Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: i6Hd2V1Y7OXtGr8QFdlb03VPWBcOpdtP4wpp6DqEYTs=
Subject key identifier: 2E:15:00:D6:26:65:7B:25:05:07:9B:ED:AA:2C:C0:0C:0D:08:BD:B3
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019F94DC46E57C956AF61F064FED8035437D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 16:01:31 +0000
Manifest this update: Fri 24 Jul 2026 16:01:31 +0000
Manifest next update: Sat 25 Jul 2026 16:01:31 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: yP9YFEQ+E3BicyqSWiO1tF1A1xIl9DmoK2sAX3CQYiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:46:e5:7c:95:6a:f6:1f:06:4f:ed:80:35:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jul 24 16:01:31 2026 GMT
Not After : Jul 25 16:01:31 2026 GMT
Subject: CN=2e1500d626657b2505079bedaa2cc00c0d08bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:2a:36:9b:be:a5:e5:63:16:fc:af:31:ed:
96:4d:dc:95:81:0e:55:5e:bb:3d:f1:49:d6:5f:05:
62:0b:c0:81:d5:a5:74:01:cb:13:07:2a:8a:81:29:
82:c3:66:e2:20:56:2e:d4:2a:5b:e2:45:01:37:5b:
e3:6f:b7:63:81:95:4d:c4:b3:f5:97:69:33:a2:c0:
04:f3:43:01:3b:ef:88:1d:3a:2d:99:2f:b0:44:0b:
af:db:ad:49:22:fb:06:7e:6f:d7:c8:56:14:2f:ce:
5e:f6:04:f6:3b:8f:f1:c3:a7:c7:33:0e:de:ee:f7:
43:ff:3a:05:19:37:46:01:ba:fe:57:ba:97:89:27:
01:d9:5d:c4:28:aa:8d:d5:d7:f0:2f:a9:26:dd:97:
7f:ae:11:10:f4:7d:23:d7:0d:e7:d0:5a:57:f6:68:
40:59:d1:bf:b1:38:c6:ec:78:a6:2f:bc:ce:77:c9:
55:8b:4a:55:a7:56:96:b5:30:1e:cd:3a:17:8a:1a:
eb:11:02:3e:38:99:8e:20:7c:7c:36:ef:c0:0a:4a:
a8:3d:e1:f3:73:c1:4e:80:c4:dd:0f:75:3d:dd:fc:
f7:f8:ae:a1:9c:66:57:85:d0:69:ee:70:b3:3c:be:
27:2a:64:6e:64:20:45:f8:26:5d:6e:f9:d9:a2:43:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:00:D6:26:65:7B:25:05:07:9B:ED:AA:2C:C0:0C:0D:08:BD:B3
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:29:32:1b:fb:fe:da:3e:9f:d1:ac:d2:f9:0b:1f:1f:11:f8:
1c:32:4b:77:e5:16:bd:47:05:b5:0e:22:b6:c7:57:58:73:d1:
10:fc:e3:49:f1:b4:b1:e5:b4:fd:77:28:20:d7:97:13:0b:2a:
69:5c:dd:2f:b1:12:34:43:aa:e8:4c:7c:81:71:a1:39:c9:e6:
8d:7e:a4:dc:11:8b:df:61:56:ee:6a:80:e4:28:c3:9b:2f:f7:
6f:f5:83:9d:55:59:7f:86:d4:fd:51:88:e1:6b:8b:ae:d7:cc:
5b:0e:4f:57:d2:b7:f4:8f:29:14:8b:d3:8a:6a:82:2d:0a:b4:
f9:ec:32:fa:f9:8e:53:ad:11:ca:4c:1e:53:77:43:31:27:0c:
09:86:06:c6:14:18:14:1e:78:b7:13:8c:6d:aa:5e:da:b7:73:
d4:c5:67:53:06:2e:78:29:7d:d0:04:2b:c7:7a:3f:97:39:cc:
c4:f6:ff:74:9b:1b:a0:df:34:de:36:88:a8:7b:f7:9a:17:f0:
5e:ac:d9:94:5a:f7:a9:17:15:c2:82:13:f6:14:ab:09:76:e6:
93:ba:e1:3c:67:96:55:21:0a:d9:aa:99:2a:0d:c5:f0:80:e8:
40:a9:a5:18:89:20:8e:74:2e:e5:9e:d3:d2:e0:26:d2:ec:fe:
07:a1:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:36 2026 by rpki-client