Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: RKUju9zmrhkSLvwX/Mk3c0p+MkLOs/Q83P4DTM7VAt8=
Subject key identifier: E6:7C:5A:38:9E:57:D5:8E:A6:B4:98:88:8A:79:2E:8B:58:44:73:22
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019D39417D9671A6C23E27BF560C4F0904EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0C77
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: +pIhQpz5UF7AcPJR2Ivn4bd23Q+iUqLASB57PSBRkFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7d:96:71:a6:c2:3e:27:bf:56:0c:4f:09:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=e67c5a389e57d58ea6b498888a792e8b58447322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:89:ad:da:85:43:1c:50:07:c7:32:27:f1:
2d:1d:39:15:cd:6d:bd:df:03:ab:a3:0b:82:1f:cb:
7e:c7:61:1a:61:0b:7b:70:a4:19:65:8e:38:4d:61:
df:fd:de:f3:1d:cd:5e:35:9f:93:33:6d:ed:d5:ec:
8b:f4:5d:4d:d9:74:a2:00:42:bb:77:72:24:72:bd:
e3:9f:37:03:3c:9d:97:f6:08:09:85:83:7c:7b:0d:
5e:0c:59:ce:68:fe:d4:05:b9:34:18:18:1a:5e:df:
26:29:3d:f7:fb:7d:1a:63:e6:3f:42:36:21:b6:e4:
d2:12:46:22:20:ac:3f:e0:98:b8:1b:85:f6:ff:91:
e6:42:84:c5:dd:11:a4:04:15:78:f0:45:c0:d5:22:
3a:e0:fe:b5:6e:79:82:e5:90:a9:e2:e4:fc:68:be:
a7:58:93:a3:4a:47:38:97:b7:7e:3a:e6:4f:84:ea:
e6:ef:6b:2c:82:fb:b8:33:d7:56:ef:4e:8d:04:84:
b7:d3:36:12:ce:a0:81:de:6b:34:58:38:87:61:6b:
ea:70:07:5d:74:ba:67:04:94:dc:0f:cb:73:05:b1:
53:1d:82:38:d5:83:57:a8:0d:fc:80:7a:8f:a8:64:
cc:f8:2d:ec:9a:b6:ac:bb:5e:3d:9a:ec:5c:db:54:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:5A:38:9E:57:D5:8E:A6:B4:98:88:8A:79:2E:8B:58:44:73:22
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:e4:65:a1:31:69:be:b6:31:6a:68:a2:7a:c3:b5:50:5e:
eb:c6:fb:aa:6d:76:42:93:d4:e3:6f:40:65:23:66:8a:33:f1:
0d:f2:b2:64:e4:3b:92:5a:3c:2e:3a:95:5c:cc:a0:a2:2b:a2:
7a:36:52:37:67:55:08:75:88:65:68:72:b1:d9:65:28:db:56:
ff:1b:4e:c4:a5:65:0f:01:30:33:0b:7a:7c:e2:8c:88:ab:37:
64:29:1f:ed:10:49:ee:7a:5c:9a:00:15:8e:7b:67:83:4d:be:
3d:ec:66:58:05:ac:87:12:5a:ae:d6:66:ae:d5:b3:44:b1:77:
73:55:00:eb:f9:f2:2e:34:8d:19:c3:0e:43:43:0d:ce:ff:1a:
cd:96:f6:cb:49:93:68:a6:f0:90:29:b6:b4:86:20:f3:11:43:
67:e2:92:de:5a:27:e2:5d:1f:45:7f:5d:cb:99:c8:96:95:21:
55:8d:37:ee:a1:a3:68:c5:6f:d4:93:e4:31:46:66:2e:c8:19:
60:b7:29:a5:28:f9:b1:65:62:f5:6d:17:9d:1e:c1:18:82:39:
31:1f:61:f4:7e:ab:ad:59:1e:fd:e0:60:a0:b9:21:10:7b:8d:
12:64:45:8d:1f:03:75:c4:a5:43:39:7e:e4:ac:12:a9:e5:05:
1e:1b:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client