Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: 2PiS4n7FryspjVmMZ/HkCVH1C6aCWovPKSqulbNQNQU=
Subject key identifier: D6:F6:EB:FE:F9:5F:46:22:10:BE:BD:FF:04:24:18:AD:D6:68:A6:47
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01A175F05FC8C19F57C62B98DB8B4B275E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0C7E
Signing time: Mon 26 Oct 2026 02:00:49 +0000
Manifest this update: Mon 26 Oct 2026 02:00:49 +0000
Manifest next update: Tue 27 Oct 2026 02:00:49 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: JLDUUX+4Ty1qAfXIGaF4mPJgx8xLmfjXZdWTtoGz+io=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:5f:c8:c1:9f:57:c6:2b:98:db:8b:4b:27:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Oct 26 02:00:49 2026 GMT
Not After : Oct 27 02:00:49 2026 GMT
Subject: CN=d6f6ebfef95f462210bebdff042418add668a647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:59:8c:76:ee:49:cb:3b:7d:5d:7d:2c:52:
1d:28:5d:a1:44:85:3c:4f:54:d3:83:07:52:ec:f2:
57:f7:31:39:71:1c:66:e6:69:f5:de:72:54:c8:e9:
7b:90:fa:c2:87:79:6f:e9:e2:5b:f9:e4:b8:b7:5e:
e2:ac:a8:38:f6:4b:1c:a9:09:b7:43:00:29:5c:f6:
ef:d3:99:9b:be:bd:42:89:da:b7:46:11:7c:36:5a:
c9:70:a3:70:10:6c:61:1b:08:07:a5:19:89:06:d9:
33:72:49:ad:b3:eb:ec:86:d2:10:91:59:29:a8:fc:
c2:a1:99:7c:9d:ab:19:39:b5:da:04:6a:94:f1:3d:
4a:bd:18:cb:a8:39:4e:01:53:a8:3f:41:e0:78:5a:
38:0e:ed:f1:17:f8:77:a6:98:25:c0:11:21:60:1b:
0f:46:02:a8:db:1b:fa:e0:42:3c:44:55:13:23:50:
21:bd:33:5e:90:41:8e:f3:c2:3c:6d:3a:64:da:00:
88:af:c4:b5:92:61:0d:7b:50:11:52:db:87:4e:78:
3b:46:38:0c:6f:fb:8f:ac:47:01:45:ee:87:6f:51:
e1:a2:3c:45:43:5a:f1:86:d6:96:da:21:5a:80:bf:
03:76:81:04:d6:f8:74:83:81:09:85:c9:f1:e4:93:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:EB:FE:F9:5F:46:22:10:BE:BD:FF:04:24:18:AD:D6:68:A6:47
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:06:95:3b:f5:6d:e6:1d:5b:85:ec:57:6e:a8:68:e6:5c:
d6:b2:76:be:35:64:42:d1:d5:71:64:66:f4:e5:81:93:e9:7e:
62:eb:d8:5d:b8:ec:e1:a0:63:83:b7:44:b3:af:03:cc:95:23:
d8:f4:f8:43:ca:36:c2:8b:41:83:69:d3:36:0f:41:43:f5:13:
89:ba:49:75:1f:a7:03:7d:f8:89:75:a5:b6:c8:78:92:82:68:
7d:f1:68:43:d9:a7:96:0d:c9:2f:21:22:2d:3b:93:1a:2d:c1:
0b:50:49:89:84:c7:b5:d2:89:6d:22:fa:6d:5a:64:0e:c1:7a:
25:4b:64:da:6c:00:1e:4a:a5:45:45:b3:fe:91:01:1d:65:1f:
b0:e6:75:3d:d3:d3:35:9e:27:e3:b5:b0:bb:5d:a0:61:00:84:
e0:be:1c:71:0e:5c:43:26:c3:b2:ec:8d:ac:90:1b:13:14:e8:
1f:94:29:cc:be:84:aa:92:54:fe:af:be:2c:e8:a8:05:bf:20:
d3:bd:29:22:5c:09:11:e7:f6:3a:d2:f0:e2:af:f9:b0:88:70:
2e:0c:e4:16:9b:f0:2e:4e:68:03:0d:31:6a:de:77:be:b0:f0:
0d:71:20:ee:ba:b5:5b:55:ff:18:32:61:86:c3:3b:cb:02:43:
eb:c8:62:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF18F/IwZ9XxiuY24tLJ16eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzZkYWYwMzc1NmJhZjgzYmE0ZjM4ZGJlNWQ2OGNiOWJh
Y2VmZjkwHhcNMjYxMDI2MDIwMDQ5WhcNMjYxMDI3MDIwMDQ5WjAzMTEwLwYDVQQD
EyhkNmY2ZWJmZWY5NWY0NjIyMTBiZWJkZmYwNDI0MThhZGQ2NjhhNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok9ZjHbuScs7fV19LFIdKF2hRIU8
T1TTgwdS7PJX9zE5cRxm5mn13nJUyOl7kPrCh3lv6eJb+eS4t17irKg49kscqQm3
QwApXPbv05mbvr1Cidq3RhF8NlrJcKNwEGxhGwgHpRmJBtkzckmts+vshtIQkVkp
qPzCoZl8nasZObXaBGqU8T1KvRjLqDlOAVOoP0HgeFo4Du3xF/h3ppglwBEhYBsP
RgKo2xv64EI8RFUTI1AhvTNekEGO88I8bTpk2gCIr8S1kmENe1ARUtuHTng7RjgM
b/uPrEcBRe6Hb1HhojxFQ1rxhtaW2iFagL8DdoEE1vh0g4EJhcnx5JMuZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb26/75X0YiEL69/wQkGK3WaKZHMB8GA1UdIwQY
MBaAFDk22vA3Vrr4O6Tzjb5daMubrO/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2Mt
Zjk1ZjY2ZDYwNTVjLzEvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2MtZjk1ZjY2ZDYwNTVj
LzEvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclsGlTv1
beYdW4XsV26oaOZc1rJ2vjVkQtHVcWRm9OWBk+l+YuvYXbjs4aBjg7dEs68DzJUj
2PT4Q8o2wotBg2nTNg9BQ/UTibpJdR+nA334iXWltsh4koJoffFoQ9mnlg3JLyEi
LTuTGi3BC1BJiYTHtdKJbSL6bVpkDsF6JUtk2mwAHkqlRUWz/pEBHWUfsOZ1PdPT
NZ4n47Wwu12gYQCE4L4ccQ5cQybDsuyNrJAbExToH5QpzL6EqpJU/q++LOioBb8g
070pIlwJEef2OtLw4q/5sIhwLgzkFpvwLk5oAw0xat53vrDwDXEg7rq1W1X/GDJh
hsM7ywJD68hifw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:55 2026 by rpki-client