Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: hx2c8SrR4Ov0vsMsPXSCWEK7Ke6I3WBzgAhLv6HUqCo=
Subject key identifier: 63:7C:78:CF:29:B6:3E:2C:FA:67:3E:D1:3F:8C:A5:84:EC:3F:4B:18
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019D37C0C8E8FD0C0F4A0FE87F037B308D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 084C
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: F1sJih0zQrKGljsnOUmtg-YLfWM.roa (hash: jdsNnWcmvKyI8OLsL4MHN8saAAU5viDugMttRK7ykl4=)
2: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: 9mQdEFCBcIVmkL/9U1uAcUI11IgkBGRD3dtSJ9WgAQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c8:e8:fd:0c:0f:4a:0f:e8:7f:03:7b:30:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=637c78cf29b63e2cfa673ed13f8ca584ec3f4b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:11:19:df:c3:a2:79:9f:3a:1b:da:5f:bb:09:
b0:94:9c:18:fa:3f:59:a8:b2:cd:49:fd:f1:14:e8:
dc:2b:bf:75:b1:5b:bc:d9:70:a8:35:a9:f9:e7:91:
9a:cd:88:dc:85:c5:56:1c:7e:68:0f:88:8a:b4:39:
43:6b:e7:48:bb:c2:d1:93:42:ee:6d:24:a6:d7:81:
6f:57:57:bd:ab:b6:db:cb:22:60:09:6c:dd:20:f7:
e9:1a:4e:e0:d2:3e:e9:19:b6:56:3a:8c:99:df:db:
3e:af:0e:ef:03:d8:6b:f8:a4:7a:4e:34:c6:d1:31:
e7:63:bf:2a:7e:61:00:42:cc:53:b9:fd:38:8d:12:
ff:cd:b0:e6:0b:4c:77:8e:86:ed:75:05:a7:18:34:
a6:c4:b5:35:2f:45:f9:20:44:95:51:7c:3a:cb:65:
b2:a1:2a:e8:c2:d2:bf:fe:9e:e2:4e:14:a5:e0:f0:
7b:48:64:14:4a:cb:d1:4c:9d:86:e2:ad:f7:af:65:
fc:4e:d5:72:a9:4c:60:4e:96:95:4c:ae:09:2e:a7:
fc:af:5f:ce:21:db:61:dd:2f:76:64:04:6b:b2:72:
9d:cd:75:8c:18:59:79:56:c7:54:f2:11:c9:87:91:
85:d0:8a:15:9c:98:f3:60:eb:37:fd:f7:ea:f3:c6:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:78:CF:29:B6:3E:2C:FA:67:3E:D1:3F:8C:A5:84:EC:3F:4B:18
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:47:e8:e0:a8:48:2f:36:f6:81:fd:57:9b:17:e6:d4:0c:
6a:16:28:73:2f:40:15:72:42:16:80:63:48:d9:02:bc:39:89:
38:5c:33:d2:76:b0:ae:17:57:3e:e4:1d:25:8f:79:0b:15:ea:
52:6a:e5:ec:c2:3d:25:0d:c2:e9:9f:41:b6:59:49:69:a6:b4:
5e:81:04:c4:bb:a6:4c:1b:89:eb:82:11:26:07:e1:e4:8f:1f:
43:84:ca:d9:38:70:bd:3f:11:c4:15:c0:73:5b:db:bd:33:0d:
79:7a:25:97:8e:e0:b7:05:53:87:92:98:34:39:59:d6:ce:c1:
c0:b6:68:a1:f1:92:fb:e0:6e:26:58:be:ba:3f:f1:61:f3:ec:
8d:ac:aa:fd:d8:46:af:d1:5b:f1:1c:bc:01:ea:4b:eb:6f:3c:
c3:5d:57:c2:3f:0f:f1:c7:6e:cf:bd:cf:8d:8a:bb:56:fd:2a:
39:86:d8:bc:36:44:25:44:bd:16:ba:5e:f9:40:d8:95:f6:7d:
c8:67:cb:fc:85:72:ba:e4:e1:37:d2:24:2c:4d:5c:d5:31:4e:
17:86:79:7a:ea:f8:f3:22:47:51:bc:74:60:c2:ad:63:6a:5e:
5f:2e:de:2c:de:23:fe:12:a9:7b:78:a3:6f:45:27:e4:4c:bf:
57:72:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:37 2026 by rpki-client