Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: 1QGef/VLaT0PgRZNlPA8FH5S8hOBv7Fzfh5/+Usl28M=
Subject key identifier: 5C:80:D0:E9:5B:2D:D8:6B:80:3D:AC:B8:C5:07:67:7B:A7:32:FD:14
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019F122EC4187DB13DAA3A7244775AA36243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 1427
Signing time: Mon 29 Jun 2026 07:01:22 +0000
Manifest this update: Mon 29 Jun 2026 07:01:22 +0000
Manifest next update: Tue 30 Jun 2026 07:01:22 +0000
Files and hashes: 1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: /LasbLSNAmvBL2CzVnXFSjYE3qUNpcdDGAgisOd+fvA=)
2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c4:18:7d:b1:3d:aa:3a:72:44:77:5a:a3:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jun 29 07:01:22 2026 GMT
Not After : Jun 30 07:01:22 2026 GMT
Subject: CN=5c80d0e95b2dd86b803dacb8c507677ba732fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:ba:5b:c9:a1:55:b0:64:64:a5:66:e9:22:
07:69:50:bb:f6:27:bb:80:7e:4f:a3:f0:32:f8:a6:
5a:02:c7:ff:8a:9c:52:e8:b5:e0:08:23:da:69:1d:
0d:f5:76:ff:4d:fa:67:75:37:87:28:03:88:8c:46:
89:d9:c2:21:d2:4f:41:f5:9d:9d:09:58:0c:ce:41:
79:87:8c:19:8d:0e:e1:0c:0c:a6:e4:4f:65:e0:9c:
90:34:cc:a0:f1:9a:11:71:08:6f:5f:2b:34:d9:2c:
48:20:57:3d:fd:08:d8:08:40:47:85:a5:d0:60:57:
7b:56:b8:4f:48:96:98:27:f6:2b:55:48:de:22:3d:
d3:f5:15:4c:28:1e:f2:bd:ec:5b:b1:a7:7c:b7:cc:
a3:a4:12:db:22:58:10:72:7d:54:37:4c:ac:a5:ba:
72:68:70:02:f1:ec:6c:43:b2:46:71:a7:95:47:7a:
0d:44:7a:ab:27:29:3f:af:18:ea:4a:63:7a:08:bc:
fb:23:39:2d:95:61:0e:9f:0f:01:8e:3a:98:68:37:
b9:dd:4b:4c:f8:0b:e0:20:6e:0d:73:d3:0e:69:5f:
fc:5a:1c:29:b6:59:62:6f:4f:3e:b6:5b:0c:0d:05:
1a:89:6d:cc:29:1d:5f:3f:25:0e:d1:79:cd:72:0d:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:D0:E9:5B:2D:D8:6B:80:3D:AC:B8:C5:07:67:7B:A7:32:FD:14
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cb:bb:a2:7f:88:ed:0e:96:f5:6c:95:f3:ca:ee:ad:41:f0:
a6:e0:90:69:4d:bd:78:72:2e:6d:a4:cf:bd:c1:71:94:2c:13:
35:ec:31:26:5b:4d:77:41:cd:a5:2a:09:34:bf:13:9b:01:e9:
e1:3d:e2:94:83:4f:39:c5:02:05:af:9b:68:9f:f7:36:1e:95:
f4:9c:1d:b6:52:a2:24:a5:5a:68:9a:1d:9d:d1:f4:25:1d:56:
7b:94:cb:7d:2d:00:00:ca:1e:14:99:09:f1:43:46:fd:f7:90:
9e:8d:f7:fc:5f:cb:23:3c:55:21:da:66:5d:fb:89:d3:b1:59:
4a:6f:43:33:89:5c:31:de:15:b6:cf:70:0a:1c:b1:72:6e:b2:
d5:1b:5d:f9:06:79:93:94:85:2f:f9:d7:4b:90:bf:b0:1f:35:
07:ac:8f:bd:c5:41:9c:85:70:de:24:42:1e:cc:a6:36:cd:66:
18:4b:cf:c3:de:74:f0:dd:76:af:fd:36:15:48:75:3a:a6:5e:
af:dd:3b:37:8a:31:01:4d:0b:c5:7f:12:d2:13:fd:e5:3d:3c:
e6:c6:89:e0:6a:7c:98:d8:c1:54:5f:26:02:0e:3c:57:6a:e6:
35:fc:19:f4:7a:27:df:d2:c8:59:2c:2f:1b:75:19:67:7f:44:
ec:6b:d6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLsQYfbE9qjpyRHdao2JDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjYwNjI5MDcwMTIyWhcNMjYwNjMwMDcwMTIyWjAzMTEwLwYDVQQD
Eyg1YzgwZDBlOTViMmRkODZiODAzZGFjYjhjNTA3Njc3YmE3MzJmZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqea6W8mhVbBkZKVm6SIHaVC79ie7
gH5Po/Ay+KZaAsf/ipxS6LXgCCPaaR0N9Xb/TfpndTeHKAOIjEaJ2cIh0k9B9Z2d
CVgMzkF5h4wZjQ7hDAym5E9l4JyQNMyg8ZoRcQhvXys02SxIIFc9/QjYCEBHhaXQ
YFd7VrhPSJaYJ/YrVUjeIj3T9RVMKB7yvexbsad8t8yjpBLbIlgQcn1UN0yspbpy
aHAC8exsQ7JGcaeVR3oNRHqrJyk/rxjqSmN6CLz7IzktlWEOnw8BjjqYaDe53UtM
+AvgIG4Nc9MOaV/8Whwptllib08+tlsMDQUaiW3MKR1fPyUO0XnNcg3kXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyA0OlbLdhrgD2suMUHZ3unMv0UMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMu7on+I
7Q6W9WyV88rurUHwpuCQaU29eHIubaTPvcFxlCwTNewxJltNd0HNpSoJNL8TmwHp
4T3ilINPOcUCBa+baJ/3Nh6V9JwdtlKiJKVaaJodndH0JR1We5TLfS0AAMoeFJkJ
8UNG/feQno33/F/LIzxVIdpmXfuJ07FZSm9DM4lcMd4Vts9wChyxcm6y1Rtd+QZ5
k5SFL/nXS5C/sB81B6yPvcVBnIVw3iRCHsymNs1mGEvPw9508N12r/02FUh1OqZe
r907N4oxAU0LxX8S0hP95T085saJ4Gp8mNjBVF8mAg48V2rmNfwZ9Hon39LIWSwv
G3UZZ39E7GvWRg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:35:31 2026 by rpki-client