Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: xdZLLOB45ELfDI8EelD5hwdh/QzBCiY2ZvMwNLBYTEc=
Subject key identifier: 20:74:B8:78:A8:37:D7:AD:AC:60:77:3A:F1:BD:5D:80:9F:0C:0D:A1
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019D2704428C3D8B46CBDD6D94A99893A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 1262
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (hash: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: rCHPa+FxC/kA5FBfSpYu8CSJJCj2LIML4YZH/4Gj3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:42:8c:3d:8b:46:cb:dd:6d:94:a9:98:93:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=2074b878a837d7adac60773af1bd5d809f0c0da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:72:0b:c8:f4:77:59:0c:bd:5c:ce:97:df:
70:4d:69:ef:45:da:09:70:db:ac:38:fd:5e:f9:56:
06:95:ae:23:ae:0f:d7:ca:e9:7d:9a:c2:67:df:1d:
0a:fb:d3:74:fa:e0:0a:25:ba:8f:38:cc:be:70:6e:
25:0a:f5:4a:2b:00:df:bf:06:7a:1c:1b:0a:ce:36:
cd:56:58:40:08:0e:06:1d:fb:a8:54:39:87:c1:66:
4d:f5:5c:10:f4:d9:94:be:45:f9:3f:c9:b2:6d:3f:
49:3f:c1:2b:c5:c4:f1:15:14:a4:5d:fa:6a:bc:ed:
98:61:5b:a3:5c:2d:58:04:88:09:5f:9d:9c:b2:81:
bf:b5:fb:e0:06:1d:29:63:82:24:7b:2a:22:fd:26:
49:01:80:11:b8:d4:04:4b:29:59:d0:57:e0:a3:c7:
30:57:b2:2e:71:55:b4:a8:49:7d:d3:77:55:82:10:
4d:ec:25:d3:24:ba:d6:09:10:e4:bf:03:a7:40:23:
9d:2f:bc:20:c6:f9:a8:e1:0a:55:5d:73:dc:0d:75:
66:75:29:7f:fa:d5:34:00:e3:ec:b7:b7:e4:37:66:
0a:77:90:56:0a:4c:ba:57:b5:b8:72:33:f9:09:e2:
20:f5:7a:6c:4f:fe:b7:97:c4:04:2f:1f:09:c3:79:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:B8:78:A8:37:D7:AD:AC:60:77:3A:F1:BD:5D:80:9F:0C:0D:A1
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:32:92:01:7a:ad:00:30:ed:a7:5d:30:7f:fb:34:38:91:
98:d0:17:b5:a5:c5:18:7b:94:fd:eb:e5:d7:5e:35:46:47:8d:
6b:b9:c9:8f:a1:13:95:13:33:bf:0f:8a:21:e9:8d:1e:fc:c6:
fe:d7:ca:df:54:a7:16:cb:cc:fd:67:99:0a:79:dc:19:26:80:
1b:2b:d5:f1:1b:4f:60:e7:b2:b2:7a:b7:ad:b7:6b:8b:4c:3f:
08:e3:f1:f0:1f:7f:d1:27:e5:de:af:8d:ba:b1:6f:ea:0e:a3:
6f:07:83:03:9a:2d:60:28:5a:b8:65:7f:92:ca:87:20:55:04:
3e:e0:90:2a:59:b7:c6:cf:0e:44:34:b0:b7:9c:47:62:88:e6:
14:6b:fb:49:69:e9:22:74:ff:ee:03:ee:7c:2f:04:49:0d:2e:
02:97:fd:e9:fc:43:f2:51:61:05:a4:eb:8e:0c:46:ef:1b:72:
3e:de:4c:d4:97:3b:93:d4:b5:1e:7b:53:29:3a:be:65:b6:10:
a8:2f:51:c3:23:b5:b9:46:92:83:8f:d4:7d:8f:08:08:79:bb:
78:c3:ae:da:f8:8f:4b:a8:ca:e3:0f:b5:7a:3d:b1:7e:67:35:
c1:ad:ce:7d:2d:7d:f0:6a:b7:b4:f8:be:75:97:b0:d2:fa:52:
0e:ab:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:23 2026 by rpki-client