Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: 0srUMcHV+rdp5JHcc5jKxvlXODoRE5Ut2mfotVHUtU4=
Subject key identifier: EB:F6:79:78:3D:98:C7:C1:31:E4:91:78:64:12:F1:A8:2A:8C:3D:D6
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 01A12F20FAC4B5A1ABB0EC7679E88FE3821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0E84
Signing time: Mon 12 Oct 2026 08:00:52 +0000
Manifest this update: Mon 12 Oct 2026 08:00:52 +0000
Manifest next update: Tue 13 Oct 2026 08:00:52 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: XHcvXfbLEkIv6cNxj4AB+z9Sw4Cqvkk5FzmzZtqI7/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:20:fa:c4:b5:a1:ab:b0:ec:76:79:e8:8f:e3:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Oct 12 08:00:52 2026 GMT
Not After : Oct 13 08:00:52 2026 GMT
Subject: CN=ebf679783d98c7c131e491786412f1a82a8c3dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:c2:d9:f6:e4:65:29:13:34:11:2a:55:c5:
6f:d7:8e:63:8c:48:dc:6a:62:7b:69:dc:c4:74:56:
53:aa:37:85:92:04:9b:d2:bb:71:5d:7e:3e:66:ed:
78:be:58:3a:c2:d5:94:94:7e:c4:70:38:ea:2a:24:
42:85:c4:cb:75:e8:5b:44:65:47:17:e9:ce:f4:7f:
df:d0:b7:7c:16:0b:77:b6:60:77:32:8e:7f:8e:75:
d0:88:c8:cc:f7:4d:05:7b:d4:d2:cf:14:ab:dc:92:
9a:c4:39:04:cd:f3:e8:9c:b7:e0:52:03:56:b2:d6:
86:d0:ec:7f:ad:af:cd:4a:4c:31:28:b8:ec:a3:58:
1d:40:da:17:6b:67:50:10:ef:46:82:ac:ae:76:cf:
fd:55:2d:be:41:56:34:9a:e4:83:3c:5b:33:86:8c:
73:e7:7b:fc:4e:90:a0:fd:d4:a2:e4:31:b9:86:bc:
bd:7f:6d:c2:71:fc:4c:e4:1d:8b:ca:15:28:35:d2:
d3:60:ee:26:a5:41:ce:93:b0:3c:a7:ed:7d:94:f8:
5a:ed:51:74:bf:ca:6c:0d:c2:d8:f0:e1:06:c4:6c:
d6:9c:c6:85:c5:64:24:d4:dc:82:74:9b:ed:69:0f:
6e:41:93:e1:de:46:40:67:06:ab:89:7b:88:8f:e6:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:79:78:3D:98:C7:C1:31:E4:91:78:64:12:F1:A8:2A:8C:3D:D6
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:ec:c4:c0:d2:e4:72:af:e0:d5:15:48:fa:1f:03:3f:f8:
1b:b3:58:e8:53:d2:65:d5:fb:3a:8b:3a:54:c4:0d:a7:f5:9c:
cd:9e:f9:55:f2:f7:60:80:5b:95:1f:a2:00:59:6d:fc:ed:fa:
97:71:5b:a2:e5:5a:b5:56:26:0d:91:49:31:3b:ed:a0:a6:19:
19:1f:06:9b:c3:68:70:8c:ca:f2:1a:c7:52:ab:57:85:5e:f2:
27:ef:cb:26:61:0e:01:49:e7:1b:2e:1a:f9:42:de:08:80:39:
c3:70:51:ad:25:60:95:9b:2a:e8:80:56:e7:c3:38:44:7c:d1:
74:a5:e7:57:cf:bc:85:da:52:48:cf:8d:c1:37:70:52:25:bd:
ba:d5:4a:40:28:1d:fd:83:1e:c2:1c:aa:41:a6:e9:71:3a:9e:
5b:e4:db:f9:27:9d:7b:96:a9:96:00:43:57:02:ad:79:4c:5c:
d7:36:9c:15:65:e9:e7:52:41:a2:07:af:3d:12:c2:56:e7:5f:
3d:52:40:29:f4:ae:4b:ea:6c:5b:8a:49:25:49:d1:58:eb:95:
c3:94:9f:ed:57:61:da:27:54:b5:43:0e:18:c4:76:8c:64:04:
00:eb:09:c2:23:5c:0a:cd:80:0e:4f:64:0b:58:37:12:7b:b6:
54:36:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:42:27 2026 by rpki-client