Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: l3yXTuC3cZikAb/Gr8veNWwNTMDHtMDCgM7oxRUk1oA=
Subject key identifier: 5D:44:7D:88:4D:AF:46:47:06:8C:5D:AA:54:E8:D8:94:FC:E4:21:B2
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 01A1593069A2AD59593C79C9C5C536DD425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 12:01:47 +0000
Manifest this update: Tue 20 Oct 2026 12:01:47 +0000
Manifest next update: Wed 21 Oct 2026 12:01:47 +0000
Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: 6lznR98dbWeRPrmEpZf3m5XSdd0wNE3p5FalNacKPiA=)
2: luPpvwuddPcCZN1NTiaMni77JHI.roa (hash: DOVqL/1YsJh2/IEMhAiSbVGoLv+4KRJvYubGuGLi8gg=)
3: nk3amjB4e9u8AqZGT3agxIG0ers.roa (hash: izVRx6WqxhkZ+o80/0xAqbErSsGG3hLjIH4cLGS0lDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:69:a2:ad:59:59:3c:79:c9:c5:c5:36:dd:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Oct 20 12:01:47 2026 GMT
Not After : Oct 21 12:01:47 2026 GMT
Subject: CN=5d447d884daf4647068c5daa54e8d894fce421b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:40:8e:7f:30:ae:0a:ab:73:82:ab:ef:e4:
a8:44:92:fd:ec:78:a9:e3:6e:ae:99:90:eb:7a:42:
13:16:ca:d7:74:6b:28:4c:97:5f:12:2f:6f:fe:60:
3d:01:ee:59:a5:d2:62:18:90:59:09:fe:90:f5:47:
68:11:4b:78:1d:d1:18:87:80:19:3f:fc:f2:e6:a2:
1b:da:34:ef:e1:81:65:38:84:05:68:1d:8c:c8:0c:
91:15:b4:40:8a:ab:0e:89:8c:27:4a:6e:ca:89:43:
c0:4e:9c:34:44:f0:08:99:02:bf:d0:0b:cb:ef:8d:
74:c5:b5:65:f1:a6:ad:60:d8:3b:47:d1:c0:c9:5e:
d7:33:ff:65:de:1d:86:15:f1:0d:d6:c5:a4:95:56:
f8:c3:3b:c5:d7:2a:c2:0a:0c:b6:b6:73:53:19:2a:
d6:c0:c5:c6:02:1e:4a:ed:36:23:7a:d9:ba:0c:9d:
85:fb:f1:dd:cc:03:f7:40:d3:43:b2:35:42:2e:ae:
80:b0:d9:eb:22:7c:e2:f7:d3:2a:52:7d:2e:b4:84:
d7:96:ab:8c:16:2b:a5:51:de:b3:2e:a1:8a:80:b7:
45:69:8a:c3:e7:63:91:69:cd:f5:06:1a:ac:e9:cd:
25:24:12:3e:f9:3a:30:83:62:19:de:88:bc:cf:67:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:7D:88:4D:AF:46:47:06:8C:5D:AA:54:E8:D8:94:FC:E4:21:B2
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:17:89:e5:bb:37:9d:33:4f:8c:86:ff:7f:d8:76:20:22:
41:5d:b1:b5:bf:8c:a5:db:59:67:fe:24:fa:b7:7f:d3:7d:ac:
bc:1a:a7:18:ec:a8:ef:66:b3:f3:1a:9d:32:d0:96:87:1e:bc:
9f:13:38:a3:e1:34:66:d7:d3:e1:47:30:5a:93:0a:10:07:05:
45:c2:87:a7:c5:18:3c:84:6a:a9:f6:6a:35:b4:cb:78:95:72:
b4:73:33:de:cd:80:2b:83:aa:5b:de:15:24:e7:5b:e1:a9:5f:
86:e3:a7:a3:ff:8f:b9:0c:22:2e:5a:eb:37:4f:68:a0:11:73:
6a:c9:fa:90:ab:5b:83:6a:85:19:b5:34:a5:2d:3e:cf:1d:fc:
cf:b2:c2:a1:18:58:91:49:62:9b:72:59:80:d9:65:c8:cd:89:
19:e3:7d:e0:dd:91:c1:f4:19:ec:00:cf:fe:e8:25:65:e6:c1:
38:56:86:c2:38:98:d3:3d:fe:d3:8e:b8:a6:54:da:b0:dc:db:
dd:d7:b2:c7:49:08:70:46:67:f2:7e:60:44:7f:49:2e:5a:24:
a8:3c:a2:99:3a:c6:1f:2c:de:07:30:5e:a7:f5:16:da:da:e0:
e1:d9:01:b0:9a:e5:3e:c8:b4:23:41:8e:81:c9:31:d1:c1:70:
a8:e6:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 17:55:15 2026 by rpki-client