Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: FmSA2GRYJxwzUPydLn3zSlVyrWxaaPQ3cRrYJ2vkgys=
Subject key identifier: 3B:C1:B5:30:C4:DC:F7:F1:6D:8D:D6:70:DB:3F:CD:23:A6:F5:0E:49
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019EE2F94E0FCD68D492B22856C265724FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0508
Signing time: Sat 20 Jun 2026 03:00:49 +0000
Manifest this update: Sat 20 Jun 2026 03:00:49 +0000
Manifest next update: Sun 21 Jun 2026 03:00:49 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: 0BCg0YLbu9W1ON0Zb1t+3LEUNOfcZMmGBxiBvPQ1dP0=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:f9:4e:0f:cd:68:d4:92:b2:28:56:c2:65:72:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Jun 20 03:00:49 2026 GMT
Not After : Jun 21 03:00:49 2026 GMT
Subject: CN=3bc1b530c4dcf7f16d8dd670db3fcd23a6f50e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:f2:60:d6:c4:42:9f:13:b2:a9:f7:06:d7:
5f:6e:8b:47:ca:d2:cc:0c:91:a5:90:56:58:31:69:
4b:ae:2e:b4:ab:8a:f2:4d:8b:65:ed:7f:a3:1c:cf:
d4:5d:f0:d8:0c:bb:15:d6:1f:97:47:b2:bb:24:f3:
a4:d7:87:2a:00:e7:63:54:aa:64:6d:83:ef:42:7a:
41:a0:13:85:57:1a:5f:0d:8f:a3:87:ef:53:7f:71:
71:a5:4d:3d:e5:18:ab:f9:56:f6:7a:04:e5:d3:11:
c4:90:44:78:0a:10:67:ea:a9:ae:ef:9e:55:4a:78:
0d:d7:a2:0e:cf:7e:81:2b:79:1f:37:92:e3:98:89:
57:94:a5:96:bd:93:6c:b9:3f:a3:fa:c7:df:0d:b6:
ce:6e:ef:57:ed:d3:d7:6e:9c:96:60:a5:27:ff:57:
72:30:db:5b:fe:c0:ab:f6:11:bb:00:3c:d8:5b:50:
06:98:a3:42:73:8d:43:3b:39:28:18:31:43:63:28:
e6:fe:3a:69:a8:82:50:cc:3b:c4:7b:d9:6a:3f:8e:
3c:29:7f:74:20:c2:e0:07:ea:4e:73:6b:f3:cc:a4:
7f:ce:2a:77:4b:c9:75:1f:8e:5f:b4:3d:6b:2e:77:
f4:62:61:dc:30:7e:4c:16:c8:fb:28:84:26:6f:62:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C1:B5:30:C4:DC:F7:F1:6D:8D:D6:70:DB:3F:CD:23:A6:F5:0E:49
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:1b:ed:b5:4c:a6:b9:7b:60:29:72:f5:83:0b:39:a2:c3:
96:5c:bb:c4:3f:df:62:4d:dd:c2:40:aa:ec:4d:aa:5d:cc:93:
3c:ca:cf:d6:bf:25:f5:16:ae:b3:6f:ef:a2:94:48:20:6a:3f:
4b:aa:c0:bb:93:06:c0:42:e1:65:ae:21:aa:3a:ef:af:6a:f3:
20:54:51:f4:65:c7:cd:a2:f5:2f:42:0f:18:35:ac:83:5c:4d:
ed:16:38:1b:73:5f:3b:44:4a:1f:7c:d5:59:8f:83:97:68:7b:
7d:65:c4:b9:67:a0:e9:3d:8f:95:65:30:4c:cf:8f:55:ea:79:
11:9f:6c:5b:22:e0:11:b9:60:f9:22:5a:e8:5d:2d:c6:27:ba:
6d:85:a5:5a:26:c8:18:f7:7a:35:53:a6:74:1f:f0:52:1b:06:
1c:b5:b1:06:f8:65:04:94:ab:f0:d1:9b:1b:36:81:b9:c6:8f:
3d:39:bf:f1:f0:77:0c:37:41:80:ee:1b:74:9f:97:b9:7d:3e:
fa:9a:4b:e8:ff:96:38:8b:dc:2e:f6:37:af:fe:c2:0e:45:30:
61:c8:a1:0d:83:d1:22:fe:c0:5c:1c:c3:75:63:6c:bf:d5:b0:
74:cd:52:74:a3:0f:a8:11:5e:27:a5:10:a0:e7:e5:a5:9b:08:
6a:2b:e3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7i+U4PzWjUkrIoVsJlck/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1
MWE5YTIwHhcNMjYwNjIwMDMwMDQ5WhcNMjYwNjIxMDMwMDQ5WjAzMTEwLwYDVQQD
EygzYmMxYjUzMGM0ZGNmN2YxNmQ4ZGQ2NzBkYjNmY2QyM2E2ZjUwZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjbyYNbEQp8Tsqn3BtdfbotHytLM
DJGlkFZYMWlLri60q4ryTYtl7X+jHM/UXfDYDLsV1h+XR7K7JPOk14cqAOdjVKpk
bYPvQnpBoBOFVxpfDY+jh+9Tf3FxpU095Rir+Vb2egTl0xHEkER4ChBn6qmu755V
SngN16IOz36BK3kfN5LjmIlXlKWWvZNsuT+j+sffDbbObu9X7dPXbpyWYKUn/1dy
MNtb/sCr9hG7ADzYW1AGmKNCc41DOzkoGDFDYyjm/jppqIJQzDvEe9lqP448KX90
IMLgB+pOc2vzzKR/zip3S8l1H45ftD1rLnf0YmHcMH5MFsj7KIQmb2KJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvBtTDE3PfxbY3WcNs/zSOm9Q5JMB8GA1UdIwQY
MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt
ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm
LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPQb7bVM
prl7YCly9YMLOaLDlly7xD/fYk3dwkCq7E2qXcyTPMrP1r8l9Raus2/vopRIIGo/
S6rAu5MGwELhZa4hqjrvr2rzIFRR9GXHzaL1L0IPGDWsg1xN7RY4G3NfO0RKH3zV
WY+Dl2h7fWXEuWeg6T2PlWUwTM+PVep5EZ9sWyLgEblg+SJa6F0txie6bYWlWibI
GPd6NVOmdB/wUhsGHLWxBvhlBJSr8NGbGzaBucaPPTm/8fB3DDdBgO4bdJ+XuX0+
+ppL6P+WOIvcLvY3r/7CDkUwYcihDYPRIv7AXBzDdWNsv9WwdM1SdKMPqBFeJ6UQ
oOflpZsIaivj+w==
-----END CERTIFICATE-----
Generated at Sat Jun 20 12:49:23 2026 by rpki-client