Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: n5ZI+YxwN8MFxOEAm7CdVXXkgafAXU6LaOzsBOJrXqM=
Subject key identifier: 0E:AD:02:D9:2A:6D:12:05:65:88:9B:4A:5F:67:67:6D:25:61:BC:C0
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 01A12A68FD4058EF870A490D2432647AE5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 10:01:25 +0000
Manifest this update: Sun 11 Oct 2026 10:01:25 +0000
Manifest next update: Mon 12 Oct 2026 10:01:25 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: Ol6ZQ/Ye0d1CJ2iwkg/FQyZOwHlytnP+v7GPwLY6uWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:fd:40:58:ef:87:0a:49:0d:24:32:64:7a:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Oct 11 10:01:25 2026 GMT
Not After : Oct 12 10:01:25 2026 GMT
Subject: CN=0ead02d92a6d120565889b4a5f67676d2561bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:09:03:e6:6e:78:56:ce:0e:70:d8:b6:46:
36:58:c3:ba:fd:bb:92:c3:5b:95:af:86:62:4a:2d:
e4:6e:ba:80:d7:14:70:39:a7:0c:86:14:e0:2c:76:
04:43:4e:cd:1a:b7:d4:44:26:b1:a3:5f:8b:50:41:
6c:9b:e7:a8:e8:f1:76:20:ba:31:da:9a:be:e3:e0:
47:17:68:ef:b3:3e:ea:be:1c:32:c9:c3:35:82:ab:
6b:ed:f5:67:31:30:59:7a:0a:c0:21:7b:93:f2:6a:
53:90:0c:5f:da:64:fa:1e:23:2e:d7:95:62:e3:05:
c9:c2:2a:12:f4:e4:cd:82:e5:bb:35:bc:41:76:78:
96:1c:f1:ee:2c:a7:e1:da:29:4f:68:2b:29:2d:84:
9a:bd:0c:38:95:9f:ff:da:0b:9b:92:77:e0:1b:3b:
76:fd:f5:81:ab:7b:29:ee:9b:65:89:1f:39:8e:6d:
8d:ec:08:43:78:c1:9a:fe:09:0b:1c:dd:5f:93:5b:
2d:42:e5:28:f5:33:5d:6b:26:a8:6d:7f:67:17:c6:
6c:04:3c:cd:f1:2a:c5:49:33:71:1c:24:cc:e1:75:
03:a8:2a:4b:fe:54:f0:57:3d:35:37:b5:10:d3:a4:
ec:f0:49:ff:94:9d:39:7a:67:af:c2:fe:05:66:13:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:02:D9:2A:6D:12:05:65:88:9B:4A:5F:67:67:6D:25:61:BC:C0
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:f1:3d:18:8c:5d:90:ee:17:44:b8:fb:dc:ad:c1:6d:ea:
bc:44:7d:45:48:e8:a5:6d:39:6e:bc:81:bf:bb:65:ee:1f:7b:
cc:af:29:4d:fa:03:de:91:8d:21:54:9b:aa:be:f5:15:7b:94:
18:cd:7e:52:bb:f8:74:fe:1b:10:ca:43:f4:41:86:a5:49:63:
4a:c8:9d:d1:71:ac:e2:20:4d:ad:80:50:3b:07:84:e4:f1:cc:
e5:a2:4b:59:f7:67:d2:9c:75:24:cc:c8:f4:4a:27:c2:16:26:
3c:e1:fb:83:20:10:ce:1f:e8:8a:f5:d4:55:9f:d9:ed:60:45:
4e:87:d8:9c:aa:89:57:6f:a8:39:de:6a:bb:0e:ce:cb:a7:97:
8f:56:c3:5d:7c:99:0a:dc:58:47:4f:e8:7d:7a:b8:de:a4:0e:
be:b7:86:1c:e4:d9:fb:bb:8c:aa:8b:63:91:f1:87:77:38:4f:
28:02:b4:9f:48:33:c5:73:ec:1a:ae:8a:6d:98:fc:0b:e6:54:
c3:c2:be:5a:c4:bf:f2:8a:f9:2e:b1:e5:47:0c:3b:c7:85:46:
9c:b7:5c:57:de:c2:94:ec:b1:fd:03:02:1c:2a:a5:f3:29:64:
80:ac:97:09:ef:93:f3:98:35:5e:7a:ce:af:6c:02:37:23:50:
e6:87:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:07:38 2026 by rpki-client