Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: ET6BAKvjfbPcy0bBdgODRvPD7BmtObKj0TS5PZaagqk=
Subject key identifier: 31:A9:06:74:C1:73:78:87:AE:83:A7:D7:F8:8B:D5:27:8F:17:74:AA
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019D389C3DDB7C73651841C0159B97B3458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 17F7
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: j+1IMC1Q+y7PS8hq/DN1z10vMal0Rkekh/Aui/qsXRM=)
2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3d:db:7c:73:65:18:41:c0:15:9b:97:b3:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=31a90674c1737887ae83a7d7f88bd5278f1774aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:73:5d:31:39:20:1e:d2:23:de:0b:51:9d:
3c:3b:2c:09:99:a8:c3:1c:45:d9:b7:df:3c:48:f2:
b1:71:be:99:e6:ef:58:49:e4:61:d4:21:6e:77:b7:
dd:e9:28:e5:ad:76:8a:87:e6:fd:19:b3:fa:74:e1:
1e:95:82:8f:e9:d1:8e:ea:95:b7:58:fd:3a:7b:f2:
f1:6c:f2:ae:98:9d:07:78:d1:6c:32:b7:c6:89:0e:
08:37:56:75:77:5e:ba:d8:8b:b2:e6:79:32:16:fa:
dc:89:0d:d5:f6:af:a3:90:c0:07:e4:a9:47:f0:94:
bd:62:46:aa:86:ee:fb:ff:1b:6d:d8:c5:41:b9:57:
33:15:e0:77:6b:38:a6:6e:c6:02:91:cf:49:20:08:
ce:3f:ae:92:3b:95:49:25:f9:57:e3:dd:2c:c6:e6:
0b:23:b7:64:8c:7e:7e:a7:b4:9d:a9:a1:88:7c:68:
52:bc:06:6a:7c:91:71:1d:13:19:c0:a1:a5:6d:ea:
7e:68:17:79:ad:7b:9b:96:77:3d:4d:0f:d8:ee:96:
92:66:a5:35:f9:18:f0:7f:c2:e5:98:68:1d:8c:87:
c8:e7:de:c8:f1:b5:71:76:2f:d6:aa:08:2a:5f:45:
69:9b:30:8a:39:87:b1:08:4d:a3:1a:29:d3:62:88:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:06:74:C1:73:78:87:AE:83:A7:D7:F8:8B:D5:27:8F:17:74:AA
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:9a:23:a9:e5:03:43:c3:fa:b0:1f:44:05:5c:42:9b:c8:
7a:c3:d3:39:ce:fc:b8:3f:df:1a:a2:01:29:ee:6f:58:bb:f3:
43:36:3e:0f:1e:1d:12:bb:42:f5:b9:2b:d1:53:0b:0d:a3:3b:
3b:e6:7b:6f:33:74:6d:2d:ba:da:64:18:82:16:2c:d1:b3:bf:
fe:ae:2b:9d:d9:af:5d:eb:8f:ca:a6:41:91:cc:a1:27:eb:85:
9c:9c:19:80:97:cb:f0:46:97:ac:8e:ee:f5:94:6b:60:6a:32:
88:f9:5b:5d:c5:25:ea:a0:5c:b5:f2:19:6a:97:40:3b:88:aa:
97:6a:8c:52:e6:a9:c1:94:47:f2:9a:16:72:d6:90:10:08:be:
d3:fb:40:da:39:64:07:6b:7b:e7:d4:0f:59:37:25:7a:f5:db:
d7:61:68:4f:67:cc:8b:da:1d:36:c8:70:f9:0c:4e:b5:4a:7c:
d3:c3:54:1b:40:25:3b:eb:33:f9:bd:0b:2f:02:63:4a:2c:79:
da:77:c2:f5:d4:3e:a9:dd:03:35:86:44:94:62:b6:2b:4a:96:
f5:69:05:aa:32:25:04:d2:49:3e:86:63:58:30:3d:29:ce:b6:
7d:0c:26:90:56:bf:55:5b:82:76:25:68:8b:94:76:c8:d5:0a:
9c:97:76:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nD3bfHNlGEHAFZuXs0WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OGY3MTA2YmVkMTBmZTdmZmM2NWJiZDY0YWRiZWRjOWRi
ZDUyNWUwHhcNMjYwMzI5MDgwMDU2WhcNMjYwMzMwMDgwMDU2WjAzMTEwLwYDVQQD
EygzMWE5MDY3NGMxNzM3ODg3YWU4M2E3ZDdmODhiZDUyNzhmMTc3NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPlzXTE5IB7SI94LUZ08OywJmajD
HEXZt988SPKxcb6Z5u9YSeRh1CFud7fd6SjlrXaKh+b9GbP6dOEelYKP6dGO6pW3
WP06e/LxbPKumJ0HeNFsMrfGiQ4IN1Z1d1662Iuy5nkyFvrciQ3V9q+jkMAH5KlH
8JS9Ykaqhu77/xtt2MVBuVczFeB3azimbsYCkc9JIAjOP66SO5VJJflX490sxuYL
I7dkjH5+p7SdqaGIfGhSvAZqfJFxHRMZwKGlbep+aBd5rXublnc9TQ/Y7paSZqU1
+Rjwf8LlmGgdjIfI597I8bVxdi/WqggqX0VpmzCKOYexCE2jGinTYojyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGpBnTBc3iHroOn1/iL1SePF3SqMB8GA1UdIwQY
MBaAFDmPcQa+0Q/n/8ZbvWStvtydvVJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMt
ZTA4MWE1YjQxNDMyLzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMtZTA4MWE1YjQxNDMy
LzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZOaI6nl
A0PD+rAfRAVcQpvIesPTOc78uD/fGqIBKe5vWLvzQzY+Dx4dErtC9bkr0VMLDaM7
O+Z7bzN0bS262mQYghYs0bO//q4rndmvXeuPyqZBkcyhJ+uFnJwZgJfL8EaXrI7u
9ZRrYGoyiPlbXcUl6qBctfIZapdAO4iql2qMUuapwZRH8poWctaQEAi+0/tA2jlk
B2t759QPWTclevXb12FoT2fMi9odNshw+QxOtUp808NUG0AlO+sz+b0LLwJjSix5
2nfC9dQ+qd0DNYZElGK2K0qW9WkFqjIlBNJJPoZjWDA9Kc62fQwmkFa/VVuCdiVo
i5R2yNUKnJd2/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:21 2026 by rpki-client