Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: TJADrwdk+99VNS5iRqgeH2h5NNuzzd4wqvOQQIeQH3o=
Subject key identifier: BF:71:D4:40:33:CA:66:BD:30:A0:A4:50:3B:40:05:03:E7:53:39:18
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 019D38D309F4B09EA2FC1F28A8B5C29409BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 1134
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: 1-yZ40ZIR1zrvdMavNgVP-U3GRkw.roa (hash: rrotFnvFJZjY/IZDrZ/Q8wCEoprdXyBMiaME4EtjYZ8=)
2: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: duHrr/roK+CvT4o3K8s+/nOmWWnk+V8JFaJX6LeLSYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:09:f4:b0:9e:a2:fc:1f:28:a8:b5:c2:94:09:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=bf71d44033ca66bd30a0a4503b400503e7533918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:30:52:b6:7e:3e:b4:ff:fc:4d:28:6d:e8:
77:9f:cf:94:6e:25:02:ec:02:14:d8:01:40:66:1a:
43:49:30:b7:53:8c:a1:89:27:4f:78:aa:ed:a6:49:
d8:c0:45:7b:42:08:42:4a:85:bc:03:3d:a6:c6:b6:
18:4a:55:8f:12:13:24:1b:9c:64:d0:06:88:38:58:
cb:79:de:ec:48:9c:5e:10:ac:6b:25:74:a0:33:ad:
b7:08:22:44:b7:69:66:a9:57:f7:bf:42:e6:f8:ab:
09:b9:94:fb:2a:6d:07:d5:48:87:65:82:c4:2e:28:
5b:4c:cb:7d:83:5d:1d:b5:a3:ea:3a:01:68:71:df:
c8:65:22:5b:85:f6:68:f8:69:f6:da:42:d8:c2:26:
96:71:47:f2:d6:a0:d1:c8:07:95:77:1f:14:8c:f6:
9d:5e:fa:29:37:dd:27:22:65:fe:a9:18:86:d8:50:
f7:98:98:a4:b5:01:3d:15:44:04:84:01:a9:41:19:
53:a5:5a:25:69:6f:d0:3a:7a:c4:cb:48:5d:23:9f:
8e:f8:73:1e:f8:4e:53:df:1d:35:e1:48:fc:74:0a:
d3:d8:31:32:98:4a:85:30:1c:23:87:93:2f:3a:ed:
cc:bc:f4:51:84:9d:cc:2f:1d:f2:7f:db:47:0a:58:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:D4:40:33:CA:66:BD:30:A0:A4:50:3B:40:05:03:E7:53:39:18
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:a9:5c:9f:07:c1:79:1c:cb:f9:cc:cd:df:39:13:8f:59:
f2:33:d8:79:18:cc:22:45:ae:e2:c2:63:7c:c9:57:c2:b5:59:
db:e8:46:a4:c1:f1:86:70:85:a9:b2:9f:92:86:81:d0:11:60:
b8:15:c4:b0:e5:0f:d6:b7:19:35:40:87:d8:00:be:08:59:f4:
21:67:86:74:d2:11:1e:6e:2b:97:94:9a:9c:66:51:c4:d9:27:
1e:bc:df:1c:d0:00:da:39:19:75:4c:66:64:33:f4:1c:4a:d3:
88:d1:14:0f:44:2e:66:aa:48:82:5f:4a:9b:3a:eb:8f:72:42:
a7:39:08:1e:8a:76:fc:18:1d:60:82:9b:7b:be:6d:d0:65:8b:
61:a7:60:47:32:13:d3:e0:55:27:aa:60:af:b9:b2:d0:40:6b:
51:35:8d:67:93:05:80:45:15:bb:de:40:41:d6:45:a2:b8:ce:
ed:22:5f:5a:0b:35:a2:ab:8e:ee:60:81:cc:b0:e1:7c:30:17:
8f:e4:4d:bb:66:4e:07:73:f5:f2:2d:04:fa:92:bb:51:a6:39:
77:fb:ea:fe:c6:29:d7:de:d3:44:5d:77:35:d2:b2:5f:51:ed:
9c:0e:37:19:e8:e9:72:6e:cf:9a:5b:b8:9b:ce:00:e8:34:08:
44:d9:f0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wn0sJ6i/B8oqLXClAm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi
NDczYWQwHhcNMjYwMzI5MDkwMDQ3WhcNMjYwMzMwMDkwMDQ3WjAzMTEwLwYDVQQD
EyhiZjcxZDQ0MDMzY2E2NmJkMzBhMGE0NTAzYjQwMDUwM2U3NTMzOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl8wUrZ+PrT//E0obeh3n8+UbiUC
7AIU2AFAZhpDSTC3U4yhiSdPeKrtpknYwEV7QghCSoW8Az2mxrYYSlWPEhMkG5xk
0AaIOFjLed7sSJxeEKxrJXSgM623CCJEt2lmqVf3v0Lm+KsJuZT7Km0H1UiHZYLE
LihbTMt9g10dtaPqOgFocd/IZSJbhfZo+Gn22kLYwiaWcUfy1qDRyAeVdx8UjPad
XvopN90nImX+qRiG2FD3mJiktQE9FUQEhAGpQRlTpVolaW/QOnrEy0hdI5+O+HMe
+E5T3x014Uj8dArT2DEymEqFMBwjh5MvOu3MvPRRhJ3MLx3yf9tHClhqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9x1EAzyma9MKCkUDtABQPnUzkYMB8GA1UdIwQY
MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt
YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz
LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5ypXJ8H
wXkcy/nMzd85E49Z8jPYeRjMIkWu4sJjfMlXwrVZ2+hGpMHxhnCFqbKfkoaB0BFg
uBXEsOUP1rcZNUCH2AC+CFn0IWeGdNIRHm4rl5SanGZRxNknHrzfHNAA2jkZdUxm
ZDP0HErTiNEUD0QuZqpIgl9Kmzrrj3JCpzkIHop2/BgdYIKbe75t0GWLYadgRzIT
0+BVJ6pgr7my0EBrUTWNZ5MFgEUVu95AQdZForjO7SJfWgs1oquO7mCBzLDhfDAX
j+RNu2ZOB3P18i0E+pK7UaY5d/vq/sYp197TRF13NdKyX1HtnA43Gejpcm7Pmlu4
m84A6DQIRNnwaQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:28 2026 by rpki-client