Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: a4E/SwtnCinT2e4drKtd2cTeu0xjCpAlD9c42B0Hqkk=
Subject key identifier: CF:62:A0:D1:1A:AF:4E:2B:86:4C:54:98:1A:54:7E:52:C8:C8:6A:47
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019CE523D5220481123C26FEDD57351C2A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 06C2
Signing time: Fri 13 Mar 2026 03:00:56 +0000
Manifest this update: Fri 13 Mar 2026 03:00:56 +0000
Manifest next update: Sat 14 Mar 2026 03:00:56 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: iwbkDwR/N5OGyADhbDr7lazRp5ttUYDZuCiULCm2GD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:d5:22:04:81:12:3c:26:fe:dd:57:35:1c:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Mar 13 03:00:56 2026 GMT
Not After : Mar 14 03:00:56 2026 GMT
Subject: CN=cf62a0d11aaf4e2b864c54981a547e52c8c86a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:b3:f9:67:34:2e:73:d5:47:18:9c:e3:60:
b7:7a:0d:2d:c7:e8:ab:f8:e3:ab:a2:79:49:c9:c4:
4f:6d:56:f2:ec:a0:58:d1:64:65:dd:03:34:7e:b6:
3d:af:4f:cf:f1:b8:3f:d2:f1:4b:72:11:5e:3a:ac:
cb:c8:d3:fe:a3:7a:df:6b:eb:59:b9:b3:f4:50:9a:
84:96:e2:7e:d7:cc:1c:c1:5c:e7:31:85:8a:8a:52:
42:f4:af:72:e8:19:c2:62:4f:02:6e:ab:6a:22:3e:
30:0d:23:1e:14:67:99:e7:b6:1d:06:ba:82:f2:3f:
e9:68:e9:d0:9b:ee:f5:27:17:6f:cb:14:f7:03:8a:
cb:5d:b2:6e:6c:cd:54:ae:32:35:ac:56:e7:2c:10:
f4:c9:7a:df:b9:50:fd:73:3b:02:10:06:9b:fb:37:
db:ec:92:35:94:bd:49:87:98:98:82:d1:7d:05:14:
b2:be:33:82:c3:c8:82:cb:0f:2c:c8:94:01:ed:d6:
27:69:a1:a7:22:49:80:41:b1:14:cc:1e:be:71:f3:
b8:8f:f4:a5:f3:ad:e2:d6:df:f0:a5:09:a6:c7:55:
6d:2e:f0:89:55:ca:7d:d0:dd:d7:e1:4e:3c:0b:c2:
5e:bf:c2:af:08:68:1d:16:cf:83:3b:dd:22:e0:23:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:A0:D1:1A:AF:4E:2B:86:4C:54:98:1A:54:7E:52:C8:C8:6A:47
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:25:24:90:4c:0e:cf:df:fe:3f:70:0f:12:5a:63:05:19:
05:da:7b:3d:34:13:0d:1d:6c:07:ab:ba:5c:09:46:dd:39:52:
6a:44:3c:04:cc:cf:98:9a:79:df:ac:b6:5f:eb:22:f8:11:a0:
f5:9e:6b:92:ec:de:b8:81:c1:58:44:2d:f9:c4:da:4d:47:e8:
96:b0:72:41:41:22:8c:63:e1:50:02:59:9e:7e:b0:e6:52:c0:
76:85:4a:46:f2:45:db:82:ba:6d:d9:88:5e:dd:92:18:87:8b:
4e:e7:b3:56:cb:f2:c2:2c:ef:e1:46:b9:ad:3c:db:9c:85:3c:
b7:df:ae:84:8f:91:20:a4:94:c8:a1:b1:4a:da:fc:d1:ea:31:
71:24:c1:40:8d:dd:6c:c7:86:9e:dc:9a:97:dc:8d:01:ba:08:
d9:77:4e:bf:9c:38:e2:a2:39:b6:a9:0e:19:db:e0:34:82:46:
e6:c4:8a:a9:cd:c3:06:ce:96:24:e6:40:c7:99:db:b5:eb:38:
51:74:2a:f4:63:29:3c:27:8b:da:17:af:62:f3:f2:ab:d3:dc:
e3:66:b6:b8:ec:d1:d9:b7:28:bd:91:77:88:01:0d:b9:f8:a9:
f4:32:c6:f9:05:7d:79:34:7e:8a:a0:76:c9:6d:8c:37:de:9c:
c7:83:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:26 2026 by rpki-client