Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: FpH10T6RwUPvvcW7sOs0xnWz/dihCWbhNzMTh8QD97k=
Subject key identifier: C8:EA:CD:DE:A5:DA:8A:55:15:9B:41:7A:9E:CB:13:07:81:D8:28:A3
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019D2B175F25AA2D5236AC9549DBC77E78A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 06CA
Signing time: Thu 26 Mar 2026 17:00:45 +0000
Manifest this update: Thu 26 Mar 2026 17:00:45 +0000
Manifest next update: Fri 27 Mar 2026 17:00:45 +0000
Files and hashes: 1: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: fwYGr9fb5BvF5LMfmZnjFiSevORdHJRzHhGsWwQXJ3M=)
2: esJRIVKiV99xgmszXdUIvBUcR4c.roa (hash: oiCTzvqGfHuD5NTI//w9jSaRVTcBCrOg8Oov3qUBvS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:5f:25:aa:2d:52:36:ac:95:49:db:c7:7e:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Mar 26 17:00:45 2026 GMT
Not After : Mar 27 17:00:45 2026 GMT
Subject: CN=c8eacddea5da8a55159b417a9ecb130781d828a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:b3:48:9e:67:5a:aa:db:30:c7:21:c5:6b:
ad:28:1e:0b:5f:9b:36:23:ca:6c:3a:8d:35:b8:61:
fa:8c:b0:d3:f6:3f:49:d2:98:32:e9:a2:88:67:7a:
a1:81:9c:12:44:0c:72:e3:0f:25:dc:fe:68:73:7f:
90:2e:a6:b9:3d:c7:59:5a:0e:47:32:0f:7f:10:dc:
9a:a3:9f:83:41:cf:a2:9f:34:5e:f7:c7:38:ed:b4:
2a:64:22:e1:93:70:dc:33:94:34:d9:75:cf:0f:75:
60:b3:f3:1d:88:22:49:69:23:64:47:50:6b:d1:d4:
86:54:39:db:f9:eb:27:2d:52:7c:08:3b:44:de:f3:
4f:73:e2:ff:fe:df:e7:42:0c:08:25:df:f9:45:74:
af:cd:0a:9a:6d:ed:6c:6b:2d:dd:bb:03:7e:9f:8a:
5e:89:e2:da:ac:ed:60:4a:3c:ed:98:58:28:27:f3:
71:6b:3a:3f:78:05:8d:d1:bd:69:d4:bf:f0:e7:9d:
f9:1e:2c:bb:b5:9e:8b:85:d4:9b:8e:ab:42:f6:ee:
1d:ed:c4:00:37:fb:2e:de:7d:b7:d1:7a:c1:45:53:
c9:26:25:46:fe:a2:aa:a7:69:f5:8d:25:88:9c:0b:
2d:64:02:37:b5:ac:b0:10:21:18:c0:5c:4f:b6:8e:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:CD:DE:A5:DA:8A:55:15:9B:41:7A:9E:CB:13:07:81:D8:28:A3
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f3:d9:59:d5:1b:71:3a:5e:24:dd:2a:d4:4d:1f:c3:d9:ab:
b5:24:16:44:98:55:39:48:0c:49:3e:e6:05:3b:43:31:7a:cc:
30:49:27:b1:45:cb:fa:3f:60:ab:93:47:85:f6:93:0f:c4:54:
4a:2c:19:10:a0:65:2e:1c:2f:80:1a:83:3c:d6:b0:1e:aa:29:
30:6d:70:39:75:0d:c6:4a:ba:a0:04:7c:94:f1:03:2e:80:41:
84:61:c6:fc:b1:53:3b:f0:d1:63:4a:21:bb:48:0a:ee:ab:f1:
8b:61:c1:c7:8a:93:3c:7a:43:fe:e4:cb:8f:a7:f9:96:b1:68:
26:f9:d5:16:5f:c3:ca:32:54:52:dc:a3:25:b8:55:94:6a:8e:
09:09:91:78:d0:a4:8c:24:e4:da:04:17:37:7e:ae:c1:67:15:
be:7c:2e:e0:03:84:78:90:36:dc:9b:fc:3f:40:21:c9:0d:57:
2a:89:16:91:92:5d:e6:71:ba:a9:f3:f5:d1:6e:d3:94:b0:28:
8c:22:5a:43:cc:07:1e:9c:c6:7a:c4:6a:83:67:1a:62:3f:30:
6a:0d:61:a6:d7:c9:b3:56:28:a5:14:68:dd:28:8f:73:4d:c0:
33:e5:c6:04:16:1b:b6:0b:e0:66:b7:77:fa:6d:de:93:c5:b6:
b4:b5:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:31 2026 by rpki-client