Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: w7Wn5WxZidRPM+/EId/KF9RdfudxNdmCboxf1WRSN9o=
Subject key identifier: FD:1B:C4:E0:C1:56:F1:59:1C:33:1E:04:A4:6F:45:63:7D:6B:14:6A
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019CECDD7DF1334C37F4287D395FCE90F736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0404
Signing time: Sat 14 Mar 2026 15:01:04 +0000
Manifest this update: Sat 14 Mar 2026 15:01:04 +0000
Manifest next update: Sun 15 Mar 2026 15:01:04 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: 3AHi8QOPj9HQO2NDrJdzMSmtM01k0so0q/C6Cni0xqQ=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:7d:f1:33:4c:37:f4:28:7d:39:5f:ce:90:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Mar 14 15:01:04 2026 GMT
Not After : Mar 15 15:01:04 2026 GMT
Subject: CN=fd1bc4e0c156f1591c331e04a46f45637d6b146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:f9:58:1e:19:16:c0:00:ba:75:f4:0f:e1:
cc:71:79:9e:79:b3:38:01:53:d0:d4:1a:de:a0:df:
2d:ca:4c:d0:7b:4e:47:1b:7c:ca:42:41:2a:87:9a:
fc:f2:16:f8:5a:34:41:c0:90:1e:e3:63:5e:ec:2a:
66:d3:b8:c7:89:c4:60:5a:61:1d:34:ea:25:f9:38:
94:ba:ef:2b:68:86:bf:3d:33:2a:75:df:f8:52:2f:
e5:a6:ba:ca:b8:c1:d0:e1:aa:a0:db:29:b4:df:e2:
56:b1:4f:a4:7d:f2:06:7d:b8:ee:c9:0a:f1:e1:e2:
e5:82:0f:96:d2:1e:5b:9b:fc:63:aa:f3:9e:9b:f2:
05:04:14:83:a6:56:71:6b:dd:91:ea:99:31:e1:e0:
5e:12:75:f4:d3:82:1d:f4:d0:db:7f:1b:97:89:5e:
e3:f4:f8:68:b4:c7:b1:8d:b2:f2:b2:ae:9f:3d:fc:
50:92:c5:e0:d0:f5:5e:4b:ff:b1:d0:6a:a8:2e:69:
64:02:88:f3:78:7f:70:f9:89:ee:50:61:90:ca:1a:
5c:10:1d:ea:a0:5c:85:05:0b:d9:dc:0d:0a:d4:05:
3f:ff:53:4c:89:0e:e5:bc:b7:cc:27:9f:f9:19:a3:
86:1a:8b:c8:8c:4e:47:01:d1:4b:b0:de:7a:75:67:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:C4:E0:C1:56:F1:59:1C:33:1E:04:A4:6F:45:63:7D:6B:14:6A
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:e4:8e:90:24:92:86:d7:ab:86:82:ef:db:ce:d9:07:1b:
dd:f8:73:3e:97:0c:19:f4:f3:2e:41:78:4c:4c:38:5d:ed:ff:
2f:cf:a7:c7:14:ce:07:09:8a:e4:d6:cd:c5:8e:ea:77:47:6c:
a4:8d:39:44:36:33:b9:d9:ed:5a:5c:f2:65:a5:20:0b:af:26:
b8:45:f1:9b:50:9a:66:05:2f:47:75:cd:cb:97:d5:47:85:9b:
56:67:55:9a:0d:2e:f6:bc:49:15:18:b0:00:b7:67:cf:16:db:
01:e1:92:0b:c6:1e:4f:ce:da:5e:28:36:38:3a:fd:24:e6:78:
8b:4c:84:0c:fb:8b:99:53:fe:37:a8:37:0c:2f:db:83:d0:bb:
83:95:f0:50:8d:d9:ff:54:da:9c:86:40:42:40:2f:b3:f7:a4:
a3:02:97:ae:35:7b:62:9f:62:58:3c:03:56:75:90:22:7a:62:
2f:f9:3d:11:bd:cb:67:fc:11:3b:09:5a:99:1f:15:24:8d:27:
f4:08:ce:c4:45:fc:75:32:9c:63:61:d6:60:8f:c7:75:18:53:
dd:3a:2f:00:0a:26:bc:25:45:3c:cc:12:e3:5b:e6:18:f8:c3:
ff:1d:f5:2c:eb:db:10:43:39:bd:ac:25:1d:b1:89:11:61:e6:
31:e6:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:21:21 2026 by rpki-client