Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: eTecEuW+fTLeSUlBeFaDDGCKYUBripkF4Xar+2UvvSo=
Subject key identifier: 87:79:0E:64:29:CA:63:86:DB:F7:E9:61:70:CD:2E:F2:56:94:4C:A5
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 01A15C9EF77EBF37DA3EE783EF5D4D0E45B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1AB4
Signing time: Wed 21 Oct 2026 04:01:24 +0000
Manifest this update: Wed 21 Oct 2026 04:01:24 +0000
Manifest next update: Thu 22 Oct 2026 04:01:24 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: IvO5Y3BBWX4lXrz9k59u9Zijn3gx6dz1m0i92CuyCQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:9e:f7:7e:bf:37:da:3e:e7:83:ef:5d:4d:0e:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Oct 21 04:01:24 2026 GMT
Not After : Oct 22 04:01:24 2026 GMT
Subject: CN=87790e6429ca6386dbf7e96170cd2ef256944ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:87:6b:5d:2f:09:64:87:bc:4a:83:39:cc:
85:ae:e2:1f:73:06:63:3b:75:7c:27:8e:81:ea:c3:
53:fe:37:3d:dd:90:4c:2d:80:7c:de:a8:77:f5:ea:
0c:5b:d1:4a:fb:ef:7c:8e:70:b6:6b:df:42:3a:4f:
d4:19:5e:83:0c:00:b8:93:eb:e2:ea:51:2e:a0:8c:
f0:c7:17:37:d5:7f:8b:72:d2:1d:85:54:35:4b:f2:
d7:97:1f:43:1a:7e:62:73:55:4b:85:ed:87:1c:3b:
76:73:95:3d:64:de:48:22:5a:59:7c:f2:20:34:c0:
67:d0:62:d8:33:e5:5b:3a:60:50:c3:b6:8c:44:72:
a3:3d:1f:d3:32:6a:27:ff:0f:65:51:6a:96:69:63:
9d:af:f3:1b:b0:f4:bf:56:fc:7b:ef:95:d3:7e:f2:
6e:60:1d:9c:13:53:dc:ee:5d:0a:e5:46:e9:5f:44:
56:36:1d:49:53:bc:8b:dd:53:d0:d0:32:67:f5:44:
50:d9:fc:73:3f:c8:82:77:1f:7b:32:80:28:f1:62:
ee:ed:71:6f:e3:07:c4:32:36:86:bf:43:a9:8a:ec:
9f:12:a1:25:79:d3:e3:04:a8:c3:0c:60:ac:04:ed:
bb:0e:04:d2:1f:a9:6f:68:46:a5:0a:0d:98:cb:4d:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:0E:64:29:CA:63:86:DB:F7:E9:61:70:CD:2E:F2:56:94:4C:A5
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b4:bf:6e:b7:11:59:9c:d1:1a:c8:a5:05:45:ca:65:51:48:
9b:3b:73:f4:a0:2a:6e:b1:e2:ab:e1:6a:39:3e:c2:b4:4f:8d:
54:4b:d3:eb:2e:4f:0e:2d:30:6f:07:b5:b2:40:ce:a7:d6:eb:
76:1f:87:c6:da:68:93:dc:02:c9:8f:3e:43:38:c0:63:f1:99:
ec:6f:f4:d5:ad:05:88:39:2d:4b:a6:f4:6a:0f:6a:1e:75:b3:
81:38:8b:ea:a7:b2:27:f5:5e:35:8a:58:38:4d:4f:c3:3f:7f:
69:41:e6:24:c1:cd:5c:e9:00:4a:a9:72:3e:5d:18:32:80:5c:
7c:ed:69:cd:ca:a0:09:66:7c:68:ea:d2:3f:b5:b9:01:9b:01:
fe:af:2b:c1:5f:1a:7f:89:91:6e:3d:0f:38:2e:db:40:2c:26:
b1:a2:fb:f8:38:ae:b5:fe:9b:01:bf:ea:f7:da:54:12:ad:70:
72:49:d4:a3:f4:f4:e7:e0:96:23:cf:44:5d:27:71:e6:ae:a3:
c9:c6:db:83:5e:30:5b:0d:fb:c4:2f:e8:5d:b7:7a:ce:2b:6f:
94:32:07:a3:4a:f8:a4:8d:47:94:7c:59:b1:d9:d7:ff:2f:e5:
12:f9:f3:1a:0b:96:a9:de:bb:55:82:27:7d:c9:97:0b:f2:45:
5a:43:0e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFcnvd+vzfaPueD711NDkW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjYxMDIxMDQwMTI0WhcNMjYxMDIyMDQwMTI0WjAzMTEwLwYDVQQD
Eyg4Nzc5MGU2NDI5Y2E2Mzg2ZGJmN2U5NjE3MGNkMmVmMjU2OTQ0Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9SHa10vCWSHvEqDOcyFruIfcwZj
O3V8J46B6sNT/jc93ZBMLYB83qh39eoMW9FK++98jnC2a99COk/UGV6DDAC4k+vi
6lEuoIzwxxc31X+LctIdhVQ1S/LXlx9DGn5ic1VLhe2HHDt2c5U9ZN5IIlpZfPIg
NMBn0GLYM+VbOmBQw7aMRHKjPR/TMmon/w9lUWqWaWOdr/MbsPS/Vvx775XTfvJu
YB2cE1Pc7l0K5UbpX0RWNh1JU7yL3VPQ0DJn9URQ2fxzP8iCdx97MoAo8WLu7XFv
4wfEMjaGv0OpiuyfEqEledPjBKjDDGCsBO27DgTSH6lvaEalCg2Yy019NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId5DmQpymOG2/fpYXDNLvJWlEylMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrS/brcR
WZzRGsilBUXKZVFImztz9KAqbrHiq+FqOT7CtE+NVEvT6y5PDi0wbwe1skDOp9br
dh+Hxtpok9wCyY8+QzjAY/GZ7G/01a0FiDktS6b0ag9qHnWzgTiL6qeyJ/VeNYpY
OE1Pwz9/aUHmJMHNXOkASqlyPl0YMoBcfO1pzcqgCWZ8aOrSP7W5AZsB/q8rwV8a
f4mRbj0POC7bQCwmsaL7+Diutf6bAb/q99pUEq1wcknUo/T05+CWI89EXSdx5q6j
ycbbg14wWw37xC/oXbd6zitvlDIHo0r4pI1HlHxZsdnX/y/lEvnzGguWqd67VYIn
fcmXC/JFWkMOiA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:07:00 2026 by rpki-client