
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: C1a5XzJouuYlaj3hvZcYsQ9e5JceTpRoFmrf2QIqrFM=
Subject key identifier: 1D:26:85:51:2B:8E:BA:67:87:76:65:99:59:F6:2B:97:29:16:E7:10
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019EB98F34EA43536CD3DDD7CA3B9F4DA96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0D3E
Signing time: Fri 12 Jun 2026 02:00:30 +0000
Manifest this update: Fri 12 Jun 2026 02:00:30 +0000
Manifest next update: Sat 13 Jun 2026 02:00:30 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: Bj9voNsQUDzBUdIE9sQt/5T17TiD2QWille3Wi4+gCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:34:ea:43:53:6c:d3:dd:d7:ca:3b:9f:4d:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jun 12 02:00:30 2026 GMT
Not After : Jun 13 02:00:30 2026 GMT
Subject: CN=1d2685512b8eba678776659959f62b972916e710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:2a:80:26:b4:5a:38:05:04:cb:ad:45:93:
63:b7:3d:67:bf:7d:ae:e9:89:e3:37:02:8a:ae:38:
3b:d3:80:77:37:5f:4c:f7:d3:3d:d8:87:4b:a8:87:
4c:cc:d6:53:4d:ac:72:50:02:54:b5:a3:02:c1:4c:
b1:ad:8e:1e:56:98:45:aa:2c:37:b2:e8:d7:82:94:
41:a7:83:04:06:83:4f:07:f4:2b:5a:53:98:d9:18:
e2:b6:3b:42:7c:a5:85:d7:d3:3f:3e:92:fb:f2:2c:
f5:2d:f8:f2:cc:67:19:33:2a:a0:71:20:7b:49:c7:
29:52:c4:e5:fd:ca:e7:cf:a0:98:ab:50:04:8a:c4:
34:d7:8a:23:2a:eb:8c:dd:d8:fb:47:5b:ca:19:f7:
d0:5f:c1:41:df:ee:a6:79:cc:67:5e:2e:c9:96:72:
cf:02:20:b5:57:37:a0:cd:5f:f0:8a:af:9d:38:bd:
84:f9:30:20:dd:cd:a9:fa:8c:69:ad:92:6f:6a:a1:
ea:6f:3e:dc:bb:e0:a0:cc:7c:9b:c4:fd:7b:87:f7:
56:bd:86:19:3c:3c:84:7c:f2:c9:dd:88:16:8d:88:
c9:c5:8a:5e:25:a6:96:4d:51:72:1b:3e:1f:7a:16:
66:1b:46:11:fe:94:f0:7a:f3:44:01:29:c4:8d:e6:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:85:51:2B:8E:BA:67:87:76:65:99:59:F6:2B:97:29:16:E7:10
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:37:5a:a7:94:40:a3:d8:e1:fc:a2:73:c3:72:81:d5:90:8b:
11:a0:ef:fe:1b:7b:2a:0a:d9:e4:7b:66:bf:e1:0e:c3:65:76:
6f:9c:af:6e:19:bf:19:ff:86:9d:0b:f2:60:5e:82:43:84:c4:
2d:4f:81:bf:08:8e:96:08:a5:ce:73:3e:36:e7:40:ff:92:d2:
04:c6:f1:6b:f5:d4:aa:12:8d:ed:29:38:be:a9:6e:40:07:19:
f4:3d:5a:8b:c4:88:81:f4:dd:68:4f:3c:f6:6b:b8:a9:07:dd:
b1:29:64:c7:1c:c7:24:cc:27:3a:09:bf:7c:68:99:37:44:5f:
7d:8a:37:ab:72:48:31:fd:88:8f:68:8b:7d:9d:45:30:d3:03:
60:31:b0:b3:c6:78:2b:01:10:bc:5b:9d:ff:85:72:15:c0:89:
9f:c6:28:9b:f5:bf:5c:91:cc:53:6e:3b:40:46:2e:97:4c:e2:
a1:d9:19:ff:1c:df:0f:6b:05:f6:72:d7:5f:8c:9e:75:b0:7e:
d3:a6:fd:28:0c:2a:87:46:37:09:6f:86:19:29:f1:f8:a3:3d:
6e:e4:0f:4f:fa:60:ec:84:ab:7e:a0:8c:57:55:1c:83:67:e5:
be:27:08:1d:33:a3:d1:47:66:01:88:3a:7a:d9:b8:60:25:5b:
27:40:90:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jzTqQ1Ns093XyjufTalrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4
ZTQ1MTAwHhcNMjYwNjEyMDIwMDMwWhcNMjYwNjEzMDIwMDMwWjAzMTEwLwYDVQQD
EygxZDI2ODU1MTJiOGViYTY3ODc3NjY1OTk1OWY2MmI5NzI5MTZlNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkoqgCa0WjgFBMutRZNjtz1nv32u
6YnjNwKKrjg704B3N19M99M92IdLqIdMzNZTTaxyUAJUtaMCwUyxrY4eVphFqiw3
sujXgpRBp4MEBoNPB/QrWlOY2RjitjtCfKWF19M/PpL78iz1LfjyzGcZMyqgcSB7
SccpUsTl/crnz6CYq1AEisQ014ojKuuM3dj7R1vKGffQX8FB3+6mecxnXi7JlnLP
AiC1VzegzV/wiq+dOL2E+TAg3c2p+oxprZJvaqHqbz7cu+CgzHybxP17h/dWvYYZ
PDyEfPLJ3YgWjYjJxYpeJaaWTVFyGz4fehZmG0YR/pTwevNEASnEjebriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0mhVErjrpnh3ZlmVn2K5cpFucQMB8GA1UdIwQY
MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt
YzhjYzViMmQwYWVkLzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk
LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTdap5RA
o9jh/KJzw3KB1ZCLEaDv/ht7KgrZ5Htmv+EOw2V2b5yvbhm/Gf+GnQvyYF6CQ4TE
LU+BvwiOlgilznM+NudA/5LSBMbxa/XUqhKN7Sk4vqluQAcZ9D1ai8SIgfTdaE88
9mu4qQfdsSlkxxzHJMwnOgm/fGiZN0RffYo3q3JIMf2Ij2iLfZ1FMNMDYDGws8Z4
KwEQvFud/4VyFcCJn8Yom/W/XJHMU247QEYul0ziodkZ/xzfD2sF9nLXX4yedbB+
06b9KAwqh0Y3CW+GGSnx+KM9buQPT/pg7ISrfqCMV1Ucg2flvicIHTOj0UdmAYg6
etm4YCVbJ0CQSQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:26:51 2026 by rpki-client