Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: D1BqeEOanqJ60pPCFQn/sn28Cl+fYd4rn4JtjPOJirM=
Subject key identifier: 5A:E1:7A:1D:52:59:6E:F0:4D:CD:17:11:CD:1B:68:DC:A3:D0:B0:B3
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 019F9549A644AABCB7DF9AA5DC4591612606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 18:00:59 +0000
Manifest this update: Fri 24 Jul 2026 18:00:59 +0000
Manifest next update: Sat 25 Jul 2026 18:00:59 +0000
Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: pBZ5ccWuIDJ4/sjASqrUCF7yM2urV1y4hzrYfgNtpQw=)
2: luPpvwuddPcCZN1NTiaMni77JHI.roa (hash: DOVqL/1YsJh2/IEMhAiSbVGoLv+4KRJvYubGuGLi8gg=)
3: nk3amjB4e9u8AqZGT3agxIG0ers.roa (hash: izVRx6WqxhkZ+o80/0xAqbErSsGG3hLjIH4cLGS0lDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:a6:44:aa:bc:b7:df:9a:a5:dc:45:91:61:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jul 24 18:00:59 2026 GMT
Not After : Jul 25 18:00:59 2026 GMT
Subject: CN=5ae17a1d52596ef04dcd1711cd1b68dca3d0b0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:fd:61:78:82:d6:81:5f:16:a3:1d:e1:7c:
a1:55:f9:99:c9:6d:f4:eb:8b:77:28:a1:44:fe:41:
ee:16:ad:b6:77:12:6e:b7:da:70:0c:3d:2b:4a:38:
a0:ac:d4:94:18:8e:c8:fd:65:03:51:7e:f6:b9:72:
86:e3:e7:52:49:ad:cf:a3:93:c1:1b:48:e6:eb:c5:
1f:83:d5:db:f0:c1:01:55:91:27:03:5b:ef:dd:d5:
90:71:ff:b6:8b:f3:09:28:14:ff:7b:87:4a:ea:bc:
47:6a:52:51:24:a6:1b:ee:ce:ec:6c:9f:9d:70:87:
8b:52:4d:0a:0f:c3:b6:60:d5:3e:1f:74:78:67:6b:
10:7a:50:ad:8c:f5:51:2e:b1:95:d9:92:4c:23:fe:
0f:24:7f:e2:63:85:59:5f:d1:67:71:9b:2a:00:91:
02:14:8c:f4:6e:e7:1c:d5:7a:0b:d2:59:97:e4:79:
0f:a8:33:15:31:f4:86:3d:b2:70:04:ad:bd:70:99:
59:fe:a2:5e:fc:30:6e:fa:60:87:b6:af:fe:90:8f:
0c:e9:01:b9:04:39:b5:23:d3:0b:8d:f5:37:f2:54:
c9:2a:f3:86:75:99:bd:f3:48:da:c9:09:08:b4:2d:
71:34:a4:45:ba:25:48:73:71:09:bc:94:64:8a:1f:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E1:7A:1D:52:59:6E:F0:4D:CD:17:11:CD:1B:68:DC:A3:D0:B0:B3
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:41:02:9a:9d:a9:e5:65:dc:b5:a1:e4:0a:8f:c8:0b:09:d0:
0f:a8:f4:24:28:3d:35:c7:a7:4d:44:2f:56:38:8d:50:28:21:
e6:51:31:ae:39:12:c5:7b:d6:42:d9:64:62:26:c7:7d:45:71:
d3:16:ee:c1:bf:56:67:e4:c1:3d:37:be:47:8f:49:03:c3:b1:
07:a4:13:29:73:d2:0e:af:d7:5c:6c:57:64:d2:c3:e4:2a:db:
c2:ee:cf:05:54:47:88:14:b0:0b:d5:4d:9b:9e:1a:22:73:d2:
99:c8:b9:ae:37:be:9f:f0:ff:fb:9d:76:4b:64:ed:35:08:b3:
e6:95:25:56:13:8b:2f:9e:f2:7c:9d:dd:b3:28:d6:95:ea:c1:
0f:30:e1:ad:46:7e:59:89:76:8a:77:23:05:05:61:20:19:52:
6a:0b:99:9f:73:b9:1e:f5:df:e3:2f:9a:e3:69:aa:63:f2:41:
b9:e3:84:80:1a:c4:06:14:55:2e:ea:d9:ed:eb:40:1c:32:d3:
1b:f7:d6:81:04:21:c0:3e:c8:bd:9e:a3:29:b0:d2:52:b2:c0:
10:30:45:86:59:40:8b:80:61:44:77:42:6f:76:3b:4a:ef:26:
9f:3c:b2:9e:96:40:31:6e:a6:d0:7e:5b:83:67:ef:cd:aa:f6:
a0:9c:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:16 2026 by rpki-client