Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: D/xZpt0OG1TFEa5veka2/HvDZaX7woFenrdQXEqANqg=
Subject key identifier: E1:B4:79:A1:86:5D:51:1E:4F:8A:02:DB:B2:55:6E:1D:C9:73:6B:18
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 019F9135EC3E04C4F2E28C9FD6EF38F8D0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 038E
Signing time: Thu 23 Jul 2026 23:00:57 +0000
Manifest this update: Thu 23 Jul 2026 23:00:57 +0000
Manifest next update: Fri 24 Jul 2026 23:00:57 +0000
Files and hashes: 1: 75bW-O8JW9bpqCVsnQv-u0YfUJ4.asa (hash: 6ZBAy9NMpontcexIBbvbhfvpcMqQpCB9OdHdBmG3wEE=)
2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: edin/cauI3DA7RCWkE3WqFy6KEMee/CXwqE9VCzukBI=)
3: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ec:3e:04:c4:f2:e2:8c:9f:d6:ef:38:f8:d0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Jul 23 23:00:57 2026 GMT
Not After : Jul 24 23:00:57 2026 GMT
Subject: CN=e1b479a1865d511e4f8a02dbb2556e1dc9736b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:68:7b:45:b5:cd:d5:3b:0b:71:3b:29:73:
92:9c:05:de:a4:09:f5:62:6d:3e:b5:95:69:8b:41:
8d:b1:f2:d5:71:e7:58:f2:94:32:5d:5f:41:95:9e:
ee:ef:eb:88:31:6f:63:7e:d3:65:22:60:d3:7b:cf:
fd:ff:c5:90:02:eb:32:7e:b6:47:98:e6:4b:b5:2e:
af:0f:b7:3a:56:f3:ad:d8:0a:99:8d:f4:c3:3f:d6:
c8:7e:c1:60:89:5e:14:91:b2:4f:93:fb:5c:32:37:
b3:87:90:47:42:56:90:1b:f4:75:c9:b3:b1:d9:8e:
34:9a:08:da:81:a8:e5:c7:28:b3:15:59:59:27:fe:
1d:61:ee:33:48:f3:ea:8f:72:50:b7:c8:2d:62:ea:
d8:18:23:51:fe:ee:45:67:1c:3b:29:a3:a0:e0:7e:
e8:cd:1a:da:e8:bd:8e:9d:c5:13:ef:f0:23:31:dd:
33:c7:9a:51:66:10:cc:24:b0:79:82:f1:10:12:a7:
4b:33:e3:f8:c0:1f:f2:ef:38:6a:e7:98:3f:07:cc:
92:0b:5a:9f:9e:22:37:47:13:c1:8b:9b:4d:b7:3a:
fb:7f:15:49:72:45:35:8c:ac:10:ac:da:76:ec:df:
bb:a4:c3:61:a8:5b:48:34:98:35:19:87:24:42:70:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:79:A1:86:5D:51:1E:4F:8A:02:DB:B2:55:6E:1D:C9:73:6B:18
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:46:ca:d2:ff:41:37:7f:5f:27:ae:2c:99:5c:48:6e:e9:
9a:7c:22:f4:42:b1:7b:c4:7a:79:29:c1:1c:85:84:c4:e0:6d:
7f:61:08:9b:c1:30:c1:db:74:a1:24:33:d3:ec:6a:74:99:d1:
2a:c1:c4:d3:ff:ca:b4:ce:66:27:e7:d8:cf:c2:28:0d:72:30:
ac:eb:0a:78:47:46:b5:41:92:f3:17:00:b9:be:f1:a4:dc:bb:
a2:ad:63:8f:87:62:6e:6d:fd:24:44:c5:49:48:f1:db:1b:2a:
29:41:2d:45:62:f7:61:f1:a6:0d:41:8d:ce:1f:a9:fc:16:fa:
bb:b5:d3:58:7d:3d:6f:01:16:de:6f:30:3a:b0:62:69:27:e7:
ed:c7:32:a7:9c:d8:5e:3e:0b:c9:92:c8:ce:41:c6:a2:59:90:
da:4e:63:eb:99:3b:ba:17:42:85:d4:28:37:c6:1f:df:99:e4:
8b:63:2b:5d:5f:13:ff:d8:7a:21:51:35:75:21:c9:b5:d4:7f:
ac:d7:73:ef:68:9c:ed:4b:f4:21:93:a8:70:53:f6:c2:70:8a:
93:8c:ac:99:35:e4:7e:8b:8e:e3:59:43:80:5b:2a:3c:29:76:
12:75:c1:11:87:91:2f:8f:02:9a:16:5a:c4:2f:f5:cd:69:a8:
a2:f5:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:34 2026 by rpki-client