Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: W/41v9WdtncaXIwAaDshOujwksUjYDvnXmNCVX5pYns=
Subject key identifier: 83:4E:DF:E9:15:11:8A:AB:A8:93:8A:6D:4D:6F:69:03:94:87:03:53
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019D2AAA0111B442433EDD07E42BCBD232AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0424
Signing time: Thu 26 Mar 2026 15:01:17 +0000
Manifest this update: Thu 26 Mar 2026 15:01:17 +0000
Manifest next update: Fri 27 Mar 2026 15:01:17 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: 7rTPQWIW55k17g0Xk/6WIdo+n7oVMsLYxfFPR9cn7ws=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:aa:01:11:b4:42:43:3e:dd:07:e4:2b:cb:d2:32:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Mar 26 15:01:17 2026 GMT
Not After : Mar 27 15:01:17 2026 GMT
Subject: CN=834edfe915118aaba8938a6d4d6f690394870353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:3e:ad:35:85:43:16:2f:07:f2:c2:a6:c8:
7b:cc:9d:ea:a3:f1:51:3a:6c:20:58:03:e8:e3:ff:
66:41:3a:26:65:4f:71:20:9b:b8:b0:f4:27:60:2e:
a9:7d:a5:78:ef:fb:c7:d7:d7:b9:39:ff:99:ea:da:
16:8b:e8:41:c7:c1:a1:33:87:7d:41:5c:08:ec:d0:
00:b5:52:07:de:47:c7:09:09:0a:7e:55:83:f7:31:
cd:30:c9:fe:fb:60:5c:28:1d:2c:4c:ea:30:0b:76:
3f:7d:d1:89:1a:9c:a5:a3:e8:9a:9e:ca:9b:15:ce:
4c:6a:39:30:cb:c7:af:d9:34:13:01:69:89:af:ea:
4f:d7:ed:d5:95:fa:37:a4:01:ec:12:42:38:57:94:
bd:e6:e6:58:55:d9:59:cf:2f:13:62:36:4a:28:4d:
5f:84:09:66:39:47:b5:ad:f1:58:18:e1:29:94:48:
7f:c2:ca:bb:8b:e6:69:18:35:21:d4:f1:2c:cb:4b:
60:8e:03:c3:66:31:90:f4:83:86:00:77:20:12:ec:
41:80:b6:99:f8:bd:0d:f0:1a:65:46:26:cd:86:31:
28:4d:9f:d9:dc:d7:bb:4a:4b:32:1a:3b:0f:b1:76:
79:d3:8b:66:7a:73:e5:db:8c:bd:3c:94:97:43:67:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:DF:E9:15:11:8A:AB:A8:93:8A:6D:4D:6F:69:03:94:87:03:53
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:00:64:a3:80:b8:4d:f6:81:9d:dc:74:3b:61:f4:1e:da:
bf:97:2e:bf:33:36:da:3e:ac:ca:13:e6:18:f6:6e:0d:bf:cf:
a6:ac:b9:6f:a0:4e:5c:ee:de:d7:f9:49:a3:35:ba:ae:6e:ad:
be:fc:57:33:f7:52:85:77:65:ce:c7:2c:dc:86:9f:92:77:04:
79:ea:77:b8:d1:78:10:78:6c:f8:a7:03:6d:d7:66:92:0d:6b:
36:a5:dd:5a:f9:01:f6:53:50:9b:ce:77:10:53:78:46:e9:87:
a3:1e:52:46:43:a7:34:f9:7c:f6:af:26:98:7f:1c:03:0a:01:
7f:0c:c9:75:8b:15:c4:f7:0c:0a:37:74:14:62:5c:1f:49:ca:
c9:0f:61:ea:68:fe:c8:8c:74:b0:ec:dd:e0:71:9a:e5:84:b5:
ba:81:b9:2e:7b:24:65:b6:07:d7:55:4d:bf:9b:2b:3a:15:7c:
27:21:03:91:bd:92:fc:31:75:1d:12:4e:40:a0:42:64:18:e0:
43:ab:f8:49:03:a3:b6:5c:e5:6c:77:f5:b8:b9:1e:31:8e:5e:
27:56:3e:f9:32:3f:75:4c:7a:be:f4:22:a1:45:9f:46:90:3c:
99:04:06:aa:5f:87:b4:8a:9e:71:b2:e4:69:85:5a:3b:ef:65:
f3:37:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:12:16 2026 by rpki-client