Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: aLw8XohRAGMp2kKGOeqstH0Fyf6hbRbIJs+Lsbq5CKY=
Subject key identifier: A2:BA:2C:A5:26:A8:89:C2:8B:A1:D5:B5:C1:82:CF:19:64:C3:86:CA
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01A0E888DDE0F7E1FC1B17D5F6D733F486DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 08D6
Signing time: Mon 28 Sep 2026 15:01:18 +0000
Manifest this update: Mon 28 Sep 2026 15:01:18 +0000
Manifest next update: Tue 29 Sep 2026 15:01:18 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: jiqo1+8OEXxTd6psdZ5PgwxuSKTJBajjwDKilWC8kVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:dd:e0:f7:e1:fc:1b:17:d5:f6:d7:33:f4:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Sep 28 15:01:18 2026 GMT
Not After : Sep 29 15:01:18 2026 GMT
Subject: CN=a2ba2ca526a889c28ba1d5b5c182cf1964c386ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:52:81:0e:00:36:be:be:d4:4f:84:38:05:
7e:1e:97:47:84:61:6a:73:c5:e3:01:21:fe:1d:35:
50:ba:29:27:bd:0b:c4:d2:fa:55:b0:ea:ac:0e:cc:
d8:f7:ba:e4:4e:19:1f:af:32:ad:0b:cf:f6:7b:42:
8a:88:90:88:40:92:17:33:b2:de:7d:86:b2:b1:34:
17:1f:98:1a:b9:3d:78:c1:c6:73:07:e4:56:c9:50:
df:36:ff:a8:53:25:8d:68:56:24:5f:a0:b9:de:0d:
ea:b1:9e:b8:6c:16:3b:31:60:0a:cd:f8:b0:55:55:
e3:2d:4a:87:cc:b8:d1:ba:05:42:d4:ff:8f:fe:f2:
37:32:56:4b:1e:26:74:ae:cc:42:32:68:94:c8:81:
6f:43:8e:e9:b2:e8:10:bb:ec:4a:20:fe:c9:0b:87:
f3:c9:44:97:d6:b6:29:74:dc:94:7f:41:23:f0:04:
f3:87:42:1f:33:d5:24:78:a1:dd:8b:25:ae:9e:71:
55:d1:5f:21:72:b3:a0:a8:30:b0:c5:08:38:14:f0:
5b:06:25:56:4e:b2:83:63:40:93:db:15:50:59:1d:
72:1c:a6:6b:b3:f9:f6:a0:3e:5c:6d:5b:98:d0:67:
06:f5:bf:f8:29:49:9d:75:cb:5a:41:fe:54:98:c0:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:2C:A5:26:A8:89:C2:8B:A1:D5:B5:C1:82:CF:19:64:C3:86:CA
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9f:57:fc:04:13:1f:cb:c9:93:32:93:91:0e:e7:fd:da:62:
d2:c5:08:84:a5:9c:99:af:16:52:de:de:f7:44:3f:92:af:c4:
4d:90:79:fb:cb:4e:ba:d4:36:b8:87:d9:30:f7:69:bb:c1:2b:
ef:48:aa:5d:8c:40:4a:fa:2f:20:9f:2e:a1:81:0a:6e:f3:54:
bb:d0:18:a9:75:96:ac:b7:a0:88:ae:44:7e:0a:df:9a:3e:cd:
62:eb:6e:8e:b4:b3:6f:ea:fe:bc:53:6e:3e:bd:09:e0:e5:c4:
e6:3d:2b:eb:89:10:5c:b0:89:20:06:03:c2:8a:a9:7a:4d:9e:
6e:df:bb:d6:03:06:72:61:47:36:db:75:7d:a6:6a:25:64:2b:
8f:0b:e8:2a:8a:79:45:a0:da:b4:99:a2:2e:ff:80:cc:41:45:
a7:45:1f:a3:cf:ba:5c:1e:f2:41:e1:14:3e:89:fc:ea:87:25:
65:b4:69:1b:4a:a3:d1:e3:02:9b:5a:cd:0a:44:ba:6f:46:69:
aa:5b:c6:6d:25:d0:d8:4e:6b:45:dc:c5:96:ab:f5:12:ed:8c:
5a:91:65:98:1c:22:23:f1:c2:49:c6:d6:10:ac:39:8d:9f:61:
b5:4f:4c:4e:da:76:e7:49:89:e0:22:1e:79:fd:ef:e2:b2:91:
cf:c5:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:35:17 2026 by rpki-client