Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File: OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier: GrE3LJ3w20BeM9b7Ko7nQS0lgexcTx18FcfXu0r8bFw=
Subject key identifier: 52:1B:DC:A6:CB:A9:45:14:A2:1E:E9:AE:F1:01:09:40:4A:84:73:29
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 019D2996DFB0F5BD2431E4F3F3867FB973EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number: 139E
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: 6SJt7SnfVTTl2KJE3clbxRIsPYZnSwaWesoN7Nlt7Io=)
6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:df:b0:f5:bd:24:31:e4:f3:f3:86:7f:b9:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=521bdca6cba94514a21ee9aef10109404a847329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:66:3f:d9:f4:9a:e9:f3:cc:fc:21:4d:0d:
35:4f:b7:18:f0:75:57:ae:a0:0a:1a:b9:c2:67:a9:
2e:c9:7c:c4:7e:fc:ad:77:82:17:91:3e:27:f8:8f:
21:d9:0c:ae:73:1b:da:f2:ec:b3:e6:9b:46:5c:e0:
ca:14:3e:50:73:e1:3f:55:80:28:df:c1:21:50:66:
5a:e1:f9:91:1b:e9:d2:f3:29:89:7a:97:78:32:f3:
21:86:ec:c5:f1:b5:f0:3e:32:e9:75:e8:69:ae:3e:
b6:f7:c5:70:3c:8d:be:f5:a1:1b:51:96:d5:34:3e:
15:e9:39:f2:4b:cd:ad:42:fe:6f:2e:45:11:b2:10:
29:fc:77:18:db:16:99:da:78:8a:3b:ca:1e:3e:09:
07:4e:15:bb:d2:cd:99:d8:e5:60:84:5e:65:e8:f8:
5b:d2:21:f7:e7:a0:b0:13:59:84:1d:04:82:5b:60:
a1:b8:72:0d:33:c0:ee:ad:64:b6:99:4a:9f:61:ed:
2a:c4:78:fe:1d:f5:92:9c:69:ae:c2:26:18:29:04:
e6:45:23:27:20:55:90:9a:8f:26:05:d9:d3:05:6a:
bc:78:c1:77:60:94:18:d4:71:35:ae:36:4a:52:54:
38:46:ce:ea:5e:cb:de:d1:be:90:a4:42:8c:e2:76:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:DC:A6:CB:A9:45:14:A2:1E:E9:AE:F1:01:09:40:4A:84:73:29
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:3d:bd:c4:7e:71:37:30:bc:17:b0:dc:08:e1:a5:6c:69:
54:27:4b:97:b9:2a:7c:af:ba:5b:61:b6:ea:ad:5e:f1:1b:93:
24:a7:fa:16:f4:58:13:ea:23:71:04:c5:21:3d:83:d2:f1:34:
ae:61:0b:d2:82:73:c1:af:4c:b3:1c:62:68:65:8f:95:f5:59:
42:06:84:00:8d:8e:17:68:53:31:6b:99:7e:21:b6:e8:25:e5:
c8:82:6f:f7:05:8c:b3:64:d7:5b:a7:12:2f:e1:e9:7d:b5:b2:
18:29:9d:67:ff:22:98:3c:fc:6f:80:cc:67:c7:67:0d:d8:5c:
d7:37:0d:db:36:9f:d8:69:c4:8f:f9:42:93:fd:62:b5:67:b4:
e7:fd:bc:9f:5c:9a:17:5a:6a:cf:07:1e:76:c0:01:ab:0a:f6:
3e:2a:39:39:6b:07:13:5e:52:e1:d0:43:a9:eb:d0:56:80:b4:
a5:dd:a4:92:d0:d3:39:9f:b3:51:b8:ee:0d:3d:6d:fd:81:a9:
3a:1c:0a:90:28:4a:9b:48:18:65:e3:89:8a:26:c3:96:92:86:
e1:ad:a5:15:be:2c:2a:8f:1d:47:19:49:f1:aa:eb:63:05:8d:
3a:9f:29:18:a2:95:d4:ad:a9:b5:d3:8e:06:4a:02:5f:8d:62:
a5:d6:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:44 2026 by rpki-client