Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: rZbdDXvuK5VOrIiEGN9Ebp3HeDn72FXk/2Sw0Q4pTfA=
Subject key identifier: C1:FE:CC:56:8E:60:0E:04:9A:E7:42:2D:31:6E:80:CA:1A:B7:B5:6F
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 019D2772E2F6B240E5183B7FD5BEB256113D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 112B
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: 1-yZ40ZIR1zrvdMavNgVP-U3GRkw.roa (hash: rrotFnvFJZjY/IZDrZ/Q8wCEoprdXyBMiaME4EtjYZ8=)
2: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: lAcWZtDVXzJi94o8OIeyLT1JdaOzxrcwWUPPZLPGsC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e2:f6:b2:40:e5:18:3b:7f:d5:be:b2:56:11:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=c1fecc568e600e049ae7422d316e80ca1ab7b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:96:a9:55:f5:e8:3c:9c:52:95:18:8a:b3:
1b:9a:94:7c:39:59:19:24:48:30:0c:9a:1a:ba:e7:
d7:01:15:6a:6b:a4:ce:7f:00:bd:01:fb:0c:2b:63:
41:f5:a5:bf:92:cf:ef:32:9c:ac:ff:15:c4:3f:8c:
97:21:16:08:6c:5c:82:16:cf:19:c8:dd:dc:c6:e5:
ce:33:71:48:f8:7b:86:67:92:ed:70:80:ca:1e:d8:
20:d0:1c:69:70:8f:31:be:fa:1a:e4:ef:66:53:0d:
d7:36:7e:79:07:55:1a:1a:9b:98:99:d8:c0:2f:6d:
f2:c8:18:6c:51:02:d0:87:08:82:31:6c:b2:93:31:
13:ac:35:a0:03:26:ef:c5:83:f8:28:6e:f7:3f:60:
62:09:b7:b7:77:b7:2d:c9:b0:0d:97:ae:c3:9b:4f:
64:31:9c:aa:36:83:b5:1d:3b:da:f0:bf:32:ce:61:
99:31:62:fb:4b:96:0b:a8:d3:9e:c0:f1:e7:cb:f3:
7a:61:dd:eb:ed:60:bd:d6:54:ad:12:71:fe:52:7f:
18:1b:ae:02:45:07:d3:ef:a9:3a:40:00:9b:12:20:
6c:de:24:67:33:24:ec:55:59:50:28:bc:e2:ce:62:
0f:65:26:62:8f:69:6b:a5:22:43:86:4f:d1:2b:cd:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:CC:56:8E:60:0E:04:9A:E7:42:2D:31:6E:80:CA:1A:B7:B5:6F
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:54:a8:47:28:28:f9:d7:f6:8b:36:2d:ca:89:10:08:0f:
81:6a:78:64:2f:b5:b2:7b:db:df:c5:20:83:f1:55:d7:54:54:
d9:ed:e8:fe:25:a8:5a:4a:94:1c:8a:07:d6:c8:64:f1:84:e2:
75:b9:94:81:b9:90:f6:b6:3b:5d:a4:f0:08:bb:b3:79:a3:68:
6c:74:cb:4c:c4:32:65:fe:6f:16:f7:36:e3:44:0b:0b:7e:7e:
30:13:c2:c5:c7:e3:fe:3a:ee:d4:83:5c:25:78:34:e2:74:3a:
fd:ae:e8:b9:b9:bc:e0:67:51:22:b9:2e:90:e7:3a:0b:34:95:
d1:e1:2a:e8:15:44:7e:9f:db:78:be:07:08:63:69:08:61:d4:
ab:7d:c1:bf:02:7f:90:16:0f:71:b8:9c:f2:9a:7e:38:1d:9f:
0e:19:31:a9:3f:f8:26:ec:67:cb:3c:57:d3:48:e5:d4:bf:02:
05:a4:17:16:b2:4a:a3:d4:72:ab:68:44:28:04:21:a5:c9:5e:
a9:b0:e0:28:a3:2e:27:9e:88:d5:08:26:23:fe:ee:4b:f6:cf:
d5:60:f7:0c:f7:09:b9:07:e3:c2:67:85:27:ed:ef:fa:c4:dd:
c3:bb:7f:1d:db:10:b2:3a:1c:46:e3:98:0c:0f:af:c2:c3:6e:
ac:3a:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:13 2026 by rpki-client