Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: 2Z043zU/nmu7sZVWJcLXoZJETx2VzpXgxKHMV5fljNI=
Subject key identifier: 5F:FF:31:F1:DF:FB:21:55:A5:23:B1:33:7F:AE:B1:10:D8:7C:C5:D1
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019F3829BE30B35BA3A23B97EAF7C3280356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1996
Signing time: Mon 06 Jul 2026 16:01:27 +0000
Manifest this update: Mon 06 Jul 2026 16:01:27 +0000
Manifest next update: Tue 07 Jul 2026 16:01:27 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: /oZdYEh5foKlVtdtT8HrH9sB/CMrzzPMLXhSZNr46rw=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:29:be:30:b3:5b:a3:a2:3b:97:ea:f7:c3:28:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jul 6 16:01:27 2026 GMT
Not After : Jul 7 16:01:27 2026 GMT
Subject: CN=5fff31f1dffb2155a523b1337faeb110d87cc5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:9b:5f:ea:8a:7b:0a:9c:f4:c1:e4:26:27:
de:6d:e0:ad:d1:84:5a:04:20:ac:5b:ab:fd:a9:76:
2f:d9:f1:aa:8f:ba:8c:dd:c9:2a:af:2d:85:b2:a9:
38:10:7f:36:78:e7:78:ad:c3:f0:78:2b:25:2a:73:
f4:4c:1b:cd:f0:79:c3:c3:e6:c4:c5:be:f2:ff:a5:
3a:4b:c4:df:a3:11:9f:dd:99:c3:52:96:78:21:2b:
84:f6:f9:dc:39:8a:c5:2e:d6:25:37:30:93:17:fa:
ef:19:93:b7:70:18:d4:f8:b5:43:4a:6b:34:73:42:
18:d8:7f:6c:8d:29:7d:f5:2a:da:72:cb:c0:8c:45:
59:f1:82:c6:80:91:07:b9:e2:cf:74:8b:a5:37:f0:
76:12:53:88:7c:1e:1e:0c:8f:b0:bc:38:46:fa:a6:
eb:7e:d0:f1:47:7b:ec:82:82:01:97:85:7c:29:6e:
91:e3:3c:26:ec:d0:0e:36:d5:05:29:87:db:f1:4e:
f9:2f:2d:86:82:5a:7b:1d:84:bf:cf:bb:3d:a9:90:
e2:ab:5f:25:16:96:34:07:86:cb:e8:b4:9e:37:55:
f0:8a:20:ae:23:c8:27:57:99:b1:9c:7b:dd:09:ec:
6b:39:16:43:2c:7f:9a:0f:b2:9f:93:78:b1:91:3e:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:31:F1:DF:FB:21:55:A5:23:B1:33:7F:AE:B1:10:D8:7C:C5:D1
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:a0:b5:1c:8e:02:e7:71:db:60:c2:e6:c2:83:72:6b:aa:
53:a3:06:e7:cd:4b:09:e8:72:a9:11:54:d9:46:c6:2a:14:64:
ba:19:03:a2:43:70:05:79:49:d0:80:c4:28:ad:87:f3:a9:e2:
ef:46:1a:3d:fe:2e:04:4b:1e:76:da:44:34:58:2f:3e:97:c1:
01:89:20:70:bc:82:a3:83:f7:3d:96:dc:a9:41:a5:b8:7c:39:
14:cb:93:9f:ef:4f:58:30:dc:8a:0e:f6:e0:cd:13:8c:81:96:
e5:a9:fd:3c:cc:e8:b3:7a:56:7d:c9:a7:33:01:b0:73:0f:67:
a5:c5:87:fb:97:1a:c3:ff:b6:78:ee:59:be:71:49:6a:1f:16:
68:36:a8:d7:bd:c1:77:29:90:a8:6b:eb:48:65:c5:55:65:38:
07:d8:72:cd:43:88:6a:92:0d:cd:5b:98:69:66:d3:f2:a1:00:
6d:b0:f6:75:d1:75:27:12:8d:9a:53:6a:cc:fe:8a:8f:58:5c:
6e:59:18:ce:c2:1b:b6:be:1a:e7:a2:e3:0e:e9:0b:30:7d:7e:
27:a8:49:bf:f2:e8:79:5e:3c:c5:ea:97:cd:49:f4:10:26:ed:
4d:26:cb:39:91:23:b8:19:65:16:4e:03:4c:50:3a:37:14:26:
7b:33:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:24:59 2026 by rpki-client