Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: vA2HYK+zlKiWsIApDFSqJM19v0gxJMdtNyagY2kHJAc=
Subject key identifier: 80:C0:61:F3:6B:E6:53:7E:60:EE:CA:FF:D5:37:6C:63:3A:21:1B:F1
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 019D284DB288A0A51777DF75BDD4B5DD4EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:13 +0000
Manifest this update: Thu 26 Mar 2026 04:01:13 +0000
Manifest next update: Fri 27 Mar 2026 04:01:13 +0000
Files and hashes: 1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=)
2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: ICIf5/IDmcGVWB/fDmEUomqJX2nnE4t+gtKJkvGh/hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b2:88:a0:a5:17:77:df:75:bd:d4:b5:dd:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Mar 26 04:01:13 2026 GMT
Not After : Mar 27 04:01:13 2026 GMT
Subject: CN=80c061f36be6537e60eecaffd5376c633a211bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:af:12:08:bd:74:a4:9e:3a:26:7b:97:69:
d7:6d:47:63:dd:b1:91:ab:dd:43:0f:87:45:57:98:
bc:08:0c:53:e3:cc:b4:02:63:5a:b3:4d:de:dc:b7:
dc:83:95:73:4f:f2:2b:90:2b:af:44:e4:17:50:94:
40:08:12:49:2c:55:9a:d0:58:0d:35:41:43:19:40:
28:de:4d:99:85:bd:75:ab:a6:5b:77:1f:0b:9a:29:
03:50:3a:da:d8:89:f4:2c:ac:3c:17:85:cd:e0:e5:
03:13:e9:f3:05:7b:e4:8c:e3:cb:1b:28:0a:c6:02:
24:38:9c:31:f3:1f:03:77:a9:79:47:87:09:21:86:
af:7f:05:69:ea:e3:13:02:d2:5c:99:d4:07:c9:f3:
2b:04:b1:b3:c0:4a:00:03:9d:55:b2:93:3b:e1:ef:
6e:04:1c:c0:9a:26:03:1e:fe:48:f7:db:9b:84:2e:
a7:44:ba:41:da:be:9a:42:13:6d:03:aa:5e:3d:19:
67:62:e8:1d:fe:b9:5f:10:c8:3c:67:18:df:74:31:
3c:94:f8:0b:ec:71:4f:6f:84:1b:05:10:39:c1:05:
51:77:5f:58:1d:bd:ab:be:03:ac:49:9d:fa:7f:7c:
f7:86:92:55:a9:b8:29:e6:b1:c0:48:7b:8e:11:68:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:61:F3:6B:E6:53:7E:60:EE:CA:FF:D5:37:6C:63:3A:21:1B:F1
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d8:9d:b3:f6:a7:f8:80:f4:cd:de:a3:b0:61:80:8d:d7:9b:
c1:9e:c5:4a:4f:ec:68:f7:02:38:0e:d3:e4:18:c3:2c:38:a9:
ec:79:84:1d:c2:fe:fe:dd:42:ee:87:fb:62:1d:ca:76:1e:27:
f6:42:15:bb:c2:81:5a:cb:05:c5:03:5e:fa:b6:e4:6c:67:92:
3f:a8:fd:d2:6d:92:6e:7e:e4:d1:a0:c4:ea:0a:0a:64:72:a0:
b2:f4:5c:32:86:d3:f6:3c:ac:3b:8d:e9:e8:ec:2d:da:e1:59:
d2:f4:c2:20:8b:e8:bf:8d:d9:80:4f:8f:64:54:d0:6a:1c:20:
58:a6:0f:91:0d:8e:d6:94:c8:e9:66:c8:bd:4f:6f:f7:8a:30:
78:3f:95:33:86:57:87:10:28:96:3b:d2:d7:3f:78:a3:9b:f6:
f7:e5:01:da:3e:ce:20:db:35:1a:8e:94:e2:13:1c:33:03:7e:
43:b1:3f:c1:68:c8:50:47:73:4e:e0:83:98:5f:b0:87:c0:d9:
c0:7c:1e:8a:85:fe:63:86:b9:73:f6:4c:f2:ad:15:94:73:44:
a3:ac:5e:02:46:e8:49:63:ff:76:f7:e5:28:29:dd:c7:5a:7e:
9c:d6:bc:ab:17:7c:22:a7:76:0a:81:bd:0d:75:a4:0a:df:68:
7e:ff:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:56 2026 by rpki-client