Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: kWT5CwvVSpvrmXpmsaR3y60gKn6MJ50ZYUa6t9hD/OE=
Subject key identifier: F6:C9:15:5F:FF:F9:71:D1:62:0E:84:95:54:E9:2F:57:4F:BC:31:0F
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 01A16BA39F5E44B25CF366DBE946966C2BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 1AC2
Signing time: Sat 24 Oct 2026 02:00:47 +0000
Manifest this update: Sat 24 Oct 2026 02:00:47 +0000
Manifest next update: Sun 25 Oct 2026 02:00:47 +0000
Files and hashes: 1: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: kFJWX0TP44J/36dCFXaYd77KcCou5rHlvDTZIQ7j3Yw=)
3: rk_qIg4M0T6VeSZIH6qI5IJsveA.asa (hash: LxPs6qFGOS3d/DfhY0ScdJWhdWn8Ibcrre8xQ10KueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:a3:9f:5e:44:b2:5c:f3:66:db:e9:46:96:6c:2b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Oct 24 02:00:47 2026 GMT
Not After : Oct 25 02:00:47 2026 GMT
Subject: CN=f6c9155ffff971d1620e849554e92f574fbc310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:02:09:42:e4:43:b3:85:ac:6b:2b:15:5f:
d2:e0:9c:6c:32:c6:56:7d:b0:4b:a5:58:f4:bc:e7:
b8:f4:d5:4c:7e:ec:37:6e:80:44:fc:2d:5c:74:46:
a6:24:a2:8e:ad:35:98:fe:67:a7:0f:c8:19:8c:81:
e4:bf:f9:b9:ed:da:4c:20:2e:7d:0c:84:4e:8f:b8:
2e:c8:32:21:3f:78:ae:a3:88:43:6d:ab:b1:29:28:
76:63:ac:36:ca:e6:9e:6b:0a:d2:10:0c:0b:fb:0e:
f1:05:cb:75:29:fd:57:63:3a:67:b2:30:b3:1e:31:
55:fa:96:25:32:82:45:af:fe:d3:91:84:67:22:c0:
72:4c:81:f6:cc:b8:a7:14:aa:93:83:8b:a3:c0:f6:
76:cc:36:6c:b0:44:6f:90:5a:47:9f:41:0b:f5:6c:
f9:66:02:1c:3b:73:78:04:d8:dc:da:7b:37:c0:f5:
75:ab:c0:d2:b9:f1:1a:6d:0d:f2:53:0a:fd:a5:e0:
79:f3:de:ea:91:10:3d:70:d5:f7:51:d0:48:77:9c:
1b:d7:e0:fa:c1:47:c6:f0:6b:a1:60:13:e5:1f:7b:
54:f5:28:ad:55:99:9e:80:24:66:87:35:69:fa:4d:
94:ae:3c:a7:6f:81:94:e7:a5:eb:01:d4:4f:29:55:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:15:5F:FF:F9:71:D1:62:0E:84:95:54:E9:2F:57:4F:BC:31:0F
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dd:e9:43:8b:6a:15:68:b6:77:29:4d:fb:9d:67:65:73:4a:
08:51:22:d8:55:0f:61:4e:f3:dc:6e:6e:74:3c:57:ed:53:ed:
e4:3f:b1:47:ec:7f:bc:4d:fe:e6:c0:f0:81:74:0a:ad:1f:d5:
8b:af:00:b6:cd:8d:69:13:e0:a3:f3:06:f0:2e:a0:f9:f0:17:
58:17:5b:4d:1b:ab:53:74:ac:f0:d1:03:90:34:6a:fb:68:8f:
91:58:b3:e4:03:3b:62:c1:a0:9f:97:24:a4:56:33:dd:d4:d4:
1f:0e:02:a5:3c:ac:a3:2e:ea:3c:37:53:50:fd:58:d7:65:79:
c6:d4:95:4b:72:7c:62:61:7e:31:5a:50:97:04:12:b1:52:11:
6c:e9:f2:bf:f2:51:07:b0:93:69:6e:6c:b8:de:cc:be:2b:8b:
5f:97:d7:fd:61:65:68:35:e9:d4:8f:b1:47:0f:25:a6:c4:68:
14:a3:25:47:4e:af:b1:ad:df:40:13:e4:f4:e8:b8:08:56:59:
a9:08:99:27:f1:ef:19:1e:0f:cb:1b:22:ad:80:b2:6e:65:07:
cb:ac:8b:cc:c7:87:1e:6f:29:54:4d:44:b0:5e:5c:78:ec:12:
eb:65:6a:54:6f:f9:b2:dc:4b:4d:b5:ab:2a:fc:42:74:c3:94:
ff:fb:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:49:31 2026 by rpki-client