Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: C/d6rX3hMKJ94w2d0Nx61M+MT2PJyXm7tUp8LEzEJyk=
Subject key identifier: 70:D4:E6:8E:77:DD:4A:75:12:69:12:F2:38:77:23:69:1F:70:5C:E4
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019D389BC3CBBA992F719D5F25DBD4B73F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 06D1
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: q1YAPabQlBQHxeH5nF1yUvnemMfo6OqJ8sWLpk3E1Wg=)
2: esJRIVKiV99xgmszXdUIvBUcR4c.roa (hash: oiCTzvqGfHuD5NTI//w9jSaRVTcBCrOg8Oov3qUBvS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:cb:ba:99:2f:71:9d:5f:25:db:d4:b7:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=70d4e68e77dd4a75126912f2387723691f705ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:b4:fa:17:d2:5b:02:9d:ba:dd:25:45:a9:
15:67:e9:7e:20:ae:7a:ca:5e:2d:03:1f:c8:0a:9b:
b4:2c:7d:ac:c3:87:ba:18:48:e3:c8:6f:a0:bc:0c:
3a:8c:06:5b:08:f5:ee:87:50:71:19:1b:f5:5e:24:
ae:dd:86:53:a5:9f:6b:93:7d:b7:da:73:43:48:76:
19:87:3c:5e:44:01:82:d7:43:6a:e9:3e:1c:0c:5a:
3b:d3:ab:dd:12:33:09:41:65:a7:c8:42:29:1f:9b:
79:f1:67:a0:85:2a:48:a0:b9:e6:6e:75:59:87:29:
6c:ef:82:6b:fa:0a:96:6e:fb:68:71:30:91:d7:5a:
0d:d9:7f:e0:30:26:38:88:5a:56:4d:3b:ab:8c:16:
8a:16:22:f4:d4:e2:49:a1:3b:47:2a:1d:9f:4a:ef:
b4:d5:c7:e0:bc:52:db:1a:8e:28:84:e2:e9:de:56:
53:82:e6:26:e0:c6:ed:cb:a0:96:0a:5b:84:62:36:
9e:7e:87:24:2c:c2:c7:18:7a:aa:f3:47:2e:47:39:
01:33:ba:7f:76:5d:3a:53:38:c1:20:10:8d:b2:68:
e8:8b:6a:1b:9c:b1:05:2b:81:60:e1:54:b9:a2:d5:
0d:cd:49:21:04:5d:a9:2d:d2:a2:b9:17:09:18:66:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:E6:8E:77:DD:4A:75:12:69:12:F2:38:77:23:69:1F:70:5C:E4
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:82:29:47:a7:4e:a5:cf:eb:6b:bc:61:9a:86:f8:03:3e:
b2:c5:03:f7:65:ce:b5:aa:6c:ef:ea:ce:0c:d8:d8:98:84:4c:
f7:99:17:0c:27:1b:c1:66:7d:3a:ba:a5:d2:a7:36:63:0a:6f:
68:69:5f:52:12:64:0b:52:9a:b3:b7:3e:28:c2:90:f1:8c:19:
63:39:47:bb:54:c2:d1:65:1e:a5:52:ac:3a:46:04:2a:8a:67:
3a:2a:e5:9b:fe:c8:a4:3a:d5:65:03:bf:6b:94:98:dd:4d:8a:
69:ef:8d:b3:58:8b:96:f1:f2:23:e4:38:d8:34:40:52:56:18:
ce:36:2f:38:ad:d1:5d:61:ad:fb:c6:41:d5:16:24:26:cd:a9:
f5:fa:34:ef:3f:12:1f:8c:30:3d:d1:38:77:6f:9b:67:0d:13:
75:7f:bd:2d:96:73:e3:60:dc:e5:3d:53:f7:d6:d7:c8:07:1e:
b1:b6:b2:64:d5:82:72:ba:c7:5a:44:de:6c:e2:ca:2c:13:2a:
30:11:1a:64:3c:a1:4f:38:65:c4:5b:6c:2b:49:45:54:cf:64:
5b:ea:04:76:2c:3b:08:66:1b:3b:e6:3c:21:c4:6c:d7:4e:1f:
6f:72:5a:01:34:f4:1f:a7:df:46:1c:19:88:39:6f:d8:4b:27:
50:13:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:52 2026 by rpki-client