Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: k9JJcrXGYqUdBnV0i5jZgTNf8cxIYMqZ9q+Fzn/NWAM=
Subject key identifier: 4B:32:46:E5:0A:FA:49:14:67:85:16:ED:3D:4B:92:10:8B:F1:30:9B
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019D0930041A4346BD629CAEB81D764D39DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 187C
Signing time: Fri 20 Mar 2026 03:00:34 +0000
Manifest this update: Fri 20 Mar 2026 03:00:34 +0000
Manifest next update: Sat 21 Mar 2026 03:00:34 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: /Q31P8U0FV6mUpt++fQAdIN2WQbSf0lI6qnm3Qr72mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:30:04:1a:43:46:bd:62:9c:ae:b8:1d:76:4d:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Mar 20 03:00:34 2026 GMT
Not After : Mar 21 03:00:34 2026 GMT
Subject: CN=4b3246e50afa4914678516ed3d4b92108bf1309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:0a:13:8d:b9:cf:4b:36:a2:84:8d:9a:80:
5b:9d:dc:fd:98:c2:6f:78:cc:5b:d9:86:ad:22:b7:
35:6e:eb:7f:52:01:20:f0:e5:47:ac:9a:c7:7c:9d:
1d:54:a3:ba:56:60:5e:d9:95:03:0e:b3:ab:2d:51:
b0:20:87:17:93:c2:f1:cd:0f:29:b2:26:a2:67:c5:
86:50:7e:bd:ed:bf:82:36:7b:98:d4:89:ee:d2:78:
03:18:2f:dc:4e:bd:e3:ae:2e:fa:23:89:50:98:67:
93:66:85:3d:ee:05:53:de:93:9e:fd:fb:ef:c9:ba:
57:d3:17:72:53:9e:81:01:eb:71:2c:d2:83:5d:26:
f7:42:d1:1b:ef:85:4f:cd:a1:af:24:6f:f6:19:53:
72:4a:b7:b5:c4:2d:36:90:a2:21:b5:41:ec:53:8b:
99:85:40:67:bd:d9:fb:aa:cc:7e:88:9d:2d:aa:13:
1b:e3:d2:d5:1e:4c:5f:72:ff:68:35:0d:e0:f8:37:
fa:0e:68:b6:54:63:96:33:93:91:12:52:7c:0c:74:
f7:1f:47:7a:d4:6b:cc:28:56:19:32:6c:df:0d:bb:
1a:12:9b:e2:8c:9c:fa:b7:23:06:4a:a8:5b:54:97:
21:aa:d2:fb:e0:1c:56:63:87:79:13:81:11:55:d8:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:46:E5:0A:FA:49:14:67:85:16:ED:3D:4B:92:10:8B:F1:30:9B
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9c:2d:29:18:c5:5f:69:06:42:53:25:a4:6a:71:33:94:60:
7a:e1:c2:e1:86:c3:49:c3:28:fe:09:d2:48:a9:04:96:9b:d5:
49:cc:cb:99:5d:38:48:16:72:c0:ef:9a:47:90:1b:ca:f9:57:
02:21:a8:66:d2:16:b3:6d:a9:64:07:2d:dc:95:0f:19:ef:b7:
3f:ac:85:c1:44:c0:8e:6a:08:8a:c4:47:5c:98:5a:38:5f:fb:
e1:64:18:ab:36:4a:61:16:94:38:a3:cb:44:e8:cb:ec:c6:1a:
24:d4:af:d0:ce:48:25:be:a0:9e:e5:a6:17:b2:52:0f:c2:38:
5f:5f:e1:93:5f:b5:b6:85:21:02:c5:b3:6a:d0:b8:40:77:b3:
3b:9e:61:38:4a:b1:0e:65:b1:e4:40:2f:d3:31:1c:d4:93:36:
41:14:0f:18:3f:98:31:4d:3f:20:ed:bf:10:81:77:3a:c2:30:
98:5c:b6:98:7f:3d:1d:40:93:f5:0b:31:66:f5:de:13:13:01:
f2:39:13:cf:7d:18:49:71:5d:40:88:7c:ad:6b:84:c7:1c:41:
f2:00:92:b3:cd:87:c4:06:bf:6a:f2:21:08:e7:3c:ba:5c:66:
20:ce:f1:3c:d0:e6:e3:d7:4e:41:64:83:fa:a5:e3:33:f7:95:
b9:42:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:32:06 2026 by rpki-client