Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: Rq3MuW65Ox6Vma5mE3NyHhQgzZXBDHMscYuSNY2M2n4=
Subject key identifier: 43:D2:D3:4D:E0:E4:6B:93:A4:FB:49:03:2A:95:97:1D:73:1F:E3:A3
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019FDA2B212DC3C58A4D9A7078DE207F0492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0588
Signing time: Fri 07 Aug 2026 03:01:27 +0000
Manifest this update: Fri 07 Aug 2026 03:01:27 +0000
Manifest next update: Sat 08 Aug 2026 03:01:27 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: xhdaBtPhsNJNdIfeMseMMqOgl3Amqm+qPgKkQpTANb0=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:2b:21:2d:c3:c5:8a:4d:9a:70:78:de:20:7f:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Aug 7 03:01:27 2026 GMT
Not After : Aug 8 03:01:27 2026 GMT
Subject: CN=43d2d34de0e46b93a4fb49032a95971d731fe3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:fd:06:86:14:e5:72:87:4a:cc:83:dc:6a:
57:2f:07:38:42:35:e8:e4:39:4b:bd:3a:c1:49:91:
b5:42:f0:cd:3f:50:34:eb:f5:f3:72:4f:9e:68:5d:
6f:d4:f9:8e:bf:0b:3f:9c:c9:16:2b:af:5b:70:e9:
31:c9:b3:c6:f8:df:a3:06:e5:5a:ac:a8:f6:9d:72:
4d:97:86:50:ac:31:c7:2c:0f:86:85:ab:da:13:9d:
2f:c6:64:c1:ed:16:10:63:45:1c:79:a3:5e:e3:04:
a4:40:14:57:d5:ec:d6:8a:28:81:e0:06:41:d3:ed:
a9:a6:1b:47:cf:0a:4c:ef:8a:e8:0a:a0:7b:35:15:
63:7d:dc:42:cd:db:94:e3:f3:40:36:7b:60:26:bf:
36:09:78:d4:ca:04:89:08:56:bd:ac:24:88:5c:d0:
49:9b:7b:93:0d:b6:b6:5f:1a:6e:9b:b7:0b:8f:7a:
bd:e2:45:fa:a1:50:ec:a7:a4:12:5d:8c:b1:1c:1e:
bc:7f:02:c2:81:b3:67:68:47:b9:28:05:8b:15:50:
01:46:0f:af:9f:36:06:1f:cb:b4:51:93:8b:13:8c:
18:78:e7:94:c9:72:61:57:51:63:17:9d:66:20:e6:
9d:6f:8c:3f:f3:4f:02:6a:52:26:2e:85:e3:4d:da:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:D3:4D:E0:E4:6B:93:A4:FB:49:03:2A:95:97:1D:73:1F:E3:A3
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:4f:93:ca:e5:3c:ac:31:e2:ef:12:9f:79:3d:4a:6e:60:
d8:b6:76:73:49:9c:72:4d:97:4d:e7:44:7c:8f:5d:8d:2d:fd:
59:a1:69:93:fe:ed:e5:e7:ef:30:d3:c8:29:b2:8b:a8:d9:09:
23:c3:9d:18:53:1b:61:c8:36:e5:09:34:00:da:e0:62:3f:84:
02:bc:9e:ff:a2:8f:bd:3f:a0:ab:ad:f9:b8:57:b7:bc:09:ba:
38:1b:dc:f9:d0:b0:3b:09:3b:f7:5d:e3:47:82:f3:d4:eb:ce:
1f:11:09:26:92:88:43:71:2a:5f:89:c4:e8:49:ce:80:7f:76:
15:47:c8:da:62:27:2d:72:ef:77:5b:19:0f:24:9a:ad:24:dc:
67:5d:4e:81:2c:8c:ef:72:ac:ca:01:1f:c1:63:c8:91:8b:7e:
37:84:16:e7:ab:aa:e7:f6:34:b3:e7:89:c3:cd:50:f4:c2:89:
5e:39:02:91:1b:08:d5:e7:1c:42:b3:af:cc:dd:14:d4:e1:fd:
d5:e2:96:78:77:37:56:d8:56:4a:7b:92:67:29:ae:68:5d:80:
81:b1:3c:51:51:a2:d7:a6:23:d5:7b:d5:4b:7e:9e:b0:14:14:
12:28:52:19:29:51:e0:1b:16:b2:c0:8f:08:4a:48:f0:e6:6f:
ad:72:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:45:25 2026 by rpki-client