056F8F862AC925DDD2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 1420
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: VqLDrjWjPYl3uoxGVZ/w2p30YCLt4DbHpvIpldm7vD8=)
2: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (hash: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:df:bc:5b:62:05:6f:8f:86:2a:c9:25:dd:d2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=133eaf3a424e0744e5171e123e6752fab18afa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:8b:4f:62:b1:f0:02:8a:36:f1:69:b0:ab:
65:bc:b0:da:bb:b8:e6:d7:c7:7d:15:96:90:a9:df:
1e:94:80:2a:dd:9a:fa:7f:71:d0:c7:f1:a6:40:09:
c1:ee:1b:9d:c0:fb:cd:9b:d4:0a:36:d4:72:c6:05:
2a:d1:63:5d:9f:6e:f5:42:07:7a:61:ff:05:c6:6f:
83:a8:ac:4e:7e:7b:81:c1:5b:01:3d:08:0f:68:5c:
c9:dc:33:f7:03:31:0e:e3:ff:37:f2:99:0e:a4:82:
6c:aa:80:5a:a1:e0:55:61:08:52:81:80:38:9f:76:
58:27:f5:f1:b9:a7:f5:c2:51:ca:1d:0c:0a:ca:4e:
08:b1:75:a1:d8:36:d9:64:fe:03:00:76:6c:1d:24:
15:b6:b2:57:f8:58:82:90:e5:f6:18:fb:45:c0:f9:
ff:a1:c5:9c:3a:a5:96:22:f3:4e:37:93:e5:ab:c7:
cc:62:f2:1a:62:56:3f:21:70:7b:e0:0b:43:5a:db:
67:09:79:03:41:5b:1c:12:75:e6:b8:e5:57:5c:79:
da:46:5d:14:59:87:60:89:44:66:8d:2e:41:27:e7:
12:8c:a5:f0:14:7a:23:5f:b9:b8:f5:12:c8:54:18:
a5:12:88:69:1b:39:1c:ca:9f:b6:50:31:3c:98:28:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:AF:3A:42:4E:07:44:E5:17:1E:12:3E:67:52:FA:B1:8A:FA:17
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:a5:a1:9d:c9:e5:d5:a2:f5:92:1e:fe:4d:bb:26:28:ed:
d5:b8:ce:0f:ae:af:60:91:01:73:f4:7d:22:da:5e:4d:99:e3:
9c:e0:eb:2f:53:e5:1f:6f:ee:74:2c:79:69:f4:03:ec:14:22:
ec:16:cc:7e:2e:e4:5a:c5:15:4f:59:3c:e2:83:e9:cb:6f:1f:
04:b4:bd:20:38:63:9a:32:8f:41:62:d7:8b:20:0b:f3:33:12:
6f:4c:cb:8c:0a:e0:f1:be:8a:fe:db:83:ab:0d:4d:ed:01:19:
ad:f9:b2:1a:b8:f9:05:64:f9:0d:df:32:76:64:89:e9:a4:a0:
a0:58:e8:9b:10:a6:e1:36:5a:c8:86:04:85:52:5c:fd:34:90:
05:17:51:96:9e:cd:9f:46:3a:02:fd:0d:cc:d2:43:0d:e7:70:
7b:75:f4:72:02:c6:1f:32:2e:bd:69:16:74:61:33:5b:f5:44:
47:15:db:2f:84:98:16:17:66:4f:81:39:2e:7c:c2:39:c4:55:
e6:d6:e3:f7:ee:a6:8b:13:e2:65:a2:9d:c8:c1:db:a2:78:1a:
31:8b:36:28:54:9e:1e:be:a2:05:6d:95:20:c5:a6:5e:91:96:
d3:f4:85:e3:60:b3:74:a8:ac:db:56:6f:cc:c2:f3:53:b1:53:
c3:b3:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:16 2026 by rpki-client