Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: 01WL8JnEQuhy3dFXLqefNk93VsQGhqU7q0ZFGSd9XRQ=
Subject key identifier: 2E:01:E5:A4:F0:04:A9:95:CD:6C:2F:F2:AC:EF:81:AA:58:7D:BB:FB
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019E7C32290EB172EBF8FD2C096CE50FE41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0779
Signing time: Sun 31 May 2026 04:02:02 +0000
Manifest this update: Sun 31 May 2026 04:02:02 +0000
Manifest next update: Mon 01 Jun 2026 04:02:02 +0000
Files and hashes: 1: K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa (hash: 7xWm5vmFHcwrGZ0rwDT2McSScZ+s+zumGsB6jff1aek=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: JkukqHyR6tnXh4mj2xgegKzabmVT7VAFStcVh5LA2tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:32:29:0e:b1:72:eb:f8:fd:2c:09:6c:e5:0f:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: May 31 04:02:02 2026 GMT
Not After : Jun 1 04:02:02 2026 GMT
Subject: CN=2e01e5a4f004a995cd6c2ff2acef81aa587dbbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:99:81:8d:e4:92:90:c8:42:18:41:7b:56:
de:90:e0:41:1f:54:13:e6:fc:d1:9c:ee:6e:ca:dc:
b1:b4:5a:b3:89:6c:75:07:68:63:79:96:cd:aa:d3:
46:43:a7:a6:39:43:c9:7a:b2:4b:01:3a:98:59:b4:
66:22:a3:c9:6d:c5:77:7a:e6:8b:08:98:26:11:3a:
c9:80:19:d9:bc:58:b1:3f:8b:28:e7:68:49:d5:23:
92:27:85:9c:ac:28:0d:ec:01:86:97:c5:dd:7b:79:
12:b0:0b:7a:bb:bf:bb:51:c3:0e:9b:24:ab:1e:d0:
42:23:2c:93:b9:0c:59:bb:a6:74:78:6f:0c:f6:57:
a9:75:4e:b7:4d:32:0d:3d:86:89:e3:6f:0c:7f:51:
49:0c:ec:bb:76:4d:99:11:bf:a0:c1:ed:26:25:cf:
a0:9f:67:9e:bf:20:1d:01:d6:05:bb:84:fe:33:20:
df:21:6c:c8:36:6b:62:5c:2d:86:4c:3d:a6:04:fb:
86:50:51:f1:0b:22:26:50:2a:91:7b:50:8b:06:ed:
95:e5:9e:fa:14:9a:c4:df:5b:61:2d:65:14:7f:45:
16:97:23:aa:cf:e0:bf:db:6e:bf:8e:6e:7d:00:8b:
4a:7f:8d:f0:83:45:05:59:2e:11:bd:8d:a2:ae:5c:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:E5:A4:F0:04:A9:95:CD:6C:2F:F2:AC:EF:81:AA:58:7D:BB:FB
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:da:85:67:72:bd:4d:9a:e5:5b:60:14:d3:ac:4c:71:60:
f2:9d:98:b1:8e:1a:6c:9e:8c:7d:33:43:41:d3:6c:a5:c5:d2:
05:82:d7:b2:32:5e:0f:ca:9a:bd:ae:33:08:07:57:f4:5c:27:
e4:37:95:25:df:8f:96:17:0d:ce:15:b5:7c:f1:93:ab:ca:84:
80:ae:80:81:77:ef:d8:3f:f1:9a:7e:8a:fd:a9:af:81:d6:a5:
49:56:fd:54:0f:db:44:c7:a2:f6:e4:ff:42:ea:aa:d4:22:91:
99:39:ff:14:08:27:72:99:cd:88:08:49:05:4d:4c:ec:ab:46:
ab:b3:00:05:1b:c6:a6:c2:9e:1b:da:59:b7:d2:6f:78:1b:9a:
5e:8b:01:ce:a8:23:db:b4:81:f2:07:69:51:3e:fb:af:15:7a:
76:a7:38:d8:0b:4a:8c:66:cb:f5:5e:64:56:4e:73:40:20:44:
e0:87:d1:23:9e:ef:13:34:93:16:0b:c4:3c:b2:03:ce:e9:48:
06:14:46:2c:6a:53:99:38:fd:73:be:d9:81:00:e2:1e:35:9d:
b2:bd:a9:85:a1:3e:57:da:63:b2:f6:44:1c:1e:6a:fd:26:d6:
20:b5:4f:61:4b:7f:43:94:20:88:61:ec:4b:90:6e:d6:50:5a:
e2:a2:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:48 2026 by rpki-client