Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
File: otdUZcLL7I5qW-bRpIFLaCguV98.mft (raw, json)
Hash identifier: FTQ6tXYxRN/S3LkH3wLCm/UPi+nBOLvXlZnM3XWP9kM=
Subject key identifier: D6:F1:C7:91:A8:52:FA:2D:8D:E0:74:3C:19:AB:8D:E0:07:FA:E7:39
Authority key identifier: A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF
Certificate issuer: /CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df
Certificate serial: 019D389C1757D7D019E575C1F2FF07FC9FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
Manifest number: ED
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: otdUZcLL7I5qW-bRpIFLaCguV98.crl (hash: vNcpSKucKj8E6MjyC6qwTitoR9oFMvL1HIFVyqeEADM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:17:57:d7:d0:19:e5:75:c1:f2:ff:07:fc:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=d6f1c791a852fa2d8de0743c19ab8de007fae739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:c6:41:90:04:2d:c2:18:99:8d:af:2d:5c:
f6:2d:5b:d7:df:2a:99:1a:43:e6:f3:9b:c9:bd:1f:
45:ec:de:9b:17:0a:2e:28:1d:82:59:47:98:80:a0:
b6:cd:d8:74:ed:ae:50:43:0d:f1:9e:79:3a:ef:0c:
72:63:8c:bf:1b:dd:20:56:d5:f6:d9:9d:a2:00:99:
10:5a:0f:14:c4:0c:5a:fb:98:c8:60:cd:48:65:87:
d4:e9:42:49:97:54:79:3a:62:18:0d:42:54:0b:46:
e6:6b:7f:ca:4a:d1:7a:b0:5e:2f:91:4b:6f:74:a5:
b4:2e:55:88:ff:40:d1:e9:ed:95:69:90:99:41:e5:
90:ee:71:34:47:5f:f9:5d:74:de:b1:56:e2:4b:a3:
c3:06:64:46:39:42:88:ee:44:09:52:fd:36:4c:94:
07:f4:66:c4:75:8e:34:d2:1d:05:30:7c:93:85:30:
e7:22:f6:03:c1:52:6c:db:7f:b7:96:09:3c:ff:f0:
59:d8:79:93:48:ca:54:a6:1c:71:2f:ec:86:d8:6d:
4b:5d:8d:14:60:36:e3:82:e6:95:0d:0b:f3:30:f0:
d0:09:85:d7:46:d0:da:d3:96:b7:a9:70:12:94:a2:
1d:ad:c0:4b:8f:59:0d:a3:2d:16:57:86:0c:41:a0:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:C7:91:A8:52:FA:2D:8D:E0:74:3C:19:AB:8D:E0:07:FA:E7:39
X509v3 Authority Key Identifier:
keyid:A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6f:d2:d9:28:45:6d:a8:01:79:f4:03:ca:f8:c7:e8:9d:a9:
02:af:52:32:f5:4b:ba:b8:63:a1:9c:12:de:7c:b2:08:72:41:
75:03:72:e8:ac:dd:59:e1:16:5d:26:46:58:95:8f:d3:6d:c1:
36:08:c8:c2:15:07:05:21:60:54:ff:ee:38:b3:be:05:6a:af:
d4:83:3f:97:34:a2:ca:f9:03:1d:7b:84:4d:4e:11:08:fc:7b:
58:21:b9:8f:72:b4:4b:18:b6:53:d8:fa:81:17:5c:b4:23:4d:
ae:a0:74:7f:0f:8a:98:38:ec:44:3b:92:99:0c:55:8c:fa:ed:
55:e8:f8:0f:d3:41:88:c2:40:44:95:c9:a7:cf:35:1b:77:ca:
f9:6e:d0:ab:2e:ba:6b:29:0a:4d:02:aa:b4:57:c0:0b:7f:92:
ae:7f:16:86:8a:1b:b7:a0:d7:d2:09:41:bb:75:06:a2:6e:9a:
42:96:59:20:c7:f0:d2:37:a6:98:7e:00:f8:40:33:c6:ce:93:
4c:e6:9a:e0:47:59:6b:df:af:10:3b:d3:b3:2a:e5:ec:de:94:
94:c2:0e:37:41:5b:8f:6c:50:89:d6:87:d9:fe:f5:96:54:ca:
19:85:4d:3b:7f:73:26:d4:3d:c9:d0:e9:d7:73:3a:bb:41:a8:
05:93:e8:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBdX19AZ5XXB8v8H/J+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDc1NDY1YzJjYmVjOGU2YTViZTZkMWE0ODE0YjY4Mjgy
ZTU3ZGYwHhcNMjYwMzI5MDgwMDQ2WhcNMjYwMzMwMDgwMDQ2WjAzMTEwLwYDVQQD
EyhkNmYxYzc5MWE4NTJmYTJkOGRlMDc0M2MxOWFiOGRlMDA3ZmFlNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvGQZAELcIYmY2vLVz2LVvX3yqZ
GkPm85vJvR9F7N6bFwouKB2CWUeYgKC2zdh07a5QQw3xnnk67wxyY4y/G90gVtX2
2Z2iAJkQWg8UxAxa+5jIYM1IZYfU6UJJl1R5OmIYDUJUC0bma3/KStF6sF4vkUtv
dKW0LlWI/0DR6e2VaZCZQeWQ7nE0R1/5XXTesVbiS6PDBmRGOUKI7kQJUv02TJQH
9GbEdY400h0FMHyThTDnIvYDwVJs23+3lgk8//BZ2HmTSMpUphxxL+yG2G1LXY0U
YDbjguaVDQvzMPDQCYXXRtDa05a3qXASlKIdrcBLj1kNoy0WV4YMQaAkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbxx5GoUvotjeB0PBmrjeAH+uc5MB8GA1UdIwQY
MBaAFKLXVGXCy+yOalvm0aSBS2goLlffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YTcyMWQtNGRkZC00OGZjLTlkY2Yt
YjU3Yzc4MjdmMWQ4LzEvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YTcyMWQtNGRkZC00OGZjLTlkY2YtYjU3Yzc4MjdmMWQ4
LzEvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW/S2ShF
bagBefQDyvjH6J2pAq9SMvVLurhjoZwS3nyyCHJBdQNy6KzdWeEWXSZGWJWP023B
NgjIwhUHBSFgVP/uOLO+BWqv1IM/lzSiyvkDHXuETU4RCPx7WCG5j3K0Sxi2U9j6
gRdctCNNrqB0fw+KmDjsRDuSmQxVjPrtVej4D9NBiMJARJXJp881G3fK+W7Qqy66
aykKTQKqtFfAC3+Srn8Whoobt6DX0glBu3UGom6aQpZZIMfw0jemmH4A+EAzxs6T
TOaa4EdZa9+vEDvTsyrl7N6UlMION0Fbj2xQidaH2f71llTKGYVNO39zJtQ9ydDp
13M6u0GoBZPoIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:51 2026 by rpki-client