Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: q4qRpHQtiQhNVielyJnfUz60UFL21ENFfYau5wjEJtQ=
Subject key identifier: 56:BA:B4:C1:3E:D5:A1:D4:8B:7A:AE:4C:B4:06:B7:02:7E:40:71:B9
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019D37BFFD426108580E9A57C8D20953951A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 02AF
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: qnWkR7Zlt/5+pTEFRmx7zEu5Of1tB5DcaIlTZ/xov98=)
2: xjtZklR-zKEZ526c5JfoxAgcZ98.roa (hash: P/TjyPt4uvrFDGoV5aG27wuJfG3S4it2FVzEdH8POos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fd:42:61:08:58:0e:9a:57:c8:d2:09:53:95:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=56bab4c13ed5a1d48b7aae4cb406b7027e4071b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:7e:9a:e9:70:c7:8c:86:07:ec:bd:8f:c1:
a4:63:2f:10:4c:e8:9c:7a:e3:ed:38:6c:b1:fb:bd:
b7:f9:8b:22:31:5f:18:62:bc:e5:f4:66:13:5a:5e:
a9:c8:90:b7:91:77:67:84:59:ad:3f:8d:6b:ac:bb:
e9:01:d0:d2:84:bb:5c:6f:3d:7e:e9:4b:48:14:68:
5f:2d:8e:8b:85:ee:7c:ce:d1:7a:c1:c5:9c:cf:d7:
de:3c:aa:25:d6:0d:11:41:21:05:cc:5c:58:09:af:
6e:15:d2:1f:3a:1f:65:c8:e2:c2:e6:8f:30:0b:21:
30:a6:bb:28:c9:5d:0e:67:ab:3e:5a:57:20:ef:ea:
87:cb:22:40:4b:ca:60:ec:8d:56:6e:ef:98:f7:3b:
bb:10:e9:e3:43:f2:41:64:2a:a9:12:ad:28:5a:d8:
01:48:92:c8:31:b1:ba:e8:b4:32:b2:32:b0:ee:0c:
38:8e:8d:1b:33:ab:88:40:ab:0f:a4:ac:60:08:95:
2a:88:2f:fc:34:e2:7e:fc:0d:01:01:44:ed:b8:e5:
ce:7f:b7:e4:45:b0:20:47:34:dd:11:ce:fb:b9:7e:
67:a2:c8:96:91:be:3d:a6:5b:b3:76:85:5f:77:a5:
f9:52:f1:a6:6d:7a:0b:b1:6c:c4:2b:28:16:d1:67:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:B4:C1:3E:D5:A1:D4:8B:7A:AE:4C:B4:06:B7:02:7E:40:71:B9
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:d9:7a:87:46:28:41:48:93:04:d3:b3:83:bc:5f:33:3f:
68:17:d5:a4:21:7c:52:e7:99:b9:27:f2:5e:a6:00:49:a1:ec:
c3:99:2f:da:24:35:98:82:c7:21:19:29:95:e1:3c:72:93:2d:
37:96:54:9a:ff:dd:81:0b:e3:e4:0d:53:fc:e2:18:b1:35:c5:
fc:99:22:3e:99:a8:22:98:00:90:3a:51:19:67:ae:9c:04:0c:
13:64:db:8e:c6:dc:ac:f5:08:89:5b:cb:bc:32:06:6f:29:52:
90:f1:fa:98:e9:41:48:25:43:94:f9:30:5b:8f:3a:12:6a:0d:
28:0f:84:17:c8:93:65:85:2c:32:d5:01:e9:3f:19:fa:53:48:
7c:b7:e8:45:9f:b8:97:2b:30:03:19:7b:37:92:7f:84:1b:3a:
87:6f:c6:c9:c7:68:55:86:de:86:50:a4:e8:34:4e:b3:00:6a:
22:5d:46:f7:67:da:d9:c8:25:64:2a:1b:09:ff:a8:8f:52:d3:
6b:8a:cc:c7:e7:c2:fc:7e:e0:b1:75:c1:63:64:a3:e1:60:f6:
8d:8d:58:c2:9f:41:61:d2:b8:50:01:84:d8:f7:6f:6b:24:e4:
4c:97:ce:35:75:ef:f5:c3:01:66:d6:55:ab:c2:9c:21:08:aa:
1f:93:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client