Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: Ysph0zOB0/r6y+HGm/glkJYPWdO6BKzgR9rcQGw+0AY=
Subject key identifier: 5F:F9:DB:BC:97:99:AA:DD:8F:EC:A0:0F:A3:D0:53:C1:10:B6:AD:8A
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019E20FF93BC30D1624672052EF6FE166286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0CEF
Signing time: Wed 13 May 2026 11:01:20 +0000
Manifest this update: Wed 13 May 2026 11:01:20 +0000
Manifest next update: Thu 14 May 2026 11:01:20 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: cm8voyavAX5FxHHlmZ2upYDYrZEXnL98znirNFJAk2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:93:bc:30:d1:62:46:72:05:2e:f6:fe:16:62:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: May 13 11:01:20 2026 GMT
Not After : May 14 11:01:20 2026 GMT
Subject: CN=5ff9dbbc9799aadd8feca00fa3d053c110b6ad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:32:48:48:9e:cf:7a:49:fe:2b:69:c7:bc:
7e:0d:36:44:5f:a6:13:d3:d8:cb:bc:e2:b3:40:7f:
e4:85:38:e5:dc:19:ba:48:99:dc:c2:5e:9c:78:41:
c2:8a:2b:36:b3:56:05:f6:81:aa:af:7e:b2:94:c7:
0a:66:7e:1b:2b:9d:22:67:d6:c0:cb:6b:b5:8a:00:
e1:5a:00:35:8d:0c:4c:d0:cf:45:07:a5:a4:8f:88:
0a:43:87:93:8a:6a:fd:6e:ea:14:40:e0:8e:35:9c:
c0:e9:7e:d7:1e:15:1c:8e:60:6b:31:6d:63:37:c6:
cd:21:35:70:ec:26:ad:32:36:54:85:a8:90:c6:69:
26:de:49:a5:13:82:d9:f9:45:8e:7c:88:41:e3:eb:
63:79:ea:ed:05:b7:c5:12:81:79:88:8a:1b:1f:cb:
3f:b8:99:64:9f:ff:a0:8d:e4:31:9f:09:14:08:19:
5c:16:b2:35:0a:f6:47:7c:06:06:49:8e:80:38:34:
d2:68:01:c1:dc:25:7c:6e:eb:3e:74:3c:8c:07:db:
8c:e6:b6:58:48:25:48:44:53:5d:f2:b5:3e:8e:6c:
dc:2b:8d:e4:55:b9:b5:18:39:27:96:87:23:21:c8:
dc:a4:21:59:7c:9b:c4:2d:35:7b:27:6b:1f:b3:5b:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:DB:BC:97:99:AA:DD:8F:EC:A0:0F:A3:D0:53:C1:10:B6:AD:8A
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:e4:c6:30:f0:ec:30:ba:1d:7b:a4:bd:4a:8c:4e:97:fe:
e3:f4:cc:9e:53:56:97:8d:11:19:52:3a:a4:62:9d:d5:7f:23:
5d:c0:e2:29:25:b6:08:fa:bf:f9:46:73:30:de:f7:d8:15:df:
23:96:40:30:62:39:ee:00:30:09:67:44:f6:db:95:11:de:c1:
43:e9:c9:45:ed:18:3c:69:36:90:ad:5c:4d:62:0b:74:51:55:
42:61:34:7e:c5:96:29:47:d9:01:4b:51:7f:78:e4:bb:47:e4:
7e:c5:e9:a1:57:9c:3a:a9:ee:be:8b:b7:29:e7:06:27:b2:89:
0e:93:89:d4:41:55:ed:58:b9:cc:9b:1f:c2:04:63:b5:a3:8c:
5c:07:32:03:b0:98:7c:2e:9e:61:b6:46:39:4d:72:82:da:5f:
9a:72:0d:d0:39:2e:51:25:ec:04:9d:a0:fa:18:0c:b0:ac:4b:
42:23:96:01:db:18:8f:57:1d:30:6b:41:df:55:1a:41:5f:99:
e3:c9:5b:b3:0d:df:b7:95:31:c0:d5:5a:7c:3d:3e:73:bb:c1:
74:38:28:a1:ff:8a:97:b3:c8:03:ac:f8:a1:b1:93:b5:51:44:
a7:fe:c8:53:90:9a:67:a7:9b:28:34:08:14:55:bb:75:06:cf:
93:13:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:12:36 2026 by rpki-client