Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: JqY4d4Uio8kvCQY5sGy6OHTp5cH7jqwN+fmrEFgb490=
Subject key identifier: DA:8A:C5:F7:40:6E:A4:97:AA:27:67:87:CF:3F:BA:82:86:D8:6E:46
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019E28EF8F067900FB3AAF14EA963C5F55AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 1911
Signing time: Fri 15 May 2026 00:00:48 +0000
Manifest this update: Fri 15 May 2026 00:00:48 +0000
Manifest next update: Sat 16 May 2026 00:00:48 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: fcCjGJVH9wQGw45QjblbqXTEJTs1GQygBMGCU2YnwcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:8f:06:79:00:fb:3a:af:14:ea:96:3c:5f:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: May 15 00:00:48 2026 GMT
Not After : May 16 00:00:48 2026 GMT
Subject: CN=da8ac5f7406ea497aa276787cf3fba8286d86e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:6e:05:51:7f:bc:dc:d2:72:bd:b1:d5:8d:
f7:6d:6a:b1:fe:6d:23:6c:83:0c:a1:b7:d3:0a:0b:
ba:ad:25:51:c0:1d:58:7c:0a:34:07:3d:f8:67:11:
33:14:5b:63:2d:79:d1:00:09:cd:2a:fd:01:f8:08:
3c:64:c1:aa:ca:f3:95:b2:4a:11:d0:86:47:d0:4b:
cc:b4:ad:48:3f:14:a7:d1:ac:9d:f6:c0:45:88:55:
c5:90:51:6d:fb:da:ae:e0:63:81:cf:07:62:a3:fc:
83:f7:50:9e:b8:b2:19:8d:67:1f:84:cf:d7:39:df:
69:ad:22:b8:21:c7:90:90:58:c8:67:83:1f:77:42:
3b:0d:bf:14:55:c4:f6:8c:2a:b2:18:72:f6:3a:88:
d6:f7:3c:6e:43:61:ba:de:e1:a6:23:ef:ee:24:14:
02:eb:d9:b1:b0:b9:8e:2f:cc:60:ce:cd:3c:e1:5e:
0c:38:47:fc:12:de:6b:58:c5:57:e3:df:ae:f9:3f:
c7:20:12:e6:70:5b:b7:93:18:ac:88:e0:fa:de:0a:
14:c9:73:70:b3:9e:49:ad:0b:1b:33:ee:c7:1c:56:
53:3d:8c:3b:e3:75:63:91:52:1c:3a:1d:34:54:fc:
fe:3f:25:25:20:dd:0a:ef:f1:e6:03:ac:6f:61:61:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:C5:F7:40:6E:A4:97:AA:27:67:87:CF:3F:BA:82:86:D8:6E:46
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a0:3a:ca:4a:49:11:43:f7:cd:0f:e2:fc:86:c9:f3:69:94:
8e:b2:0d:45:b8:6e:88:6d:39:0f:a9:61:0d:29:85:a3:51:1e:
cb:36:d0:87:5f:98:6f:36:34:aa:d4:79:be:7f:ec:a3:da:ed:
84:21:c5:1d:ae:b9:1c:74:6a:b1:51:c5:4a:6b:11:38:83:a7:
72:45:92:cb:a8:79:68:4c:6d:03:59:cf:f4:5f:bd:d7:b1:7a:
21:7c:ad:74:bc:68:7d:34:c0:a9:f1:0a:58:ef:1f:cf:95:61:
da:8e:f6:9d:d5:5e:0c:13:78:b2:b7:96:21:a2:7c:c3:8f:69:
5e:e2:af:1a:c2:7a:a9:e2:6e:62:31:ef:d3:bc:8a:03:cf:6a:
b7:54:1a:88:bb:85:c7:d0:fb:cc:36:f4:53:e4:d1:b6:9f:79:
36:19:a8:f0:88:3b:2f:c1:68:aa:5d:7f:d6:04:f2:66:cc:52:
42:20:d7:87:72:a9:f4:23:5e:d3:79:92:5a:59:7a:45:3c:e9:
37:f7:04:fa:ef:4d:c6:25:4c:00:37:24:fe:be:a5:1d:2e:18:
df:13:06:c0:6b:43:b8:bf:5b:f1:72:53:70:59:25:ae:b8:36:
7e:b7:08:0f:a6:1f:d1:99:16:9f:36:e0:26:14:46:0b:15:e9:
a7:c3:04:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o748GeQD7Oq8U6pY8X1WsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjYwNTE1MDAwMDQ4WhcNMjYwNTE2MDAwMDQ4WjAzMTEwLwYDVQQD
EyhkYThhYzVmNzQwNmVhNDk3YWEyNzY3ODdjZjNmYmE4Mjg2ZDg2ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjhuBVF/vNzScr2x1Y33bWqx/m0j
bIMMobfTCgu6rSVRwB1YfAo0Bz34ZxEzFFtjLXnRAAnNKv0B+Ag8ZMGqyvOVskoR
0IZH0EvMtK1IPxSn0ayd9sBFiFXFkFFt+9qu4GOBzwdio/yD91CeuLIZjWcfhM/X
Od9prSK4IceQkFjIZ4Mfd0I7Db8UVcT2jCqyGHL2OojW9zxuQ2G63uGmI+/uJBQC
69mxsLmOL8xgzs084V4MOEf8Et5rWMVX49+u+T/HIBLmcFu3kxisiOD63goUyXNw
s55JrQsbM+7HHFZTPYw743VjkVIcOh00VPz+PyUlIN0K7/HmA6xvYWEz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqKxfdAbqSXqidnh88/uoKG2G5GMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaA6ykpJ
EUP3zQ/i/IbJ82mUjrINRbhuiG05D6lhDSmFo1EeyzbQh1+YbzY0qtR5vn/so9rt
hCHFHa65HHRqsVHFSmsROIOnckWSy6h5aExtA1nP9F+917F6IXytdLxofTTAqfEK
WO8fz5Vh2o72ndVeDBN4sreWIaJ8w49pXuKvGsJ6qeJuYjHv07yKA89qt1QaiLuF
x9D7zDb0U+TRtp95Nhmo8Ig7L8Foql1/1gTyZsxSQiDXh3Kp9CNe03mSWll6RTzp
N/cE+u9NxiVMADck/r6lHS4Y3xMGwGtDuL9b8XJTcFklrrg2frcID6Yf0ZkWnzbg
JhRGCxXpp8MEAQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:23:16 2026 by rpki-client