
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: teuGeGBzaUIGnqS6jb31ljAfdzoFHZcO6JwP39CfKDw=
Subject key identifier: 32:0B:7A:E5:37:5D:63:57:1E:EA:56:DE:7C:0A:FC:3A:B1:F6:FE:12
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019E1FED29E7857D886F34AEA808F9A5C6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 04A3
Signing time: Wed 13 May 2026 06:01:36 +0000
Manifest this update: Wed 13 May 2026 06:01:36 +0000
Manifest next update: Thu 14 May 2026 06:01:36 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: CNGQqlluMZIPYT7ezOCezJY9CJMMEgIX7Q3ZhfCQErw=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:29:e7:85:7d:88:6f:34:ae:a8:08:f9:a5:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: May 13 06:01:36 2026 GMT
Not After : May 14 06:01:36 2026 GMT
Subject: CN=320b7ae5375d63571eea56de7c0afc3ab1f6fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:7f:d1:10:7b:0d:b8:2c:e1:2a:bd:fd:d0:
ba:95:ee:9d:49:fe:0f:eb:b7:90:b6:36:93:63:50:
8b:34:ed:bd:12:99:ba:de:b7:d0:43:7c:cb:00:98:
f4:74:bc:c0:56:f4:c9:5c:e7:a8:3d:3f:6e:1b:43:
f7:12:5a:61:5a:2c:f2:8e:b2:8e:62:6d:5c:1e:14:
3a:2f:17:cc:d9:9c:2d:55:e2:8d:27:d8:34:b5:f6:
96:f2:83:42:02:28:ad:01:54:5e:3f:df:b6:45:15:
5a:08:a0:ef:11:eb:e4:dd:2e:f0:bf:e6:24:36:8c:
d4:3e:0a:0b:ab:ab:82:b9:bd:e5:92:34:d1:13:38:
f0:70:cd:76:17:fa:cc:32:ae:92:70:13:78:11:33:
4c:7e:64:ec:9b:d8:b7:dd:5f:11:f2:2b:09:40:27:
6f:66:04:dd:62:8c:05:82:fc:03:83:1d:bb:81:12:
0a:5c:7e:f5:2f:f4:e8:b6:31:33:76:cd:ea:84:7b:
60:4d:ab:dd:8c:7e:0f:21:c2:9f:e7:41:e4:cc:6f:
be:b4:e3:a3:f9:ca:c7:af:22:e8:b2:ab:81:c9:13:
38:05:e5:d6:0e:c6:6b:68:b0:7c:ad:a1:dc:72:a4:
39:9e:a5:71:36:28:34:22:4b:3d:c2:29:a0:62:f0:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:7A:E5:37:5D:63:57:1E:EA:56:DE:7C:0A:FC:3A:B1:F6:FE:12
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:67:f8:e4:0e:b8:61:7b:20:dc:50:37:6f:a9:a9:3f:36:5e:
37:16:af:31:73:2a:9b:87:4d:63:ab:d2:b7:16:9c:e6:e3:51:
db:7f:04:e1:ee:42:b9:03:30:38:45:21:f2:4d:f2:33:3c:c2:
ea:8a:17:99:f9:a8:f8:8e:95:99:35:22:02:d0:eb:b8:aa:34:
60:74:61:8b:e2:7d:83:30:4e:4f:d8:13:03:55:63:86:4f:36:
63:c6:c6:7a:10:e7:73:f9:14:fb:33:79:1a:53:cf:18:8b:0d:
55:c5:96:b0:87:b1:74:75:0f:53:3e:f7:f8:e0:1b:61:80:62:
6b:c8:fd:5c:1d:c0:39:aa:4d:95:79:1e:1c:b3:5d:1e:59:fa:
bd:9b:79:39:ba:aa:f3:27:a8:55:9b:ab:d9:90:a4:d5:2a:a2:
e8:07:d3:9e:be:46:fd:7b:71:a5:12:c3:17:03:aa:b9:33:11:
c0:0c:bf:cd:76:1c:f0:bc:6d:60:db:40:72:64:be:c3:3f:c3:
1e:ff:85:2c:76:48:63:f8:98:4c:95:aa:4e:d2:9b:57:f9:a8:
b5:47:8e:5c:88:6e:43:e2:9d:2b:be:ee:f2:2f:42:78:86:46:
48:ab:22:58:08:6e:31:89:b2:63:d7:4a:3a:b9:e3:9f:c1:24:
f3:0e:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:19:56 2026 by rpki-client