Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: 8G94jAaGSxYZiLIQNES1pgc+ElBbuU481I0rjoCq1dg=
Subject key identifier: 23:FC:0B:40:D6:2C:9E:86:13:F9:B1:22:8D:97:FA:F8:27:BF:BB:0F
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019E2136A7884FDFF70A0209A57BD2B07A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 12:01:30 +0000
Manifest this update: Wed 13 May 2026 12:01:30 +0000
Manifest next update: Thu 14 May 2026 12:01:30 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: B/rNk7EOFg3K03SC949Bmoxg9AWfrYwsFni/nxj+DQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:a7:88:4f:df:f7:0a:02:09:a5:7b:d2:b0:7a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: May 13 12:01:30 2026 GMT
Not After : May 14 12:01:30 2026 GMT
Subject: CN=23fc0b40d62c9e8613f9b1228d97faf827bfbb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:90:c2:42:99:ab:0e:1f:a3:f1:0a:63:1f:
8b:49:93:6d:2c:e3:ea:81:36:db:12:19:2e:10:a5:
c6:ed:cc:62:44:88:4d:9c:50:bc:c6:86:26:82:e6:
a1:75:09:d9:41:62:97:c5:82:7c:66:ae:6c:3b:c2:
23:8c:d5:53:cc:60:2e:59:92:d4:03:7d:7d:3d:52:
33:6a:98:cf:03:e7:fb:a8:c2:5b:cd:88:2e:e4:72:
85:df:88:9f:c1:d5:79:45:3e:43:79:c3:e3:29:74:
22:4c:a1:91:6f:e8:2f:1d:67:3a:0d:fa:13:07:c7:
84:25:66:53:2e:0f:c3:9c:ea:1f:6d:b1:01:99:a2:
f1:17:13:e8:b0:03:04:8e:21:a3:3c:c0:3f:15:46:
cc:85:03:d1:12:74:44:56:0b:6e:8e:2d:cd:68:b3:
d8:81:33:cd:30:78:69:e3:2f:1c:a6:af:e0:e1:90:
08:26:97:ae:47:54:59:a8:df:06:ec:02:8c:af:81:
d5:7d:64:81:82:c2:6c:81:58:7f:45:9a:53:36:db:
6a:fb:87:10:80:0e:92:22:79:ac:c0:92:db:90:be:
d1:2d:8d:6e:2d:5b:4b:49:6b:13:4c:fc:c9:64:ab:
67:56:eb:ea:55:c8:a1:b5:7c:d9:e9:ce:dc:04:5c:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:0B:40:D6:2C:9E:86:13:F9:B1:22:8D:97:FA:F8:27:BF:BB:0F
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a1:3e:5f:66:3d:b8:6b:f9:96:61:b3:4e:0a:32:db:ce:aa:
fd:1c:73:88:ba:be:db:89:55:4e:5d:4e:a7:49:55:c2:1b:7a:
cd:3e:03:6a:a1:a1:b3:af:b5:5e:a8:00:87:5a:c2:49:c9:c5:
64:a4:a9:ea:58:e5:c7:7c:a1:43:4f:80:6b:48:db:ab:e6:4d:
7e:e5:22:56:b7:6d:83:ff:99:c7:ca:f2:4b:3b:3b:de:4d:e8:
a8:9b:09:7f:a2:1f:8b:ee:d5:9f:ea:8e:3a:0a:c7:03:c9:99:
76:31:5e:59:82:16:bb:40:a4:51:25:98:ad:40:ea:c5:4d:d2:
81:44:8c:43:59:ce:61:db:2f:25:f2:b2:07:df:be:24:48:e8:
ca:25:4e:c8:96:00:d1:d8:1c:8f:aa:9b:b6:b1:b7:0f:fc:d9:
df:00:a3:45:65:56:34:19:af:be:04:b8:46:4f:0f:39:47:cf:
79:fc:42:26:d3:90:19:73:06:43:32:b2:ee:74:1e:71:39:6e:
68:b8:6c:83:49:5b:d4:cc:11:c5:78:20:62:60:04:4e:7c:48:
79:75:4e:72:cd:be:9a:4f:5a:ad:75:f0:b1:f6:97:30:aa:b5:
21:4d:67:cd:15:0a:43:b8:eb:60:34:16:08:a5:ac:16:34:2a:
c6:95:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:15:01 2026 by rpki-client