Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: ygcEskrFrth6JmUqupsRC0wSFF+2XrV+GF96cz1F2Lo=
Subject key identifier: 24:DF:D7:51:69:71:40:75:E9:E5:1B:94:DC:7C:52:0B:7D:13:D7:7D
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019F95B6EC92D5B848D9B50691F59635EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0DB0
Signing time: Fri 24 Jul 2026 20:00:20 +0000
Manifest this update: Fri 24 Jul 2026 20:00:20 +0000
Manifest next update: Sat 25 Jul 2026 20:00:20 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: DOP0leeNvxRx9zM4ZxzoPW59h+iyNixu4lBm70+zXck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:ec:92:d5:b8:48:d9:b5:06:91:f5:96:35:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jul 24 20:00:20 2026 GMT
Not After : Jul 25 20:00:20 2026 GMT
Subject: CN=24dfd75169714075e9e51b94dc7c520b7d13d77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:e5:d8:8f:a3:c9:bf:38:d6:8f:af:86:b9:
89:d8:01:77:a8:26:e8:af:9f:50:05:6b:8f:99:da:
ad:45:e1:b9:f4:ab:eb:af:35:03:07:16:2a:8e:ba:
53:3f:73:ab:83:f7:a4:93:5b:ae:70:48:f8:ea:fd:
f4:eb:ae:16:b4:46:d8:97:55:68:b0:28:81:b1:26:
71:75:cc:24:c9:aa:88:fa:a7:f9:cc:8a:12:c7:75:
c3:72:d1:bf:fb:d9:4b:80:ba:e3:b5:9b:6a:11:0e:
36:34:12:b6:f7:e6:f7:18:65:6e:01:c4:d8:c3:a4:
64:08:12:8a:37:40:42:a1:23:cd:9b:17:04:04:43:
05:ac:82:7e:fe:6a:48:0c:78:39:6f:70:f9:79:f8:
2d:ee:15:1f:94:59:26:77:48:a2:d4:e7:70:13:ba:
c1:c0:c2:64:60:16:f0:c5:ef:52:82:70:fd:7e:e5:
23:c5:1a:2a:5e:66:6b:0a:4d:a6:f8:cf:79:fb:e3:
ca:41:f0:95:5d:8b:56:08:ff:3a:f9:44:4f:f8:9d:
ca:97:bb:21:80:50:f8:9f:2d:e2:fb:93:65:f0:e7:
26:f2:e9:d6:7c:7b:cb:a5:f8:03:4a:04:6f:42:00:
08:76:35:2b:86:9c:04:48:85:4b:13:0a:85:89:e7:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:D7:51:69:71:40:75:E9:E5:1B:94:DC:7C:52:0B:7D:13:D7:7D
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fe:87:b8:a5:1e:5f:f4:27:7e:26:ef:71:d0:af:1e:0f:4b:
17:15:52:23:12:aa:be:08:ef:07:72:3f:92:54:5f:4c:a5:4e:
93:a3:34:3b:8e:0b:94:49:ea:f8:be:03:e0:af:24:13:09:b9:
45:56:90:80:5d:17:37:47:b9:be:7b:7a:6e:6c:0e:9c:6a:ce:
cd:54:f2:b5:7a:17:c9:d6:d3:cf:47:b4:11:a2:f1:0a:01:ef:
50:27:cd:47:c9:ac:1d:c0:20:5d:3d:2e:35:56:49:9c:47:26:
fd:6b:eb:f8:44:26:9b:ff:f1:7c:0d:5e:8f:6d:fb:5c:b9:20:
7d:b9:16:57:bf:d8:04:7d:c9:da:65:8d:bd:f8:d0:6f:e4:49:
a6:87:8d:7e:e6:32:c8:99:08:9a:c1:5d:17:21:3e:00:93:4d:
ca:2c:93:38:48:65:d0:9c:84:6e:50:c7:92:fc:a0:39:f3:27:
65:0c:42:58:6d:40:cd:64:d2:fc:4d:99:94:de:2d:3b:5c:b8:
aa:71:14:c8:a5:cb:61:3b:69:9a:02:03:6f:f0:64:9c:5b:db:
7a:49:b4:79:42:48:5b:09:88:0f:1b:aa:48:4c:c4:5f:03:8e:
9c:7e:d0:6a:0f:2a:60:98:38:da:e6:ec:93:c5:c9:18:2d:21:
83:3f:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:45:30 2026 by rpki-client