Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: CE4Re6p8YqAtO+FPgK/7DiXpFd+L2tJ58wUR64VEc9A=
Subject key identifier: 76:9E:BF:C1:C6:1B:B7:DA:9D:DF:7C:DF:36:2F:3F:74:93:B7:AB:3C
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019F10AE5AB4CFD5A1F3F3F86AA019DBB2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 00:01:29 +0000
Manifest this update: Mon 29 Jun 2026 00:01:29 +0000
Manifest next update: Tue 30 Jun 2026 00:01:29 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: X+8h84lZTj+vheVZ6WIESmrAY/4uhV3fMr/QXZU2S+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ae:5a:b4:cf:d5:a1:f3:f3:f8:6a:a0:19:db:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jun 29 00:01:29 2026 GMT
Not After : Jun 30 00:01:29 2026 GMT
Subject: CN=769ebfc1c61bb7da9ddf7cdf362f3f7493b7ab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:78:f5:5d:83:89:0c:79:32:7c:ae:a5:aa:
93:17:76:47:42:97:50:09:91:1a:56:b2:ab:0e:7a:
30:3a:39:49:90:c3:83:e5:4a:ee:41:80:77:5c:55:
72:26:f9:f4:5d:78:50:1d:20:79:da:69:c4:31:0b:
28:aa:4e:20:a6:12:0f:fd:bf:5f:12:0c:ff:3f:30:
db:b9:d0:8b:e6:9d:86:8d:19:c5:81:e4:e5:ad:a9:
8c:82:d7:47:96:15:22:8e:f3:1e:94:ca:1a:ed:38:
80:65:9f:0e:d8:98:cb:a8:39:ea:b2:67:f8:72:3d:
6b:bf:b4:af:23:9e:50:43:f4:f0:ed:f8:ab:c6:bd:
e6:2a:3d:3d:e9:a2:0c:b1:d6:52:56:95:c7:93:59:
c1:ea:78:4c:9e:fb:af:02:da:6c:87:45:31:3f:29:
cc:24:a6:3a:6f:03:92:f0:6a:6f:b7:d3:86:2d:91:
3e:14:71:e9:50:da:b9:a2:7b:a5:63:fa:ff:4f:9a:
07:f6:b3:53:73:56:91:e9:11:42:04:1e:63:9f:19:
c7:14:70:97:d2:c1:a5:bc:fd:3d:7e:58:8b:9d:74:
77:9e:2e:d5:66:70:ff:66:17:24:ea:2a:1d:2c:86:
15:db:a1:e8:c3:54:a1:2c:83:c6:1c:a9:ba:31:d9:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:BF:C1:C6:1B:B7:DA:9D:DF:7C:DF:36:2F:3F:74:93:B7:AB:3C
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7a:b1:c0:f8:ca:a9:b8:ee:fe:c8:e5:cd:bc:27:84:fe:2e:
dc:95:0c:dd:ba:57:8d:2a:ae:9d:96:58:bc:7c:3e:9f:7a:e7:
ba:5a:b6:50:c2:17:f2:dd:d0:cc:ea:f3:3c:01:6f:cf:06:77:
17:fe:9b:db:27:3b:f2:8c:06:2d:3f:ca:28:e0:b3:ac:16:1c:
e1:54:88:92:7f:2a:c8:cd:60:16:00:ca:64:26:af:96:73:32:
e8:f9:53:31:f2:89:2e:aa:3a:2e:56:a0:7d:be:42:b0:ad:7c:
ab:7a:2e:25:6a:ec:06:f9:db:f5:4d:09:af:11:d2:28:33:5c:
80:8d:a3:ca:b7:af:64:87:89:a9:c0:e7:59:ae:5e:6c:83:52:
e5:24:58:2d:1c:44:5c:ff:4d:88:f2:f9:14:47:bc:80:79:2c:
1c:a1:dd:6c:79:a5:17:37:05:c8:d7:22:5f:7f:c6:21:1e:c9:
97:a5:86:48:67:3c:87:8c:30:0a:b3:80:4f:bf:3b:63:be:64:
c3:1e:79:93:e4:00:ee:3c:05:18:4b:50:3f:92:d2:c4:b1:30:
3d:4f:3a:c8:ad:73:ed:d5:12:be:6a:60:fc:c6:a4:c9:90:36:
04:82:60:91:ed:a1:66:00:20:26:95:c3:dd:c6:58:40:91:32:
6b:70:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:46 2026 by rpki-client