Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: YK1IA40DHDoR7rTSsIiMCs36EXouYLJdzp6J9vUcyeo=
Subject key identifier: C1:24:83:30:50:0D:19:6E:2A:9A:64:E6:50:6E:0B:8F:4F:80:2E:6C
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 01A129C3849CFE364E213F2612808D2CECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 07:00:41 +0000
Manifest this update: Sun 11 Oct 2026 07:00:41 +0000
Manifest next update: Mon 12 Oct 2026 07:00:41 +0000
Files and hashes: 1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=)
2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: 98lI2GAytB8rVP6TyWzc64MyWwNk3BvQXBO04dab1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:84:9c:fe:36:4e:21:3f:26:12:80:8d:2c:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Oct 11 07:00:41 2026 GMT
Not After : Oct 12 07:00:41 2026 GMT
Subject: CN=c1248330500d196e2a9a64e6506e0b8f4f802e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:d6:94:96:02:19:de:95:1a:e0:f6:04:a3:
99:ce:cc:96:3e:83:ea:f7:13:55:fd:35:2d:73:4d:
f9:ed:a5:30:1d:89:59:7b:46:bc:e2:14:fe:76:2c:
63:e9:80:0c:84:c7:a2:e7:0f:95:eb:d0:56:a1:31:
b0:05:68:5b:f4:6e:5b:ee:a9:fe:49:59:1f:b2:69:
a0:2a:1c:ce:4a:fe:7a:bc:59:b4:ae:9d:c3:d9:46:
1f:f1:75:12:4a:4b:a6:9e:02:33:77:35:a0:98:73:
53:62:b9:25:b3:e7:12:1a:e3:64:6c:78:54:5c:94:
23:f4:d6:8a:7e:d9:9d:b7:3d:15:c6:ee:53:35:a5:
5d:11:63:d7:e6:52:a7:de:63:26:1d:cb:e8:da:95:
e1:94:82:2e:cd:3f:5c:63:52:cb:77:96:7b:82:26:
a0:1b:d7:c5:93:9c:80:3c:a1:b5:22:04:37:5c:b8:
da:25:73:c9:e7:96:2d:67:95:1c:38:df:c9:d8:42:
af:b3:35:3a:40:9e:1f:0c:c4:a4:97:9e:a6:ae:5a:
f0:37:b2:da:60:c9:d9:8a:e1:0d:cc:8c:d1:d0:27:
70:e8:c8:16:af:82:08:03:41:74:9e:2d:aa:c2:72:
67:01:17:7a:b4:d3:d0:7d:63:5d:d6:8f:6f:ee:5a:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:83:30:50:0D:19:6E:2A:9A:64:E6:50:6E:0B:8F:4F:80:2E:6C
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:f0:f2:d0:4a:fa:60:36:86:54:10:33:fa:d3:dd:7b:aa:
f3:a8:72:26:27:69:e7:db:b5:22:7a:3d:39:9c:ec:95:80:af:
af:6f:0c:62:ee:dd:8a:58:e9:a1:ff:d9:a2:1f:e9:fc:24:cd:
9d:c0:b3:90:13:4f:bb:7b:5b:a6:5e:58:7c:fa:ac:03:29:ba:
eb:a0:b6:bc:d5:13:9a:f7:b8:14:25:4d:69:56:bc:e8:64:41:
e7:88:c5:c6:0c:61:c9:1a:89:f3:af:ec:71:78:b7:b9:25:46:
7e:9d:c8:1e:e5:ee:dd:d3:58:1d:e0:4c:e0:67:d5:d6:12:04:
6e:fb:b6:ad:cc:e3:de:d7:68:65:0f:7f:c9:60:15:83:4d:ae:
5f:a5:a5:05:a5:5a:41:d9:1c:6c:53:2f:6a:17:4e:8b:d7:63:
60:fb:bc:33:8b:b1:07:40:d7:7c:06:dd:98:52:1b:46:77:55:
80:03:13:a8:70:4b:a6:49:c8:1b:9b:98:7c:24:f7:8f:2f:72:
18:4c:bc:c1:7d:ef:9b:bd:48:af:ce:06:01:62:78:90:13:39:
2b:75:67:00:bf:c1:1f:08:58:88:d9:46:74:ae:4c:9e:15:2d:
a0:aa:ce:8b:4d:44:61:6d:0c:f8:23:78:06:10:17:04:17:88:
36:83:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:39:59 2026 by rpki-client