Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: RvlccB9+2r6oUBg2/H7BL/T4lu5Nx20+BiNCWPpb/hU=
Subject key identifier: C6:19:82:76:D9:F9:58:C2:49:B2:90:BD:20:DE:7C:6F:8C:5F:12:14
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019F129C4718C014085093326CCACA1DE1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 09:00:59 +0000
Manifest this update: Mon 29 Jun 2026 09:00:59 +0000
Manifest next update: Tue 30 Jun 2026 09:00:59 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: KiOWvCt8mtQdAOt0kqvaNbwF7d3P3hh7ImiZedblBYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:47:18:c0:14:08:50:93:32:6c:ca:ca:1d:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jun 29 09:00:59 2026 GMT
Not After : Jun 30 09:00:59 2026 GMT
Subject: CN=c6198276d9f958c249b290bd20de7c6f8c5f1214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:24:f5:0d:ae:70:cd:69:38:e3:c8:43:eb:
4b:a4:b3:dd:44:86:45:cf:93:af:82:35:24:5b:ad:
e5:6a:46:a7:bd:b4:09:a3:f1:90:6e:45:3a:66:8b:
fe:76:c2:bc:44:5d:0e:0e:a5:89:fd:1e:65:7a:c8:
1b:27:30:df:e4:7a:97:b0:5f:d4:b8:bb:6e:3a:2b:
83:4d:42:cb:c9:b4:7b:d1:b7:0f:35:bc:f0:5b:64:
b5:17:7a:b3:95:19:ac:03:a0:79:5c:db:0b:be:95:
81:05:af:cd:ff:ed:64:9a:94:48:53:3c:9d:df:ee:
16:c2:5d:74:1b:bf:d5:bb:91:28:49:9a:19:a8:ed:
cb:be:fa:fb:62:4f:ba:61:1c:57:ab:37:1c:1e:39:
37:53:e8:a1:b5:dd:43:ef:58:a6:b5:5a:ce:5b:54:
97:13:64:05:25:d6:ab:dc:c0:ae:95:e0:9d:72:de:
94:64:f6:4a:8b:81:8f:6d:8b:2c:eb:1b:2c:0d:26:
62:45:8b:c3:c1:22:65:3c:ed:f3:55:8b:5e:29:2f:
52:70:bd:fd:f7:c7:74:04:2f:53:77:ad:3f:e9:8e:
53:3f:e1:d8:93:cf:ee:93:44:5e:2f:99:c7:d3:b1:
d6:dc:32:92:b1:4d:d7:13:42:bf:1c:07:77:b2:b2:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:82:76:D9:F9:58:C2:49:B2:90:BD:20:DE:7C:6F:8C:5F:12:14
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:81:4b:15:58:c3:f6:bd:1c:b6:de:8c:05:d4:69:59:46:
c4:97:4a:b9:60:53:11:fa:7c:2e:87:6e:d6:5b:9c:75:35:05:
77:dd:d4:90:f4:92:81:e6:e0:08:ae:82:0a:5d:94:f2:29:37:
1b:40:95:f8:bb:40:52:95:e1:df:35:91:18:6a:0e:c9:ee:31:
0b:5e:39:f0:54:4a:d4:02:37:d3:09:63:6a:69:19:af:e1:df:
9e:a4:59:3f:3b:db:47:bb:08:53:29:2e:05:f9:a9:21:42:b6:
21:1f:61:dc:b4:39:e4:da:7b:bc:2e:76:1a:53:e8:fc:c6:80:
fd:8c:bb:05:0a:bd:09:35:e3:35:39:bd:4a:8a:a6:89:b5:72:
87:5d:e8:00:58:b5:4e:12:58:a2:5a:0e:7c:b0:8f:c8:88:82:
d4:5c:28:ef:a3:8a:29:0e:a9:7e:65:c0:3b:80:21:09:a8:20:
be:2d:7b:1a:b1:08:89:b0:40:32:ef:67:64:92:2b:f7:f4:97:
04:81:20:41:70:ec:30:ec:36:ba:19:28:22:91:e6:a7:de:0b:
77:2d:c0:c7:e5:6e:e3:04:6d:1c:28:89:14:48:e6:99:58:ab:
8a:6e:70:ce:61:50:98:cb:ab:ae:dd:99:87:95:b3:1e:b6:dc:
a6:05:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:49 2026 by rpki-client