Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: Gtl1JbAAbP7V+e+k7afUIbxJ+jYZJQBsad2deP6xr8U=
Subject key identifier: 74:DB:10:A9:71:CD:14:8D:3F:29:04:C4:D4:EB:A3:0C:92:7F:6E:64
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01A0871E3AD10C2965A7B44B6DB317DD7B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0C00
Signing time: Wed 09 Sep 2026 17:01:40 +0000
Manifest this update: Wed 09 Sep 2026 17:01:40 +0000
Manifest next update: Thu 10 Sep 2026 17:01:40 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: 4QIalpICQ3hPyDPsl2VMW1fa0BqVyrdgtoXIPw/7DeE=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:1e:3a:d1:0c:29:65:a7:b4:4b:6d:b3:17:dd:7b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 9 17:01:40 2026 GMT
Not After : Sep 10 17:01:40 2026 GMT
Subject: CN=74db10a971cd148d3f2904c4d4eba30c927f6e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:19:3e:54:53:c3:5e:f8:75:9d:aa:00:39:
d9:cb:72:d2:a3:f6:f6:fe:41:93:1b:4f:72:68:fd:
6b:1e:35:49:9c:67:58:24:09:03:55:e7:08:49:f2:
3d:4c:30:e4:04:2a:48:cf:57:e2:4d:c5:86:f2:6b:
73:df:04:a1:07:23:7a:d6:4f:d2:02:06:ef:78:08:
e8:f0:ee:44:73:35:f1:1e:de:ff:28:3a:0f:e6:c5:
7c:59:da:75:ee:36:09:6e:21:33:da:5f:9e:62:2c:
07:05:97:ba:e1:c8:25:dd:ce:1a:7a:6d:aa:05:fe:
56:06:e5:49:d4:7d:da:ec:44:01:22:ae:d5:42:ad:
f3:e5:0a:91:af:d9:b5:c4:e2:65:82:ba:84:4d:bf:
72:cc:5e:b5:67:a9:86:9f:eb:15:9d:ec:7c:b0:49:
36:6e:a9:5c:77:ff:ce:98:41:69:10:f1:3e:08:1d:
76:de:2b:2d:e5:0c:13:78:d6:45:e0:a1:c8:dd:28:
90:ad:32:10:c5:5b:05:15:79:d6:ef:b5:20:72:d2:
b3:ac:c6:bb:d7:14:89:52:e3:62:13:3c:7f:09:33:
18:9e:85:c5:d0:13:0d:e0:eb:54:c9:60:bb:3d:2b:
84:76:1e:41:a8:e8:a4:c0:c6:bf:40:7a:fa:3b:5f:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:10:A9:71:CD:14:8D:3F:29:04:C4:D4:EB:A3:0C:92:7F:6E:64
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:eb:ae:fe:73:ec:a7:fa:e1:13:ec:f9:97:46:49:75:9e:e2:
e6:61:45:1e:d1:ad:98:03:8c:b8:39:72:23:20:99:f8:33:d4:
4c:c3:63:98:a2:22:a4:c3:3f:c0:1f:d9:49:ed:42:49:c1:6a:
be:a8:5a:45:5b:d0:43:8d:5e:2c:0c:3d:0e:1e:47:aa:a9:d6:
9d:9c:a6:ae:97:57:96:e6:da:4b:2a:f7:11:72:ab:8a:93:00:
74:47:32:ea:4f:41:fc:76:59:9e:7c:fd:d8:b3:cd:38:b4:f2:
6a:27:76:1c:17:04:9d:f8:0a:69:b0:51:72:ce:25:e9:0f:90:
53:c8:0c:c1:02:e5:0d:69:b1:f2:d2:5f:e6:6c:c1:3b:75:38:
14:3d:c3:38:4e:10:e8:17:71:fe:5f:56:02:23:68:5b:a2:62:
38:e4:75:38:35:b9:88:42:4e:48:c1:69:9c:65:bb:68:99:8b:
b2:b3:fb:1d:d8:04:e0:87:1a:11:c0:48:5d:54:c2:da:74:be:
18:2b:ce:11:f0:a5:2a:30:3f:a4:1b:b0:ba:05:aa:08:5d:af:
62:33:5b:b5:31:c3:bb:34:e7:ae:62:74:e8:07:9d:81:58:85:
93:07:fd:fb:d8:cb:1c:4c:a9:ba:42:36:e2:b5:9c:f7:b3:cc:
97:26:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:24:53 2026 by rpki-client