Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: MBbVJwxZHIj9kYVtoUZELQPZ3sVUxCaI5/Edqk1Ma4E=
Subject key identifier: 60:67:65:83:86:E9:48:00:AD:BF:03:52:56:3D:03:31:C1:2C:C0:B0
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019D3865955BC3D7D515868157D85891B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: +DApLqT3ysxGnGnJVeQncCH5rbmnp6qXO2AW52zS/gc=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:95:5b:c3:d7:d5:15:86:81:57:d8:58:91:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=6067658386e94800adbf0352563d0331c12cc0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:20:21:ad:d3:cd:d5:b5:23:db:47:f3:19:
22:da:3a:4c:d4:bf:31:a8:8d:23:a2:9d:27:e9:19:
65:13:81:87:89:8a:d3:5f:1f:2a:bb:4c:9f:16:5b:
1c:d8:42:30:65:13:48:bc:d6:59:51:b1:11:57:e1:
fb:e7:0e:25:c3:11:7d:cb:b5:00:26:05:71:df:82:
12:33:1f:c1:44:6a:77:a0:56:0e:0f:f5:64:b5:26:
f7:89:26:13:64:a5:e0:3b:40:1d:5e:0b:45:a2:11:
4b:32:41:7c:d0:c8:3c:f7:e7:71:5d:15:3c:d9:6b:
ed:29:7a:cc:53:c6:af:dd:f9:3d:83:44:db:7c:ee:
c7:2d:21:07:5d:e6:b8:0a:36:6d:7b:aa:f4:11:fa:
be:1d:56:9d:6a:f4:31:2b:44:a8:e5:3d:d5:b5:ac:
d6:93:ee:6e:8c:64:1c:e8:1d:89:37:4b:ca:e5:cd:
35:97:84:97:c8:24:c4:1d:f3:45:f3:d4:7b:dd:6b:
b1:48:01:f3:b1:e9:9c:e5:73:92:f9:ce:11:a5:e6:
4d:f0:b7:87:2d:c2:0c:85:ec:01:56:44:43:1a:e8:
79:2e:4e:8d:4e:62:d6:56:eb:96:04:68:6c:45:bd:
bb:0f:d4:c1:83:a7:29:a4:67:30:5b:9d:e7:9d:42:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:65:83:86:E9:48:00:AD:BF:03:52:56:3D:03:31:C1:2C:C0:B0
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b5:f2:65:09:d7:aa:67:83:09:3f:7e:aa:95:e4:57:42:82:
62:7e:48:23:77:da:38:03:70:ac:ec:04:10:16:15:10:63:5a:
c0:3c:88:72:70:c3:2a:d7:c5:13:9f:aa:cd:29:35:a7:2f:3a:
63:a9:71:84:99:ea:8f:59:c0:64:56:72:2c:5e:28:cd:b5:03:
24:3d:eb:3a:f6:e9:4b:3d:77:ac:c9:95:b4:61:18:3d:33:91:
f4:a7:31:8c:c9:b8:b0:eb:14:10:32:d1:29:4e:4d:97:a8:85:
3f:21:45:36:0c:c1:6e:11:98:e9:b4:75:cb:59:78:5f:90:93:
7b:d7:88:f7:da:67:2e:39:34:e7:1c:cd:d7:f6:49:c5:62:bf:
5b:ec:21:bb:d7:fc:ca:db:5b:db:ad:c9:bc:0b:a7:7a:81:30:
14:bf:ce:49:7d:d4:f8:38:9c:90:99:11:3a:17:cf:db:ec:6b:
d1:18:32:55:6a:d2:5f:e1:81:e7:d9:da:12:36:cc:09:be:bc:
e8:56:5e:0d:6b:4a:6e:b7:d1:e7:d0:ff:ff:1c:e2:4d:e4:2a:
2a:15:27:09:29:d7:82:d2:4b:a4:70:28:69:00:2f:f5:c8:f1:
29:4f:c2:89:65:50:d4:6f:97:18:83:e8:62:fd:bb:e6:c2:1a:
be:89:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:09 2026 by rpki-client