Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: Y2K+cULOVqlSuhWBCtTZaUe3WG1dUWBHKvTM9MrvpLg=
Subject key identifier: 30:1C:3C:BC:A4:42:37:D6:3D:37:69:6A:FB:0F:52:DF:3C:1E:A8:2C
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019F92B6A55F459E43220BF36FEFE061745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0825
Signing time: Fri 24 Jul 2026 06:01:11 +0000
Manifest this update: Fri 24 Jul 2026 06:01:11 +0000
Manifest next update: Sat 25 Jul 2026 06:01:11 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: hA1NFPh18lVH1ldrg2P5cS+38qt2yssUqyA0xOaOnBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a5:5f:45:9e:43:22:0b:f3:6f:ef:e0:61:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jul 24 06:01:11 2026 GMT
Not After : Jul 25 06:01:11 2026 GMT
Subject: CN=301c3cbca44237d63d37696afb0f52df3c1ea82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:1e:59:53:1f:a4:70:7d:94:27:15:23:4e:
25:2b:ff:f4:10:3d:29:9d:8e:e0:3b:92:6b:d3:72:
cb:ab:63:ef:42:8a:e4:10:7d:bf:09:43:c5:f3:63:
72:bd:a6:64:10:66:80:a6:bf:d4:ff:5c:6f:99:4c:
7d:f1:98:9d:de:2a:3a:28:b5:45:61:df:30:34:e6:
a1:f2:ed:46:70:a4:03:d3:f3:38:05:49:56:6f:7b:
77:46:96:ae:c7:48:cc:a3:a8:a5:22:f2:e4:ec:21:
84:f2:0d:1e:e4:56:fc:4d:ae:df:1a:ee:9b:35:7d:
95:37:4f:20:8b:fc:35:3a:7e:48:88:d0:b6:ff:37:
29:7a:f5:82:35:ca:ad:14:f6:64:7c:c5:19:05:47:
ba:fb:8f:2c:87:37:fc:63:2e:d0:ad:8c:63:8c:58:
4b:80:03:4a:a5:10:33:b9:a1:9f:7e:5a:fb:41:7c:
c5:24:1c:37:d0:2a:38:25:47:50:d0:2a:9f:74:b8:
60:b9:b1:ae:de:b8:04:a3:fa:da:8c:ad:35:28:68:
e8:af:bb:16:0d:47:57:78:e5:24:5e:d9:bc:44:df:
61:e2:17:b2:aa:c7:45:5b:db:d1:c0:72:8e:0d:95:
55:d4:8d:07:34:fc:cd:a0:62:a3:16:13:f1:1f:7e:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:3C:BC:A4:42:37:D6:3D:37:69:6A:FB:0F:52:DF:3C:1E:A8:2C
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a4:8e:69:7d:7d:41:57:2f:b2:20:fd:2a:28:86:ae:6d:e7:
3d:3b:78:d3:91:12:2c:cf:bb:21:55:27:15:5f:0d:2e:d5:0c:
7b:51:1e:e6:52:53:7c:00:25:3b:e2:94:a1:95:f6:d8:26:be:
c4:ef:3e:38:00:fe:9b:14:7d:79:86:ca:26:4b:79:69:46:f5:
f5:fd:3a:b0:5c:0e:a4:4c:e2:e1:e8:82:98:3e:18:45:49:ce:
c9:c7:e7:c4:6d:f4:88:a4:21:9e:b8:94:cc:b6:75:e7:79:76:
3e:00:5e:68:e8:db:ec:63:a2:0b:6e:52:25:5a:b4:33:9e:db:
e1:5e:50:18:95:e1:4c:c1:9d:dc:90:48:54:c7:f1:50:b1:ee:
3e:5c:2c:65:68:59:ed:e7:a3:17:d9:e4:a1:d3:fc:e7:ab:7a:
b1:57:d7:12:41:68:b8:13:ae:3e:00:95:1c:2d:5a:24:6e:a7:
cb:de:a0:0e:8a:de:37:8b:56:b3:6d:7d:9b:7c:0b:c8:a0:9b:
44:96:3d:4d:08:af:0d:84:ca:0f:f2:17:96:7f:b3:98:cb:d2:
e7:09:ec:65:29:62:f2:5b:3a:61:46:6f:dc:e9:06:78:e4:e2:
8b:a3:39:d9:bd:c0:3a:64:5f:6d:3d:78:59:ec:3b:6f:dd:9d:
75:44:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:08 2026 by rpki-client