Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: AbaX7m+GF+5H8fnkPDJ2ZDB3uI4ronZJxqwAcsdp3Uc=
Subject key identifier: 5F:D6:E5:27:C2:D7:2D:30:22:D4:D0:EF:3B:B3:4C:B1:B0:2E:DE:6F
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019F92EDA3DFE95B03F8F4099D71AD2B976D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 07:01:15 +0000
Manifest this update: Fri 24 Jul 2026 07:01:15 +0000
Manifest next update: Sat 25 Jul 2026 07:01:15 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: LsbL+lXyGkyWnI4X6bgcoT3lmasdaNBNy0opO+FpUL0=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a3:df:e9:5b:03:f8:f4:09:9d:71:ad:2b:97:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jul 24 07:01:15 2026 GMT
Not After : Jul 25 07:01:15 2026 GMT
Subject: CN=5fd6e527c2d72d3022d4d0ef3bb34cb1b02ede6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:f8:e9:2f:28:9d:ec:20:0b:57:0f:07:cc:
b3:7b:21:d0:a6:0e:21:1e:a7:40:d9:46:7d:50:ae:
e6:10:c1:19:84:da:32:7a:b5:1f:36:8a:25:87:48:
76:4a:55:9b:ed:5f:ea:cf:04:a8:7e:85:d5:83:bd:
bd:c1:b6:a5:7e:cb:4b:b9:f9:6f:f1:cb:c8:2b:cf:
c1:b9:87:c8:76:cc:59:0d:97:67:46:a4:e6:c9:d4:
de:46:d1:32:9b:95:e3:aa:e7:40:59:80:ed:10:41:
e1:d7:81:03:53:55:73:08:5d:bc:af:d2:32:97:2c:
51:52:85:36:d8:c5:9c:ea:fc:09:39:e3:cc:f6:8f:
75:2e:63:c5:bc:e6:27:92:b0:f1:bc:6f:de:30:77:
9b:38:d7:5d:96:9b:0e:17:fd:2b:02:3e:73:66:3e:
cf:8b:4e:85:ba:8f:90:7c:a0:af:6c:3f:39:08:1a:
4f:9c:b0:0e:06:8a:bc:4c:8d:15:a5:f3:dc:ef:15:
0c:f5:5f:10:01:b6:00:ce:32:0d:4a:00:40:37:98:
2c:25:2c:3d:98:36:6a:fd:fe:cf:4d:36:35:18:9a:
0e:2b:37:6f:dd:96:13:13:7a:ea:38:52:6d:5a:1f:
11:be:97:9e:d5:c2:3a:56:d0:ab:02:f5:9f:3f:7f:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:E5:27:C2:D7:2D:30:22:D4:D0:EF:3B:B3:4C:B1:B0:2E:DE:6F
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3f:cb:60:1e:ea:db:26:06:44:9f:1f:68:e0:98:76:6b:02:
8b:82:3b:2b:1e:5f:d6:ad:70:43:c7:e8:28:55:ed:e5:cc:38:
a8:c5:7b:73:3e:8b:88:e0:83:e1:06:1c:c8:cc:f8:8b:76:9d:
9a:ec:27:87:a1:9e:31:c1:ba:6a:8e:65:e6:39:06:e8:41:e3:
66:7b:29:bd:e2:ef:20:92:d9:ee:10:45:22:fa:7a:7a:07:8c:
2c:45:31:41:dd:7d:6f:7b:1b:ee:0c:ac:08:8b:c2:6e:28:cc:
f9:d1:b0:b8:66:78:3e:a5:e2:70:b4:64:86:18:95:20:c4:28:
bf:b6:31:61:1f:b9:11:e9:6b:2e:3c:6f:cd:c2:c6:2d:96:45:
98:87:09:02:b6:0a:c7:95:ea:87:1b:a1:e0:93:66:b8:65:31:
14:b3:12:9d:79:b7:8e:7e:a0:e0:9a:24:78:12:6e:a3:b9:ef:
38:23:34:06:5e:72:a0:c8:e3:e6:5e:be:20:ed:97:54:d4:76:
56:b5:aa:a2:f0:d1:2e:c1:3e:70:bc:91:11:5d:66:4f:f0:3d:
4e:52:40:3c:5e:fb:b4:c0:af:22:99:8f:ee:a8:32:76:83:cc:
a2:86:a8:57:29:d0:71:6e:97:0b:b7:e4:10:9a:e9:25:2d:a6:
ae:8e:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:13 2026 by rpki-client