Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: H3/r8ZqrFz5nT6STp0xMHOT4kGOKfOHqFMjB+e2KiyI=
Subject key identifier: 6B:DE:44:32:7A:EB:8A:32:DE:3C:2D:8F:12:70:C8:FA:D5:BA:49:4B
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01A0DA28BBA3E8E9EB2688AE237F672AA3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0C2B
Signing time: Fri 25 Sep 2026 20:01:37 +0000
Manifest this update: Fri 25 Sep 2026 20:01:37 +0000
Manifest next update: Sat 26 Sep 2026 20:01:37 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: i5tQZpTTQYWOQVuB5l6YjAuFEKU/4f8vri+N0cmq96k=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:bb:a3:e8:e9:eb:26:88:ae:23:7f:67:2a:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 25 20:01:37 2026 GMT
Not After : Sep 26 20:01:37 2026 GMT
Subject: CN=6bde44327aeb8a32de3c2d8f1270c8fad5ba494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:2a:92:a0:2a:b0:c1:90:72:1c:18:62:f0:
ec:47:79:ec:0c:0f:ee:b0:2d:73:e5:55:8f:64:74:
78:ed:e0:2d:69:1b:1b:d8:1e:bd:75:0c:fc:59:64:
19:e1:67:eb:3a:1c:84:83:a9:c4:be:fa:f1:e2:51:
99:40:f6:73:5a:02:d1:0d:7b:b8:e3:1c:52:96:f0:
cd:19:69:36:40:eb:f8:00:f4:38:11:f7:3c:7d:77:
ac:5c:f5:38:d5:2c:ea:45:e9:be:c8:4f:f7:01:54:
cb:0c:78:8f:c8:b8:ce:ed:02:ce:6a:a7:6f:2d:24:
18:87:b0:19:b3:c8:bd:fc:ad:22:98:01:4b:42:6d:
2e:f3:5d:3b:28:58:3b:3e:35:bb:e6:df:fb:91:c0:
b9:58:6d:83:61:61:d7:79:50:32:4a:e6:3c:b8:e9:
64:58:3f:ae:f2:bc:d7:31:79:cd:4b:59:c1:33:fa:
4a:3a:b7:0f:3f:ca:c8:a4:c2:30:39:73:5e:8f:6d:
2f:6f:47:8a:40:d1:53:c4:26:9e:7e:ba:55:98:ed:
ee:02:35:70:c3:71:9c:12:40:04:3b:1d:4f:aa:8b:
ac:25:ba:33:8f:81:d2:18:5c:cd:0e:58:36:0d:22:
7b:e7:d2:44:e2:d8:37:c3:70:d6:e2:16:77:06:a4:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:44:32:7A:EB:8A:32:DE:3C:2D:8F:12:70:C8:FA:D5:BA:49:4B
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:40:78:d4:55:23:70:6e:4b:43:a3:fd:d2:21:dd:a9:4f:
b7:af:39:c0:b4:b9:aa:17:d0:26:92:69:63:87:d9:aa:ff:49:
0a:a9:43:ef:fa:f0:27:61:c3:36:22:d8:cf:e4:ad:ba:45:b4:
e8:f5:a9:e1:a2:f0:63:94:51:ff:29:0f:bd:1f:87:f2:63:ab:
ed:fb:4d:47:d4:09:a8:0b:cb:57:cd:71:5d:42:aa:4b:11:d7:
3a:3e:45:78:9b:67:6e:73:98:ea:fc:a3:a8:9f:9d:7b:1e:49:
89:2e:86:37:2a:43:1b:b8:f3:70:d5:7b:b1:7e:7e:bf:47:87:
12:0d:eb:f1:bb:56:c8:b1:d1:9a:af:89:a1:14:52:db:a6:4d:
a3:bc:5e:37:61:51:0e:bf:2e:49:ea:40:e0:21:1f:9c:ba:db:
75:b4:21:35:d4:06:85:75:dc:20:f6:cb:19:a2:4a:ac:ce:18:
5d:30:0a:c6:ce:c2:7a:3c:9a:7a:c1:f8:e4:52:41:81:ec:99:
4b:24:d5:a9:a2:2c:ce:42:e0:6a:40:76:1c:f6:2a:94:1c:70:
e9:a4:fe:ed:3b:bf:d3:2f:e7:40:52:67:e5:c9:07:aa:07:ce:
04:7a:54:12:b2:ea:75:10:4e:43:d0:a1:94:e1:6b:fd:f4:92:
2c:9d:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:18:24 2026 by rpki-client