Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: MX/jDNCL15UWXVrrUItDrJlkdtQpnTYrNfQNwdC8Dl0=
Subject key identifier: 6B:D7:97:54:02:D6:3D:7D:58:7B:0F:70:D0:39:B4:B9:CB:FD:03:D2
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 019E1EA2CDCAEC6D43775F9733FBBCD862AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: RPvRzPuXmt+WpA02DHdtQRUGbD/S3/5C0AxqeffR7Iw=)
2: luPpvwuddPcCZN1NTiaMni77JHI.roa (hash: DOVqL/1YsJh2/IEMhAiSbVGoLv+4KRJvYubGuGLi8gg=)
3: nk3amjB4e9u8AqZGT3agxIG0ers.roa (hash: izVRx6WqxhkZ+o80/0xAqbErSsGG3hLjIH4cLGS0lDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:cd:ca:ec:6d:43:77:5f:97:33:fb:bc:d8:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=6bd7975402d63d7d587b0f70d039b4b9cbfd03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:00:4d:09:fb:d7:66:da:27:47:cb:ee:10:
2b:d4:0f:da:bb:66:c5:a8:07:05:e3:b4:d6:9b:22:
34:ff:4a:4e:6e:e3:24:97:37:7d:c3:d3:21:8a:d0:
04:ad:48:25:21:18:29:34:a5:f6:63:89:b9:c6:df:
06:fb:1d:39:cc:47:22:bd:6d:8f:24:30:f7:7c:70:
02:f3:82:2a:59:42:45:1f:aa:ec:28:3f:d5:b2:bd:
13:a8:6c:45:02:1a:6c:d0:1b:f1:03:8f:d7:56:67:
96:08:37:37:03:3f:6b:f1:cf:03:5d:c6:0a:35:55:
71:fa:c6:af:cb:c5:02:27:85:4d:bd:66:63:e9:ab:
9d:35:c9:9f:fb:99:e0:61:06:dc:64:cc:09:6d:0a:
c3:ba:a5:5f:3a:b4:9b:5a:cd:0a:3b:7e:e4:8f:04:
dc:82:69:f1:b3:8e:45:a5:e8:a2:b4:4a:0d:24:26:
d0:c9:32:e2:f3:13:32:e9:fd:46:2f:b0:f1:f3:d5:
5c:38:6f:9b:54:a3:1e:8a:67:c4:db:5f:94:f3:59:
8c:06:3f:91:1b:da:7b:45:4d:73:c2:05:47:02:75:
1a:44:d5:86:c2:b7:2a:71:77:45:f6:fb:b0:95:f4:
01:25:31:0f:b7:01:26:8e:e3:8a:b6:fa:69:7f:4f:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:97:54:02:D6:3D:7D:58:7B:0F:70:D0:39:B4:B9:CB:FD:03:D2
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:88:5c:3e:8a:21:dd:91:51:35:fa:26:43:33:79:bc:d5:45:
84:dd:cc:40:34:75:8f:cb:7e:05:46:e1:12:50:42:bd:f2:0f:
94:f3:9a:21:4d:5d:cf:bf:c8:59:a9:f9:de:f7:00:b3:3a:93:
3b:d1:e1:ee:09:6c:a0:2d:43:b6:fd:6a:3c:68:bb:09:62:7f:
72:c3:47:2f:c9:b5:75:90:19:ca:ad:89:bd:79:e5:e9:4b:cd:
e0:ef:2f:d6:a9:cb:43:70:df:21:1f:32:fb:87:80:e7:78:0d:
f5:d4:d4:7f:29:7c:fc:0e:1a:67:22:f5:8b:67:f8:c6:e6:42:
34:d7:8b:3f:af:bf:6f:eb:56:c5:a0:30:ff:26:45:61:3b:e6:
5e:3c:dc:b0:da:90:be:bc:6d:6f:de:22:d9:54:e6:a0:13:73:
2e:d2:82:10:5c:b4:4b:df:7b:17:6f:0d:85:ce:cd:d0:6c:14:
fd:19:8f:58:45:91:30:1d:46:09:c3:82:62:67:07:d2:21:17:
37:96:db:02:00:0a:2c:b4:7f:1f:e7:41:27:37:cb:4c:77:8f:
06:55:8a:4a:3e:12:bf:86:d6:7a:e0:c7:1f:7f:65:8f:0f:14:
ca:9f:94:b7:0d:9a:57:44:eb:b6:c0:f2:cb:53:b0:79:15:00:
13:3c:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:38 2026 by rpki-client