Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: 9zJ4h6/8+Wn9lEZ6u0dx4DUYWL1MywfyzTkkFexcy8I=
Subject key identifier: F9:95:51:BB:40:11:F6:EA:EC:2C:21:CA:F8:71:AE:86:AA:FB:91:F4
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 019F9F5EC74B0587ED0BD2BD4700338876E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0B88
Signing time: Sun 26 Jul 2026 17:00:16 +0000
Manifest this update: Sun 26 Jul 2026 17:00:16 +0000
Manifest next update: Mon 27 Jul 2026 17:00:16 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: rIDn2rDyrtv6t/drBTCBsf22PkMCO9QVDd/9Pkw6myE=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:c7:4b:05:87:ed:0b:d2:bd:47:00:33:88:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Jul 26 17:00:16 2026 GMT
Not After : Jul 27 17:00:16 2026 GMT
Subject: CN=f99551bb4011f6eaec2c21caf871ae86aafb91f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:ac:84:68:76:ee:35:75:0e:bb:64:bb:ac:
94:dc:0d:89:9e:a2:1f:06:6f:21:10:47:5c:d2:7a:
5d:93:15:35:56:bc:9d:bd:85:c0:24:b9:af:88:30:
5c:17:93:cc:60:d5:9f:c3:57:7e:25:ac:2b:c3:85:
ca:85:4c:20:48:98:ae:ca:7c:8a:11:80:d0:8d:84:
60:5f:99:a2:29:69:b3:cb:dd:e4:0b:0e:ff:5e:62:
0f:3c:e8:e3:16:03:cc:ca:84:af:93:b4:a8:92:90:
9e:24:88:94:71:56:21:3c:16:40:43:c1:94:9d:bb:
54:bc:77:dd:79:b5:b9:1e:e9:bd:21:08:79:f6:03:
19:cf:20:fb:2a:fc:11:fa:86:07:ae:b7:19:69:22:
7c:dc:62:6e:98:3c:b7:87:66:07:9d:22:f5:fc:ce:
d7:bd:41:cd:15:74:57:a6:92:ce:ed:5a:c1:91:dc:
f5:cb:04:f4:86:0f:44:d8:fe:4e:6f:ee:d7:51:08:
f9:48:80:6d:35:9d:40:37:6c:65:de:60:3f:6b:24:
a4:01:fa:be:b1:37:1c:0e:b6:13:05:1e:d5:fa:cd:
40:c0:36:76:a2:25:03:73:b1:2c:b0:59:63:16:e1:
66:da:57:68:4b:4d:e5:e2:d4:be:97:13:3b:81:01:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:51:BB:40:11:F6:EA:EC:2C:21:CA:F8:71:AE:86:AA:FB:91:F4
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8f:54:54:fb:6b:8f:9c:d3:6c:b9:b3:60:26:cd:7b:4a:91:
31:1f:ae:66:c4:0c:17:51:a4:45:b1:21:13:47:fa:4b:44:af:
69:a9:1c:65:6c:d4:8d:b3:33:b4:6b:5a:6f:e3:cb:1c:63:21:
6f:40:d1:e5:a8:59:35:e7:54:97:a4:f4:46:e8:55:22:2d:d0:
fd:a1:0d:46:44:32:dc:96:58:b9:2c:04:4c:75:8c:44:82:37:
0b:f1:43:aa:70:3d:c0:87:b0:14:05:2d:cf:a7:aa:96:7b:d5:
7e:0b:8e:67:42:6b:f9:f4:34:0e:fa:d7:71:0b:df:b0:44:d7:
57:ad:d2:90:74:14:54:52:4c:85:cf:cb:1f:d2:b8:74:f4:6a:
40:6e:1a:f3:d5:35:ba:a9:6c:ec:1f:44:54:2f:8a:7a:ca:5b:
28:e9:cb:66:78:20:59:33:79:86:e3:43:d3:af:fb:34:e2:aa:
74:61:96:d3:26:5c:03:df:ec:9a:1f:47:61:bf:08:64:7d:b4:
4f:b9:c6:39:30:0e:5d:30:c0:a5:e2:b6:25:d3:5e:9d:c8:39:
e6:87:e4:b0:20:a7:83:5c:2f:8a:8f:2d:23:9d:14:b8:ff:b8:
b0:4c:cc:d0:86:fe:8d:8a:45:91:65:fc:46:3e:49:0d:c4:37:
0f:7a:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:05:47 2026 by rpki-client