Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: NqZ7kk2eXOc3k1SXEWubfw4Sv6gJWkPUCnlSmkywsCk=
Subject key identifier: 60:E2:03:94:0F:88:3A:D0:70:81:55:AB:7B:99:4C:0C:47:19:3A:07
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019D3A8AABD5C2AE6D8F9F75148754D59273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 17:00:59 +0000
Manifest this update: Sun 29 Mar 2026 17:00:59 +0000
Manifest next update: Mon 30 Mar 2026 17:00:59 +0000
Files and hashes: 1: QVqjoZxOanPkSrpEE0sDBKehWCQ.roa (hash: k/xCn5DILtdCdVds1aCxyFqhcnoj9r7lODhjJ0bo6sk=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: edRQyL1jPodlndE2s22pKVNg/WOQuDJfWgBzjNFNyJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:ab:d5:c2:ae:6d:8f:9f:75:14:87:54:d5:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Mar 29 17:00:59 2026 GMT
Not After : Mar 30 17:00:59 2026 GMT
Subject: CN=60e203940f883ad0708155ab7b994c0c47193a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:ad:fc:1d:50:ea:aa:7b:6c:a0:87:5c:16:
db:2b:d0:58:45:db:c8:6c:f5:33:a3:1e:2e:0c:0e:
cf:53:40:75:9f:db:5e:14:d3:c0:da:d1:86:5e:6c:
76:05:3e:25:6d:e9:ad:18:ba:94:0a:cf:73:86:c9:
e3:29:3e:fd:8b:29:9b:05:1e:22:fb:bf:78:b1:ae:
5a:1b:a7:c3:32:bf:ee:06:b9:71:ad:86:f2:77:0c:
00:bb:1d:b7:f7:61:b6:4a:f5:21:f4:72:f7:d8:f2:
78:53:9b:ce:8e:38:8d:bf:bb:ac:14:fb:98:70:f7:
45:5b:d8:c7:94:38:aa:ad:a2:11:f8:1f:6f:c2:f3:
85:51:e6:5c:11:d3:21:b7:ff:21:66:f8:b9:ab:ca:
15:99:5c:19:7d:e0:dc:14:fd:52:97:16:1e:0d:34:
41:f5:c9:d1:0e:d9:c9:c5:8f:5a:10:14:49:bb:83:
e9:0e:25:78:fd:6e:bf:13:2d:79:dc:17:fd:2f:ce:
f4:10:fc:f6:7f:79:f9:20:db:32:b4:5e:5c:98:d5:
1e:2e:9a:93:60:6e:81:51:a0:cd:a0:89:6a:7d:aa:
41:67:df:96:51:6b:05:27:45:83:aa:d9:c8:4d:38:
b8:da:6a:e0:e7:e1:61:d2:75:8a:c1:82:00:67:05:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:03:94:0F:88:3A:D0:70:81:55:AB:7B:99:4C:0C:47:19:3A:07
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:a0:6b:7f:9a:25:fa:2d:ea:e1:70:49:e6:79:0d:f3:5b:
01:9e:8b:e7:b2:ee:6d:af:f6:4f:89:ba:75:9a:eb:b5:c6:9e:
58:0e:70:61:cc:54:55:a6:a1:84:43:e2:e9:1b:99:fc:d6:e7:
9b:83:a3:1f:24:1e:8c:49:03:0b:4d:2f:94:a7:d0:6f:48:98:
d7:b4:e1:fb:c0:4c:d8:87:22:3b:8e:dc:69:b9:48:08:56:13:
23:61:1d:07:0f:b6:a7:a4:f7:d1:5c:40:72:93:29:31:ef:55:
dd:4f:12:77:6b:a9:47:d7:a3:25:b8:eb:6d:8c:0c:47:89:d2:
53:ed:32:69:c5:fd:67:1e:02:6d:fa:68:59:3f:fe:fc:24:8c:
41:f5:76:89:6b:d9:d1:81:73:3f:b5:ca:34:f7:8d:2b:41:19:
b2:73:be:56:97:96:ca:41:ad:f1:a1:ea:53:aa:99:01:72:d7:
35:18:cc:41:db:9a:fd:be:d2:1c:f2:52:7e:58:23:72:ad:fe:
df:fd:06:f2:01:f6:70:c2:48:44:07:62:05:9d:c5:63:a6:4b:
aa:7e:20:04:c6:49:17:18:20:8d:dc:01:68:c3:92:a2:b4:82:
7b:a4:a7:79:eb:fb:2d:76:bf:b5:38:9e:a4:8b:fb:b2:26:94:
ce:e2:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:41 2026 by rpki-client