Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: PUu9aPm9CZ+y2kGuj2OnwZSCL6IKvr9/7rTx1Skdj3w=
Subject key identifier: 77:8C:F0:56:70:70:5E:BA:61:EB:BE:0A:38:40:46:B2:42:BE:04:EA
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01A110E0637A6E9AADCB90C1A71727C6CBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1A8B
Signing time: Tue 06 Oct 2026 11:01:43 +0000
Manifest this update: Tue 06 Oct 2026 11:01:43 +0000
Manifest next update: Wed 07 Oct 2026 11:01:43 +0000
Files and hashes: 1: AAf9opHVWJgSdG0z23sJPDY_3AM.roa (hash: iVy5buGzTgQUxgbWVG8NGcWMQhFRBdxznjdBNwotVPc=)
2: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: ULYEV6xM0N0+ftYYkNiPDI77g0lfpgofprS/qaxi0nI=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:63:7a:6e:9a:ad:cb:90:c1:a7:17:27:c6:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Oct 6 11:01:43 2026 GMT
Not After : Oct 7 11:01:43 2026 GMT
Subject: CN=778cf05670705eba61ebbe0a384046b242be04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:ee:f9:69:80:34:0d:92:82:e1:8f:11:90:
c0:59:f9:3c:5d:e5:38:f1:a8:c0:0e:f9:24:62:2d:
42:5e:43:1e:66:d1:df:ed:66:68:26:87:09:cf:aa:
49:07:54:48:77:08:b1:19:ba:80:59:dc:d7:e9:a5:
92:30:f8:36:ff:cd:1b:35:4a:30:56:8a:68:cb:9f:
c8:37:84:70:ad:da:48:51:4b:6d:55:d4:e2:a9:74:
8f:1d:31:27:bb:68:e8:e0:87:8c:f0:1a:71:e9:7c:
69:11:aa:a8:2b:7c:a2:b2:53:04:a0:2f:82:8d:7c:
0f:5f:76:e4:b0:99:da:cd:5d:4f:d6:3b:7a:e0:ea:
b5:39:b0:85:40:fe:c4:d8:58:b3:e2:17:e1:40:71:
9c:b0:a7:2c:32:ab:b1:ac:65:a4:23:02:17:56:61:
78:d0:bf:9d:eb:96:9a:5b:0f:f5:71:d8:33:de:97:
c2:c2:8a:1c:88:43:5b:ce:8c:ef:29:fb:b4:a3:14:
d0:f6:26:fa:e2:67:e0:5b:b3:7f:d9:ba:e3:db:2c:
6f:8f:7e:38:b7:14:f3:37:0c:c8:6f:a4:d8:26:e4:
c9:19:7f:4c:02:c8:67:87:47:83:a9:c3:7f:9a:ec:
18:48:b1:e5:e3:04:78:d9:04:94:41:8d:dd:11:e3:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:F0:56:70:70:5E:BA:61:EB:BE:0A:38:40:46:B2:42:BE:04:EA
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c5:2c:b1:d3:a8:37:5f:25:f4:88:a6:9d:cc:de:3d:48:14:
02:5c:cf:cf:27:d5:47:37:55:7e:cc:b8:89:97:2d:12:4d:d7:
3c:e1:ad:f4:94:22:51:4b:fb:e2:93:c9:fb:fd:90:af:f7:be:
2d:b0:ee:2f:e9:bb:99:fe:39:d7:80:c6:f5:4d:8b:36:8d:d7:
92:32:02:fe:09:6f:16:0d:39:e5:30:c8:dd:ac:0f:ec:40:03:
d5:5c:7c:82:1d:f1:b4:0c:2e:07:14:75:11:89:64:4b:63:77:
e4:35:39:5c:58:d2:5d:5f:2a:36:a6:2d:98:e3:6e:99:80:1d:
17:4f:2c:48:91:58:ae:b9:9a:83:50:47:da:45:30:16:25:76:
50:74:5f:cb:e8:d5:4b:a9:42:04:96:96:10:67:6a:de:1d:0e:
67:98:64:f8:f0:7b:c9:81:f8:10:26:58:70:ae:ec:39:bd:92:
72:87:b6:de:cb:88:4f:42:a1:63:cc:a3:a9:fe:dd:d5:0f:1a:
23:35:4c:34:8c:1f:be:4b:54:86:66:1e:30:b0:f6:65:a0:8b:
e1:5c:4e:1a:ca:80:91:52:cb:44:50:7d:08:30:dd:cb:32:a5:
e0:be:80:28:5f:05:52:eb:c7:22:08:bc:cf:33:87:5b:a4:d8:
0c:f3:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:16:13 2026 by rpki-client