Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: g06gcI7vEKHrD0255+HHLPMux97ZIwtfbAkrl22Q87U=
Subject key identifier: 85:B7:28:AB:38:62:B2:61:64:95:8B:DD:A9:12:BA:07:BF:F9:EE:06
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 01A133D9F77D465B2DBD123903CA5899AEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 063B
Signing time: Tue 13 Oct 2026 06:01:24 +0000
Manifest this update: Tue 13 Oct 2026 06:01:24 +0000
Manifest next update: Wed 14 Oct 2026 06:01:24 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: bL749CSvOLI5byS0O6iXSfKuYIhUBTpsWW9svZYpRb0=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:f7:7d:46:5b:2d:bd:12:39:03:ca:58:99:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Oct 13 06:01:24 2026 GMT
Not After : Oct 14 06:01:24 2026 GMT
Subject: CN=85b728ab3862b26164958bdda912ba07bff9ee06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:ab:12:6f:64:f8:b9:15:b1:d8:1c:12:d9:
83:d3:8c:2b:4d:c7:2f:5c:5d:a4:9a:d9:c6:c2:53:
eb:be:56:87:b9:a2:51:61:41:89:06:c6:8d:a5:7d:
ce:fc:62:7f:a4:dd:2c:44:bb:85:d5:d5:8a:d0:eb:
2a:34:5c:6c:c9:ee:a8:3f:ae:10:8e:5a:4b:0e:e6:
23:13:0a:70:36:33:02:f6:ec:ee:b2:80:9e:25:2d:
09:25:86:25:79:cc:3e:66:69:b9:0d:e7:32:da:b8:
c6:79:46:1b:69:b5:87:9d:8a:a4:f2:a3:71:b4:5b:
af:9b:82:dc:35:14:9c:f9:19:79:02:9a:5c:73:eb:
b2:80:58:d4:b9:e2:3e:c2:bf:30:14:34:66:e9:db:
99:02:45:3a:a6:b7:f0:2e:4f:24:f6:05:8a:ff:30:
8f:a6:bc:b0:74:f6:e5:23:ac:3c:4e:71:64:a4:cb:
83:f6:a4:5c:97:c0:10:f3:73:1d:52:98:cc:51:6a:
fc:94:fe:3e:8e:d2:a0:f0:d4:6e:5e:93:a5:e2:db:
96:db:42:d7:2e:c5:bf:a7:56:1b:97:2e:df:36:0a:
af:54:22:ac:2b:d6:2c:4b:1d:57:df:31:66:02:af:
e2:00:2c:09:5f:78:d5:7b:85:30:b0:06:7f:5d:a5:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:28:AB:38:62:B2:61:64:95:8B:DD:A9:12:BA:07:BF:F9:EE:06
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c9:ab:33:4f:51:b3:f6:eb:86:42:04:1d:ba:e2:6f:8a:5c:
cd:4c:48:05:3f:3f:e1:99:67:19:bf:10:55:8e:0f:0f:a8:12:
0b:f6:f4:ed:a3:c2:e5:c3:f7:f7:eb:d8:e1:f9:23:41:b6:22:
50:35:1e:cb:5a:85:3c:b3:d8:a0:67:0b:75:d0:d6:43:b6:15:
f9:a6:5b:a4:fe:e2:4f:d2:0a:1f:f9:e5:ea:89:b6:3d:1b:e7:
79:34:8e:2f:10:05:a4:65:67:9a:5f:94:61:be:50:9e:d6:f2:
1c:44:4a:90:10:3b:71:9d:e4:a3:f6:bc:89:18:3c:86:96:45:
fb:dd:80:84:37:db:f2:ee:55:e1:c1:8c:a2:00:b6:7c:4f:df:
82:20:c0:3a:25:ef:7a:d5:00:6c:3e:47:68:27:6c:45:ac:94:
80:bb:b4:9a:3c:62:95:2f:85:2d:c4:25:c7:0b:24:33:eb:47:
72:7b:70:9a:cf:bc:96:58:aa:96:0b:04:bd:bb:f0:d0:26:8e:
ec:61:d0:37:e7:0d:25:8f:e7:bf:5a:4e:d6:fb:ca:a9:5a:75:
e1:64:ff:1a:ee:a5:8a:b3:58:af:92:1a:b8:fb:a8:b3:de:55:
d4:ee:cf:ce:ab:d0:e1:a1:88:6f:c3:82:e6:f3:b3:eb:0e:cc:
30:36:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:48:34 2026 by rpki-client