Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: z2RznQR99vkPtnk6KocgMPYVMVKs7aA2DhNdOEgVj/w=
Subject key identifier: 0F:E2:4C:DC:00:7D:A9:7F:77:24:1D:35:5E:78:0F:2D:22:AB:87:78
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019E1D909CF83C06CA75A3C3715DA952BB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0748
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa (hash: 7xWm5vmFHcwrGZ0rwDT2McSScZ+s+zumGsB6jff1aek=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: vnOvNhDoyTLq1q5DpIAgxd3zSIgpQTwiV8H0zzVr78Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9c:f8:3c:06:ca:75:a3:c3:71:5d:a9:52:bb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=0fe24cdc007da97f77241d355e780f2d22ab8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:e2:3c:69:f3:8d:09:c2:f9:0b:d7:34:d4:
70:51:44:40:ab:a1:e5:33:92:e0:45:92:ba:5b:51:
bb:8c:b8:2c:16:55:49:37:e1:51:67:5b:e2:50:1b:
06:b8:74:13:bf:5b:eb:3f:92:6a:43:4d:77:95:c0:
b8:b0:2e:59:99:36:f6:74:f9:8b:22:98:0d:08:c6:
e5:f0:0d:c2:da:12:f5:2f:d3:a9:a4:fb:4f:0c:5b:
39:13:2d:19:e9:e6:e9:b5:fd:83:84:d5:e5:d8:d0:
0e:b8:e9:73:60:d7:d9:55:1e:6d:37:8e:c5:7f:e6:
a4:04:0d:66:21:f9:4b:ed:b7:e0:28:25:9f:38:f1:
71:a1:48:95:cc:45:83:97:48:40:c9:15:0d:49:81:
97:aa:68:43:63:cc:84:fc:74:38:47:9d:cc:c5:f2:
bf:8e:e6:6d:70:19:7e:e7:ef:ec:dd:16:4d:21:cc:
f6:d9:a7:16:15:d0:8b:b2:fa:cf:46:7e:f5:2c:d6:
bd:bd:87:19:14:b5:6b:ce:d2:94:5a:46:7a:3d:0e:
d9:99:47:47:42:82:df:94:fc:c7:19:1d:a6:41:96:
42:14:60:12:54:85:16:fd:fe:16:13:a7:fc:c1:e9:
93:dc:7d:27:cd:22:a3:75:31:da:01:8c:6d:66:13:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:4C:DC:00:7D:A9:7F:77:24:1D:35:5E:78:0F:2D:22:AB:87:78
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e0:db:a3:0f:b1:d4:82:77:00:10:7e:21:3b:9b:b9:d8:2c:
77:ef:5f:dc:52:67:51:b0:cc:93:33:bd:5b:b8:1e:96:52:5c:
8c:fd:16:9c:ea:a4:38:0d:8c:e3:08:40:b1:ff:d9:8f:e6:f4:
c3:e1:08:a3:3f:15:73:9b:66:9e:cd:76:eb:d7:8c:21:16:9d:
77:08:0d:db:75:3d:dd:30:b0:4e:7f:8d:1c:7a:00:0d:ac:c9:
13:78:d5:2a:86:7a:ef:b8:77:e9:71:48:c3:51:42:ad:87:c2:
74:03:f3:1d:aa:32:d6:c5:29:24:34:c6:1d:f9:f8:d7:d8:cb:
e1:c8:db:73:f1:28:92:04:ed:ee:88:a9:4e:0a:74:dc:0d:49:
cf:9b:2f:05:b1:51:94:24:f0:bc:8b:99:25:91:db:5d:cd:3d:
76:20:86:b2:ed:13:4f:57:5a:38:fd:fe:b4:ed:31:8d:47:b3:
41:25:5c:60:20:9a:50:16:07:45:34:13:c2:a2:5d:7a:00:be:
dc:ba:bf:c8:19:8c:ff:ba:17:54:02:81:1c:27:b8:04:11:5b:
8e:6b:4b:60:c3:92:b5:ec:43:c9:9f:00:cb:df:4d:a3:8d:ab:
96:3b:3d:ef:5d:50:84:48:ae:27:78:86:cf:e7:1d:c8:19:df:
6e:0f:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:31 2026 by rpki-client