Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: CaO5iBePsdOOmWmtb+eLk7kp5qZG7TDJTHsiBOGfOhk=
Subject key identifier: 92:C1:47:BF:7C:F5:0B:03:62:68:89:15:18:10:7F:07:7B:37:8B:BC
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 01A002822AB961B4350D5EA6F0EAD2166FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 1A07
Signing time: Fri 14 Aug 2026 23:01:19 +0000
Manifest this update: Fri 14 Aug 2026 23:01:19 +0000
Manifest next update: Sat 15 Aug 2026 23:01:19 +0000
Files and hashes: 1: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: 1y1ihvbxKVSCK52WFecBUPOwR87lvyImNPjuN+oIlFk=)
3: rk_qIg4M0T6VeSZIH6qI5IJsveA.asa (hash: LxPs6qFGOS3d/DfhY0ScdJWhdWn8Ibcrre8xQ10KueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:2a:b9:61:b4:35:0d:5e:a6:f0:ea:d2:16:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Aug 14 23:01:19 2026 GMT
Not After : Aug 15 23:01:19 2026 GMT
Subject: CN=92c147bf7cf50b036268891518107f077b378bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:01:5b:22:23:06:3f:e0:fd:d6:b9:94:9f:
98:a8:18:a9:2c:47:79:f5:05:8e:2d:5e:4d:71:f6:
ad:a5:29:e3:99:f0:94:01:1c:0c:b0:c0:26:22:e3:
77:6f:d2:37:04:0a:ff:ed:e3:b6:a2:5e:91:bf:8d:
54:b5:b8:c7:63:9d:ef:23:23:1d:ed:1b:2a:75:c5:
04:e9:40:f9:fb:d2:ab:f7:eb:1d:f7:7d:c7:a1:35:
7a:a5:90:cf:b8:15:46:e4:50:9b:2e:a1:3a:3c:82:
25:c6:07:0e:a2:4e:bf:4a:00:01:5b:cc:7a:eb:2b:
65:0f:cd:29:33:9d:92:ad:7b:d2:37:65:81:f0:60:
82:2b:04:36:c7:59:eb:fe:4d:9b:f3:d8:4d:ae:3c:
1b:d6:79:6e:0f:22:94:34:07:c2:3b:fb:e4:c2:95:
d1:39:35:c3:0c:c2:16:35:a4:ca:5d:03:64:8b:00:
08:84:8b:d7:dd:d1:64:0a:0a:64:4d:e4:5a:db:65:
93:c0:ff:90:0e:aa:93:44:f7:c0:25:70:85:06:4e:
dc:d2:7e:31:5e:fe:cd:e4:8e:f3:5c:c7:71:49:6e:
10:a1:99:cf:4e:1a:8b:22:e9:b2:e6:d1:15:04:b6:
49:51:6a:fd:32:a6:3a:50:97:b3:4d:dc:04:11:4e:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:47:BF:7C:F5:0B:03:62:68:89:15:18:10:7F:07:7B:37:8B:BC
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:50:d5:4b:c1:8e:02:17:a2:cb:a3:a6:32:f2:db:7d:69:
aa:5b:06:9c:c6:ff:51:4f:45:59:39:76:5c:a2:63:96:dd:a9:
fc:ee:d4:03:e9:a7:0b:2b:08:ad:55:5b:69:95:74:54:b2:fa:
aa:af:b4:bc:bb:e2:7e:cd:2c:71:30:b8:13:e5:37:33:07:86:
85:62:d7:a8:c3:2a:cd:45:ad:19:e4:e0:2c:fa:fc:d3:71:68:
5b:f1:0d:ce:81:b5:63:94:6c:45:c6:90:70:f4:83:72:ea:c3:
e0:3f:07:a2:cd:08:4d:15:ce:30:cc:e9:a5:ff:b0:f8:57:cc:
f6:22:a0:2e:18:96:7d:06:e8:bc:99:b4:f4:8c:bf:de:df:d4:
04:b2:0b:65:9d:4b:77:56:62:63:71:c5:8f:b5:9c:a3:98:ec:
1b:ad:5c:5f:e9:55:99:f3:78:b9:8e:7b:de:0d:1a:34:69:d2:
4c:e6:ff:5f:93:6e:56:65:1e:c8:7a:4a:02:1d:d5:5c:dc:01:
5b:fb:d9:25:b4:a6:30:b8:0f:c1:0f:ef:6d:be:75:5f:75:cc:
09:f1:ff:8d:94:1c:2e:db:d5:88:b9:c2:17:8a:b0:6e:ed:aa:
6d:e0:1b:0d:d2:b9:74:54:b9:33:8f:47:fb:20:92:0e:bf:94:
d0:6d:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:36 2026 by rpki-client