Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: JqcaVtscgF6Ada/6PVBpbdxG3WtewzztLdToOhKTH70=
Subject key identifier: DB:B3:39:AD:07:71:03:B3:F3:A8:BB:82:DC:75:7C:13:5A:FE:91:31
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 019FA296F8F6FF4FE78FC1C68E600E6DE413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0FD0
Signing time: Mon 27 Jul 2026 08:00:30 +0000
Manifest this update: Mon 27 Jul 2026 08:00:30 +0000
Manifest next update: Tue 28 Jul 2026 08:00:30 +0000
Files and hashes: 1: HEEa4ysM1XA22RFVA0tNIjEfMiA.roa (hash: x2/fb4V3j3cZr5wvHzV5+fYI9k+vTTuH/CrmPNm7S9g=)
2: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: iyXqpJOSBeRxupfRSJwHo4OEwWgjVJrqyCkCym3tu3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:f8:f6:ff:4f:e7:8f:c1:c6:8e:60:0e:6d:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Jul 27 08:00:30 2026 GMT
Not After : Jul 28 08:00:30 2026 GMT
Subject: CN=dbb339ad077103b3f3a8bb82dc757c135afe9131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:53:8e:7f:46:7d:d8:f0:6f:56:86:d8:31:
f4:c6:95:cd:4e:aa:74:93:9a:7f:e5:7f:91:26:bb:
a5:7e:7c:2b:3e:13:19:70:2b:ea:98:a9:34:e5:4d:
f6:41:e1:2e:bb:21:71:0c:2a:52:44:ce:60:28:7b:
0b:1e:13:b3:92:16:f7:3a:56:be:c5:89:4f:bf:ad:
dc:e3:3c:3d:51:73:c9:48:90:13:3f:15:1b:bf:4f:
1b:fd:b9:c1:2d:37:74:56:f6:c1:93:4f:51:93:0d:
45:56:6e:f3:de:ff:59:dc:d1:9c:01:59:88:e6:31:
c6:72:33:12:df:ac:f1:87:8c:dd:15:4d:f9:c6:5b:
b6:47:87:7a:d5:7c:c4:b4:da:2b:f5:fe:f2:89:30:
48:f0:cb:58:30:52:41:9c:37:1e:61:60:df:62:36:
43:42:56:1d:ad:c7:59:53:7a:05:37:98:2d:d7:d1:
31:c5:8f:71:c7:d1:92:f4:93:21:48:07:bc:5d:c0:
34:f3:9f:76:22:37:ba:b8:7f:84:ce:a3:03:62:62:
05:86:52:32:ce:81:6b:d1:9b:84:e2:06:38:35:95:
bd:6c:c9:bc:43:81:14:58:05:f4:a1:dd:17:6c:f1:
18:17:45:c2:a0:fc:72:f1:04:5b:59:51:8d:ef:b3:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:39:AD:07:71:03:B3:F3:A8:BB:82:DC:75:7C:13:5A:FE:91:31
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:01:2a:fb:e0:bd:38:f8:bc:19:b1:8d:e4:30:48:90:17:8c:
17:c2:b5:34:12:90:94:42:cc:e3:d0:87:0e:9f:02:b4:b7:38:
2a:1e:a5:29:b8:9f:e9:db:84:78:20:93:74:90:96:ec:ea:a9:
06:7b:83:00:8a:9b:38:c8:b2:0b:4d:7d:0e:b4:62:5c:7f:24:
b5:22:a0:ef:93:b6:a5:a9:1a:08:82:3c:df:ff:dd:f6:8d:6c:
87:2a:d3:14:43:60:f0:bf:28:8a:00:f0:f7:a4:3d:24:87:11:
63:d7:41:fc:7e:fb:b5:c3:fc:c8:02:ba:43:82:10:0c:56:ca:
79:c4:8a:bd:56:dc:58:f4:07:53:c8:6a:ea:d9:82:25:67:dd:
72:ce:a3:4d:dc:7e:60:e4:af:dc:3e:3f:ca:6c:4d:03:49:91:
73:58:c8:7f:8d:28:3a:99:16:a3:91:95:41:d9:5c:ec:98:e5:
21:e9:02:04:ec:bd:3f:30:6b:02:21:72:1c:06:79:6c:e2:c9:
24:3d:49:97:29:29:90:0a:a4:bc:37:ad:80:26:34:86:c2:82:
eb:5f:61:dc:66:a4:ef:9b:0b:01:b7:ae:90:cc:8f:53:49:49:
8d:c6:ad:69:4a:92:5e:c8:c5:95:fa:89:8e:44:b9:e4:ab:a9:
ec:38:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:57 2026 by rpki-client