Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: Ap73IJnnWFYOIR1e5PcUFztyv7pLYlp/iQZhTcBih3Y=
Subject key identifier: 50:9E:C9:EB:0A:C7:28:2C:DD:94:C7:C1:67:D0:B2:68:D9:5C:9B:8F
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019D26CCFEFF758FFC4976C0A66BAD4C4C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 06E4
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: Ni3UO96ZUwrFvhMve+YP6ZKAO+UgNbMbxMoNCpVqFkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fe:ff:75:8f:fc:49:76:c0:a6:6b:ad:4c:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=509ec9eb0ac7282cdd94c7c167d0b268d95c9b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:e9:c2:93:3e:19:b6:b9:fe:39:e7:8f:80:
9d:52:f1:90:02:2a:5e:63:ba:7d:a4:7a:b6:39:ab:
e5:48:6d:13:82:52:d2:e8:e1:8e:48:9f:8b:f8:bd:
54:ef:1c:69:56:f7:38:e3:be:cf:a0:d7:23:51:db:
1a:52:f6:71:c7:70:98:1e:63:73:65:66:bf:0a:80:
67:22:fa:1b:a6:0e:44:9a:90:75:ea:4e:cb:86:3e:
90:07:3f:83:58:b4:b7:c1:9d:73:31:5c:a9:a5:2c:
2e:64:f1:d1:aa:55:6b:e0:b3:45:4e:26:ea:2f:1d:
a7:f4:04:fe:df:39:f9:30:69:dc:54:f5:e7:6b:13:
d8:6c:99:40:b3:4a:f7:a3:85:cb:59:2d:41:a9:b0:
0d:73:7c:0a:51:9e:2b:d9:23:79:a7:de:a0:57:b8:
a0:4f:e1:53:eb:79:f3:3b:66:f2:c2:ce:92:5f:d4:
2d:fd:a4:7f:e6:f1:d8:f5:ef:8c:8a:66:a0:4b:56:
5f:c3:6a:98:5c:0f:a0:13:17:27:5a:e1:e6:5a:db:
ec:76:48:01:8c:28:0c:4a:aa:7a:8e:97:32:2f:ef:
f5:12:ed:d2:1b:4a:b1:e2:e7:64:36:ea:10:8c:4b:
fd:5e:16:df:b7:7d:d5:07:d5:89:e9:48:54:9e:6d:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:C9:EB:0A:C7:28:2C:DD:94:C7:C1:67:D0:B2:68:D9:5C:9B:8F
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:9d:f1:94:36:d4:fa:d5:5c:e0:02:6b:1d:c9:cc:0e:24:
a6:fd:ae:da:b3:78:91:7c:98:7b:3e:bb:4d:56:33:eb:08:19:
b7:28:94:0c:fb:8a:e1:9b:e6:b7:72:8a:d2:a6:24:07:1f:d3:
c6:9b:2f:2a:0c:b3:8c:e3:eb:39:ba:6a:e1:a4:f4:57:4b:a6:
36:d0:9a:1c:21:15:50:d8:85:7c:63:21:69:ce:9d:03:25:c7:
18:2d:d8:3d:fb:e3:21:fd:09:02:09:1a:92:41:40:4f:b1:35:
9e:e7:72:46:ee:e4:da:f5:a4:4e:75:87:a5:ba:2d:7b:24:7e:
da:d9:67:c9:1f:1e:79:fb:5d:f6:b7:05:c9:62:f2:67:ae:3b:
ca:49:84:e4:88:83:c5:52:f9:43:d6:aa:e7:b6:fc:89:8b:b3:
ca:28:df:32:59:aa:d0:0e:5e:12:6e:0e:f5:77:be:53:3f:ed:
6f:1e:ca:a6:4a:05:95:b8:e0:97:84:7f:cc:d7:48:40:38:7b:
4e:a0:ed:09:62:bf:64:cc:bd:09:37:8f:10:a0:d1:76:71:8b:
66:6b:8d:4f:df:06:93:eb:af:9c:6b:5c:35:8f:5d:72:f3:4c:
ad:75:16:44:d9:ac:eb:8a:de:66:3d:71:ba:c6:3d:60:f0:f0:
76:3e:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:24 2026 by rpki-client