Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: hLT7f/vorV5OMwm+qjF3OFfb/243Jyt5uB5BBy+eTGU=
Subject key identifier: 87:2E:9D:B4:DA:69:A5:8E:99:8B:9B:BA:B2:D5:F0:3E:9D:B2:18:5A
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019DDE4431E64053BB357A0F2D466667ED1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0481
Signing time: Thu 30 Apr 2026 12:01:44 +0000
Manifest this update: Thu 30 Apr 2026 12:01:44 +0000
Manifest next update: Fri 01 May 2026 12:01:44 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: Co3C93Twdfw7Az/7PIKIpl46YIReCAv3V5WXafLBbU8=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:44:31:e6:40:53:bb:35:7a:0f:2d:46:66:67:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Apr 30 12:01:44 2026 GMT
Not After : May 1 12:01:44 2026 GMT
Subject: CN=872e9db4da69a58e998b9bbab2d5f03e9db2185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:29:d4:8b:a5:59:64:29:17:64:c6:6d:30:2a:
26:e3:d4:e9:9e:02:dd:bc:fd:7b:ad:c9:47:98:ac:
17:f5:37:6e:06:0f:3c:9b:48:16:be:df:77:31:eb:
84:ca:f8:ab:b2:85:73:c2:13:51:d2:dc:7c:0a:0e:
64:bc:3a:6d:da:39:d8:c3:65:a8:5f:68:be:4b:6e:
80:fc:fa:8a:6f:65:dd:7b:ad:12:a0:4b:ff:d6:d0:
d0:ff:97:9d:5f:cb:d0:67:fc:6d:4d:d8:91:01:4e:
f4:9e:a1:24:a6:00:08:ba:08:61:21:08:c7:38:85:
71:bd:d9:08:5a:26:2a:b0:c9:a6:17:fc:3d:8c:1d:
6e:e9:21:df:b3:c0:91:be:3a:93:e4:b5:2a:69:b5:
da:dc:e2:2e:a7:79:df:2c:0f:0a:d5:4f:4b:4f:28:
3b:a2:c5:02:52:06:ef:a7:f4:c0:c5:ac:b1:1e:a8:
3c:fe:03:56:2d:9b:d2:0b:14:03:dc:bd:43:98:66:
b5:9a:9a:3c:17:68:0d:34:4f:60:1d:f8:63:8b:a0:
19:e6:ea:06:7d:dc:e8:16:5b:c2:0f:95:a5:b8:37:
ff:9d:be:45:a8:37:cf:23:d4:82:10:c9:5a:53:b5:
c2:61:3c:bf:01:84:2d:b8:26:17:2a:14:73:fb:cb:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:9D:B4:DA:69:A5:8E:99:8B:9B:BA:B2:D5:F0:3E:9D:B2:18:5A
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:a3:ff:df:b0:f6:5c:b8:8d:ab:91:f5:d8:ce:52:91:97:
3e:46:50:ff:2a:2b:b1:c4:56:11:1c:7a:00:06:11:a7:0e:a1:
a4:7b:fb:9a:8e:33:34:8b:ea:48:68:f2:12:53:8d:a1:13:64:
5d:96:e7:ef:8c:9c:ea:43:82:28:35:4b:30:c0:d9:83:05:24:
f9:2e:78:38:dd:72:a7:e1:e8:ba:99:ee:8c:bd:f6:59:a7:81:
14:05:67:ce:ec:c0:e9:24:8e:48:5c:9b:8d:63:9f:f4:9a:fb:
1f:da:6c:a6:b8:ff:55:8c:9a:e8:e0:41:88:a9:cf:7b:f6:22:
32:1a:4b:6b:f1:57:3b:72:0d:75:30:96:33:0c:a0:21:60:86:
fb:1a:38:61:b6:2d:48:c9:bd:ea:25:72:79:25:ab:7e:0c:78:
a6:50:39:b0:14:4e:6c:89:7a:a0:01:99:f0:de:7f:2a:a2:a3:
7c:79:ba:b5:f7:ef:fd:99:b8:6e:5b:05:7f:9a:fd:68:34:b3:
c2:95:f2:96:9b:06:a2:b2:d5:ac:06:c0:17:23:82:8d:0b:2f:
0f:76:00:4d:de:47:71:ef:54:70:8c:25:01:32:aa:79:95:b0:
56:b6:48:72:09:c0:91:02:d3:0e:28:3b:73:73:20:35:22:87:
6e:24:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:39:02 2026 by rpki-client