Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: oWPyld/tSLL0WAb2dxKSHOzBn+q+HMJetJuIN+1v2p0=
Subject key identifier: A5:B9:4B:71:8D:99:07:A7:7B:48:49:F5:8F:E1:A3:D3:A4:6B:CD:D7
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01A0DC16909A1EB1157EAB9A8B9A4A6D47D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0C2C
Signing time: Sat 26 Sep 2026 05:01:01 +0000
Manifest this update: Sat 26 Sep 2026 05:01:01 +0000
Manifest next update: Sun 27 Sep 2026 05:01:01 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: RorgpzRdYEQq4y/EF67GSKA7kgiBvpdCNf9stl2p8Zg=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:90:9a:1e:b1:15:7e:ab:9a:8b:9a:4a:6d:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 26 05:01:01 2026 GMT
Not After : Sep 27 05:01:01 2026 GMT
Subject: CN=a5b94b718d9907a77b4849f58fe1a3d3a46bcdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:cc:f5:d2:1a:b1:db:85:7d:aa:91:67:c1:
93:1d:7e:33:66:29:f5:6a:b1:29:c7:c2:fd:b4:ec:
ce:5d:02:85:a2:33:55:c2:f9:8a:19:22:74:4f:ea:
12:d3:3d:55:e3:7c:f9:2a:f8:e7:50:58:df:68:26:
62:b1:64:82:ce:4b:0e:4b:fe:43:4b:90:31:82:5d:
3b:42:98:b3:0c:c8:01:b8:eb:3c:a7:51:90:24:8f:
ad:3a:a7:3c:9f:aa:49:93:1a:d1:be:17:ad:88:56:
78:8c:55:74:ce:7f:57:6f:60:b6:4e:d7:4b:c4:8c:
23:25:19:ee:dc:77:e0:f4:51:73:ef:64:06:84:6c:
c7:c1:51:b3:68:90:76:d5:66:45:98:e6:3f:41:b7:
02:48:77:2c:b7:a6:3c:8a:fe:5e:66:bb:e9:24:5f:
46:ca:d1:6e:d0:61:60:ed:dc:4a:00:b7:64:29:41:
f6:a3:bc:e9:83:74:55:5f:bc:1c:fc:aa:80:1e:28:
a5:54:13:cd:29:33:5b:49:25:03:cb:4e:49:0c:67:
81:7f:3e:45:4a:90:e5:09:d3:8c:c7:c8:52:e4:f6:
43:32:d5:4d:3e:ef:d7:4a:23:a8:5c:dd:d6:f6:3e:
a8:d5:84:f7:18:d3:83:08:e1:ad:e4:b9:c6:ff:12:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:4B:71:8D:99:07:A7:7B:48:49:F5:8F:E1:A3:D3:A4:6B:CD:D7
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:7d:70:aa:50:3c:3b:30:11:f9:5a:bb:39:3e:e8:8b:04:
4a:3b:5a:73:25:e6:f3:98:80:b2:f4:60:88:1f:a6:0a:05:e1:
a0:87:42:68:cf:d3:46:1f:15:36:b6:31:50:68:76:86:a3:53:
3b:7e:90:32:cf:a1:f4:f7:67:6a:fb:c7:63:a9:e1:6d:d0:b2:
8a:3e:cd:ba:33:ae:b9:46:7b:cd:72:72:f4:78:3a:32:ce:99:
35:35:44:83:cb:e6:5c:76:f9:2c:fa:40:91:20:b8:63:9b:5e:
d7:ee:17:83:f0:68:5e:8e:b0:32:4a:5a:4d:41:b8:cb:47:a0:
05:6e:0e:fb:02:59:ca:f4:2d:f1:2f:4a:6b:e1:2c:ab:fb:56:
dc:12:c1:80:3c:06:fb:f0:ad:e9:03:f6:14:a2:7e:63:cd:a9:
16:2c:d5:8e:f2:ee:4d:3e:e8:62:00:47:20:0a:13:d5:c6:6b:
5b:24:40:ee:91:ff:a3:be:8d:59:10:2f:40:d9:60:71:6f:41:
b8:a3:ca:75:fb:31:ee:5c:b5:63:f7:37:07:76:8c:f8:c7:37:
5d:51:e4:a3:50:70:4b:86:c7:d2:07:93:d6:e6:08:01:62:d4:
27:7b:53:c4:11:2d:7d:de:a6:95:2d:d1:1a:f6:5a:22:07:ad:
cf:67:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:38:47 2026 by rpki-client