Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier: EYNAIlQNnxXqVTCjH2acglH3S8qnfTHDQ6wGGO59Km4=
Subject key identifier: 50:03:FB:0C:77:EE:3B:B8:6A:40:7F:D5:59:0C:EF:9C:03:DE:17:D7
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A17D3C93659D991FA772DB91C45437E006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number: 1AF1
Signing time: Tue 27 Oct 2026 12:01:23 +0000
Manifest this update: Tue 27 Oct 2026 12:01:23 +0000
Manifest next update: Wed 28 Oct 2026 12:01:23 +0000
Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=)
2: EsdKWeeH89lPs-xb14vozlffi5Q.roa (hash: aZzRUmI/E+w8cPe3zKb8Q0CXdJCPscIwEYbU8GG9mGA=)
3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: 89JIjf2aCjcPhlxkdL0zj/FMedK8lLbrTjB9sFDKqzw=)
4: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=)
5: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=)
6: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=)
7: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=)
8: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:93:65:9d:99:1f:a7:72:db:91:c4:54:37:e0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Oct 27 12:01:23 2026 GMT
Not After : Oct 28 12:01:23 2026 GMT
Subject: CN=5003fb0c77ee3bb86a407fd5590cef9c03de17d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:a4:d5:94:d6:55:bb:2c:d9:d1:c0:29:00:
5b:63:87:9f:4c:6f:49:a7:b4:75:a1:42:63:e3:96:
e8:5f:1c:6c:8b:2f:bf:72:7a:f1:5c:8e:5b:d2:70:
20:e0:26:f6:75:4f:cb:4f:b3:ed:19:f7:7f:c8:80:
eb:b4:45:fe:80:32:6d:63:38:ad:27:77:dd:96:49:
ea:b0:4e:3d:69:35:f4:a4:31:b1:f5:3b:45:15:e0:
d5:6a:97:72:0a:5c:fc:26:6a:63:d3:15:b4:56:d3:
04:4c:4a:02:b8:9b:9e:d4:ab:e0:c4:ab:5b:33:3b:
b1:7b:fd:80:42:29:04:b7:41:2d:97:5d:b3:aa:9a:
d6:7f:0e:b0:d5:f3:92:7f:5c:76:08:f0:65:d7:41:
21:90:23:28:56:6e:1e:85:19:4d:85:a1:99:44:4d:
ad:30:a6:a1:e0:bc:6a:f4:fd:7a:57:aa:4e:fb:fa:
48:16:c4:6e:fc:ef:2d:b8:f3:41:1c:96:63:c7:c3:
79:c7:e9:50:c3:2b:2e:c0:c6:07:b7:64:38:d9:8b:
42:88:c9:a0:49:ba:a7:21:1e:fc:02:25:75:2d:be:
ba:22:eb:48:35:a3:51:72:10:a8:28:2e:ae:ee:99:
6e:e4:99:77:f9:15:49:42:75:a6:11:16:1d:1f:ad:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:03:FB:0C:77:EE:3B:B8:6A:40:7F:D5:59:0C:EF:9C:03:DE:17:D7
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:b0:d6:ae:50:17:ad:1b:19:a3:b7:3b:92:37:5d:f0:8e:
f2:50:fb:ba:94:26:e6:6b:66:4a:54:37:ff:ca:ad:c6:dc:a1:
da:d2:ec:cc:fe:14:20:f5:64:70:15:fc:73:e8:5c:e7:8b:b3:
02:52:b5:8c:0b:11:cf:87:0c:df:95:a3:2d:32:bf:01:37:1c:
73:1a:13:6b:52:44:07:fa:90:d0:43:3c:ef:69:e2:ae:53:eb:
f5:ce:23:6d:0e:75:fd:8b:2c:2e:02:39:e5:3a:6c:33:c1:23:
28:20:db:66:61:50:d6:7a:64:0f:ad:0e:43:7b:87:2f:f3:60:
d9:06:1b:75:2d:08:97:8d:24:be:b1:de:c0:d7:3c:70:6e:4b:
1d:78:c2:e4:2a:39:15:3c:8c:dc:c3:b5:fc:b6:ba:4e:2d:d4:
5b:57:33:74:43:4f:d4:53:78:ea:5f:19:72:7b:4c:ba:93:f4:
72:3b:ca:f4:4a:7b:ca:e2:74:43:b7:99:e2:a2:7e:3c:54:10:
a0:9d:62:67:04:ad:9b:d6:77:7e:f9:75:46:56:ef:64:fb:39:
8e:be:c5:b2:11:71:ff:3c:e0:8a:9d:a1:d6:a5:50:2a:63:68:
93:c1:d1:ed:49:45:e3:ef:2c:e0:fa:b8:1b:f5:c5:cb:a2:ae:
6c:3f:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:39 2026 by rpki-client