Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: b/DcGu/i3RKiN4fu+5oYBoIXupUY4gfTraA77f+iU+0=
Subject key identifier: 6B:CF:A5:31:35:3A:D7:A1:C2:86:3A:6C:2F:CC:29:FA:F0:E7:20:DA
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 01A0CA1005B9F0AC617B6568B5CF335C2C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 0430
Signing time: Tue 22 Sep 2026 17:00:42 +0000
Manifest this update: Tue 22 Sep 2026 17:00:42 +0000
Manifest next update: Wed 23 Sep 2026 17:00:42 +0000
Files and hashes: 1: 75bW-O8JW9bpqCVsnQv-u0YfUJ4.asa (hash: 6ZBAy9NMpontcexIBbvbhfvpcMqQpCB9OdHdBmG3wEE=)
2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: 76AV50GIsrXfQnkxkNwgFeWUd65L3ME1IOipj32jkU4=)
3: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:05:b9:f0:ac:61:7b:65:68:b5:cf:33:5c:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Sep 22 17:00:42 2026 GMT
Not After : Sep 23 17:00:42 2026 GMT
Subject: CN=6bcfa531353ad7a1c2863a6c2fcc29faf0e720da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:8d:23:c3:c7:d5:48:00:85:9d:b2:26:00:
d5:68:18:35:77:dd:64:f5:15:1a:2e:cd:6f:56:b6:
43:0d:9f:fe:2e:79:71:92:c0:7b:a9:ec:29:c1:34:
ff:aa:9b:90:67:b2:12:bc:52:7d:74:22:04:05:3b:
3c:66:d8:7f:f4:2a:f2:9e:89:92:af:7d:60:ef:cb:
56:3d:02:bd:12:3b:bd:2a:ce:3d:c0:e6:58:38:64:
0c:85:8b:52:fb:7e:7d:85:75:b0:09:f8:6f:43:d7:
a2:68:d0:9a:e2:a4:e9:29:71:31:c1:a3:93:09:a8:
04:12:93:85:4e:5c:a8:63:2e:47:8e:b1:1f:72:e7:
1d:b1:a3:b3:86:4e:ce:23:e9:c6:e7:34:d6:c0:39:
d5:a9:fa:4e:4c:cd:9c:49:63:24:56:cd:85:25:f1:
5d:67:d8:f8:92:3e:51:64:fa:89:bd:b8:bb:5a:58:
66:11:b5:eb:e9:e3:b2:3f:63:b1:71:b7:9d:16:cf:
77:9e:c2:ce:40:78:d3:58:4d:d7:cc:5b:16:9c:27:
f8:dd:d5:30:c4:20:4e:5d:fe:b1:82:3e:88:fc:75:
1a:62:d9:9f:13:76:6e:7c:fd:82:db:e0:7f:f0:b1:
d2:26:d6:b7:d1:fb:cc:20:b3:64:3f:12:30:10:e0:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:A5:31:35:3A:D7:A1:C2:86:3A:6C:2F:CC:29:FA:F0:E7:20:DA
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:f1:e4:48:3d:f1:91:a5:37:28:9f:ef:c1:7e:e7:06:5d:
9c:70:0d:98:a3:a2:92:dc:af:af:42:b6:7c:46:f5:91:77:6d:
3d:fb:ff:f5:c5:3b:a2:b9:42:e0:aa:48:0c:40:ef:5a:99:e2:
d5:d4:fa:fa:e1:46:b3:38:a0:e9:32:80:30:33:da:71:e4:ad:
a2:3e:97:49:f6:bd:7f:77:4b:da:13:65:4f:10:32:37:11:ec:
6f:d2:08:7e:b0:01:bb:a5:56:c6:47:54:41:a0:59:6c:42:44:
c7:53:d0:ad:7b:23:68:f3:06:52:e0:a2:85:09:ec:92:2e:17:
06:d7:a5:b8:7b:f6:7d:a5:97:f0:5e:21:ff:05:38:ef:6d:0b:
0b:de:62:d6:d5:aa:d3:88:dc:47:04:7b:c3:72:25:cb:37:63:
9d:d5:5f:18:6f:83:7e:18:7a:af:f2:d2:01:08:7b:8a:e6:e6:
5e:2c:4d:c9:7d:69:8d:a0:eb:59:f1:1b:0e:5b:98:46:e0:6c:
26:4a:f4:87:17:9c:1e:b1:67:d1:95:9b:5e:ed:d2:0c:06:b1:
b2:dd:27:f1:bc:3d:2a:eb:0b:c3:c2:e7:fa:0e:b7:6c:28:e9:
ce:01:d0:c7:f3:d8:9f:d8:bf:34:ee:8a:63:9d:72:b3:8b:47:
64:63:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:36:54 2026 by rpki-client