Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: /C7cbUJJo0M9xW193/Bu/ECdNtjFoSuaW1tpPdicvpo=
Subject key identifier: 18:6A:E9:D5:AD:3B:B2:9E:41:96:D7:BA:AF:45:35:B1:DA:7F:C1:6B
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019FA33C0F4C74B8A7C6BAD832B9363BCD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0DB7
Signing time: Mon 27 Jul 2026 11:00:50 +0000
Manifest this update: Mon 27 Jul 2026 11:00:50 +0000
Manifest next update: Tue 28 Jul 2026 11:00:50 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: sX5A/Yjpe1nOd8IWe7ma3Ew2+lyuNuIs69XuTj5/u4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:0f:4c:74:b8:a7:c6:ba:d8:32:b9:36:3b:cd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jul 27 11:00:50 2026 GMT
Not After : Jul 28 11:00:50 2026 GMT
Subject: CN=186ae9d5ad3bb29e4196d7baaf4535b1da7fc16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:92:01:47:e5:02:41:aa:52:4f:69:29:3f:
e7:d2:db:84:64:24:9a:da:7f:58:3d:57:76:c5:75:
f2:3d:e9:ac:d2:17:19:7d:b5:7c:51:87:b8:4e:cb:
0b:ba:fc:3e:86:1a:ce:46:73:24:b2:f3:16:6f:47:
93:0c:22:b1:3e:f0:cd:e2:d8:21:25:02:12:60:c2:
2b:91:05:fc:d6:7f:08:68:34:5a:c7:24:26:56:82:
d5:14:97:45:ef:f3:3d:a4:c5:13:c2:16:0d:1b:7e:
fd:9b:51:15:66:0a:15:b6:10:ac:ce:85:37:08:e6:
0a:9c:18:8d:67:18:77:fc:3a:85:33:89:6d:5c:71:
da:51:c5:e9:8f:aa:10:70:56:21:04:35:66:52:ed:
5c:b3:10:45:1c:e2:ba:03:c0:67:b8:bc:84:eb:76:
b6:c4:34:22:df:96:fa:1f:dd:54:30:9c:4d:63:f2:
e8:8f:5c:90:78:59:e8:5e:6c:08:0d:4a:d5:02:e0:
50:df:04:69:14:e5:57:14:cb:0a:42:8e:ad:1b:90:
6e:90:b0:ec:6b:23:ab:f0:26:45:db:92:9b:b3:02:
e7:0f:94:de:aa:c2:08:9f:7b:74:5f:79:a1:ff:49:
46:70:b8:6c:47:e6:ff:c8:a4:64:9d:1e:c8:8d:b6:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:E9:D5:AD:3B:B2:9E:41:96:D7:BA:AF:45:35:B1:DA:7F:C1:6B
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:e0:40:f1:9d:9d:7c:3b:4b:3c:42:c2:48:1d:e0:fe:07:
ea:92:cf:c6:56:5b:35:01:39:1d:d9:8b:ff:87:f6:e3:e3:f2:
08:46:3a:f5:b6:18:3a:d4:4f:3e:f1:90:ac:18:6d:5f:69:b2:
4d:fb:9e:3c:b9:50:31:61:ef:f3:01:9c:e8:78:52:1d:67:b1:
17:d5:bf:67:2d:70:f4:6a:59:07:19:79:9f:08:6f:58:e2:35:
0f:c3:e2:33:f2:ac:e6:78:9a:93:09:ec:6e:22:8d:3c:07:a5:
61:ef:80:f5:c3:d0:d1:8f:ff:7c:83:eb:bd:9c:69:c4:da:a1:
5e:a8:4e:a7:d9:8f:d0:8d:74:1e:35:8a:4c:2d:dc:89:52:bc:
92:cd:e5:5e:d6:e2:b4:15:7a:24:63:dd:c6:c6:96:86:66:ca:
d1:51:6d:97:af:ca:b9:95:d1:4e:89:be:5a:24:f4:fa:2b:ad:
73:74:30:08:dd:2e:ba:88:e0:7b:03:3b:04:d8:14:ef:29:51:
7a:87:26:cf:d9:7e:13:f6:80:28:8e:81:b6:17:0d:88:29:12:
22:2e:0d:dc:7f:ed:97:d4:d5:84:bf:79:ec:b7:23:fd:59:a8:
40:90:23:4a:03:58:6a:23:ac:74:ee:49:ff:dc:70:e1:c9:10:
32:2c:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:39:24 2026 by rpki-client