Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: cNEZvtfoGuaBWf79KWIIBRT+jTmGu3aqgY4w8dH+v6U=
Subject key identifier: A9:BC:FE:0A:82:F0:C2:13:1C:94:AB:83:14:27:B1:6B:6F:0C:D8:5B
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01A0E098C18522F5C05E637E46A7C5AA21EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 02:01:42 +0000
Manifest this update: Sun 27 Sep 2026 02:01:42 +0000
Manifest next update: Mon 28 Sep 2026 02:01:42 +0000
Files and hashes: 1: AAf9opHVWJgSdG0z23sJPDY_3AM.roa (hash: iVy5buGzTgQUxgbWVG8NGcWMQhFRBdxznjdBNwotVPc=)
2: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: gnV7rXP9EuTIZRKsbgD0WrzCVT1TkNotU0RUsLz2dx8=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:c1:85:22:f5:c0:5e:63:7e:46:a7:c5:aa:21:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Sep 27 02:01:42 2026 GMT
Not After : Sep 28 02:01:42 2026 GMT
Subject: CN=a9bcfe0a82f0c2131c94ab831427b16b6f0cd85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:69:90:80:fe:a7:bc:b9:d9:81:1c:c9:33:
71:b4:b6:75:92:e3:fd:2f:10:59:d2:15:1c:9b:e9:
79:97:ab:52:18:8c:08:92:41:81:a2:33:2c:ad:9a:
f8:67:31:ef:96:32:ed:78:d5:d2:16:9a:55:18:b9:
be:1b:03:98:0f:af:a3:e7:2e:b2:b8:c0:8b:8a:0e:
04:a6:80:85:d6:86:11:4a:01:77:57:65:bf:11:c9:
3b:d6:51:9b:30:a7:ba:d2:70:47:76:2b:26:d7:5f:
f1:b5:06:5a:8f:c6:7d:32:a2:f7:31:ed:cd:e3:aa:
08:32:75:ae:06:be:11:b1:30:e8:9d:68:75:19:6c:
39:80:b2:8f:0b:dd:96:41:ff:25:be:89:df:2d:e4:
8f:b6:ba:83:d4:9b:11:0c:00:3d:66:d9:a6:7d:c6:
30:0e:cc:9a:e1:ab:84:c2:6c:21:a0:d8:1b:ab:0a:
e2:e4:08:4f:53:9d:76:00:23:5f:49:ea:4d:b4:68:
2d:da:18:9f:d7:4b:83:44:17:5d:8c:cf:5c:22:cf:
b4:da:f3:f3:3d:a4:64:73:e6:6a:aa:87:4c:21:5d:
38:37:20:d9:1a:72:1e:0b:a8:f2:6b:1f:a3:11:41:
cf:87:c7:a6:8d:f3:e4:14:ca:60:ff:ad:4c:81:d2:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:FE:0A:82:F0:C2:13:1C:94:AB:83:14:27:B1:6B:6F:0C:D8:5B
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:56:8c:2b:cd:1c:c7:5b:31:5b:f6:1a:41:4c:6b:55:f6:25:
3d:c4:88:3c:d8:5c:64:13:3b:05:10:81:89:1b:49:a9:b4:e4:
d7:f4:96:87:79:1a:ba:ce:d1:99:d1:5b:f5:65:b2:7f:23:6e:
cf:59:d2:05:7f:5b:b8:e9:2e:02:55:82:f7:9e:11:2f:10:42:
70:fc:96:24:42:dc:0a:69:61:2c:80:fc:16:cd:51:5f:31:fb:
ca:8b:61:3b:9c:9e:f3:83:bb:6c:db:19:b9:49:69:da:06:08:
8c:0b:3d:77:1e:b5:3c:6c:e8:7f:9b:46:f6:3b:f8:fd:85:a1:
7b:9b:05:be:92:02:f6:bb:0a:8b:24:de:d7:8e:4f:76:6a:58:
d8:9a:37:27:53:d5:fd:07:ee:67:4a:85:35:fe:39:9f:42:ee:
71:9f:d4:ee:36:03:45:29:43:15:e1:cc:a8:f7:d3:28:f3:07:
b0:8a:a1:47:f8:89:d9:35:d3:98:36:bc:dc:bc:35:27:b4:f0:
d9:95:46:d0:72:7c:9e:65:db:0e:10:4e:c1:67:55:e6:3b:bf:
70:13:c8:0e:24:b7:45:9a:05:a9:e3:d5:44:14:27:85:40:53:
ec:1d:a3:a0:61:20:1b:78:25:c1:3d:15:6c:f4:64:c3:d2:c9:
94:6f:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:35:04 2026 by rpki-client