Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: RojoxaC82vLWyCqQjLFY5M7Haq0WMiPgkiDyd7z7T4Y=
Subject key identifier: BA:AB:21:BB:3A:D8:16:CF:BE:7E:69:2D:B7:96:D1:3C:B2:82:8B:97
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 019D27A879CA0AADAA1AF73CA195E43E4277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 064B
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: 03j6ust2FRNKlpnD77gFA2A2Nm8.roa (hash: c/t/jvNYvALud0vqh9dV+CjRih2M2dPRGS927xjV27w=)
2: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: y4YYK4i7UO8BUCN7JwzAVtbz9bsNVQx8b1zHDHztGps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:79:ca:0a:ad:aa:1a:f7:3c:a1:95:e4:3e:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=baab21bb3ad816cfbe7e692db796d13cb2828b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:e8:67:3b:88:31:cd:28:45:af:4b:92:56:
c5:9d:0f:ff:9a:f2:af:5f:ad:52:2c:e3:32:76:a0:
ad:91:39:4b:26:37:a6:82:c7:3d:f3:2d:fd:6f:40:
dd:ae:9b:7b:d8:35:8d:2a:5e:b4:c8:02:71:dd:b6:
af:b6:ad:bb:41:d4:d9:f7:81:f0:75:82:51:27:3e:
d4:eb:ad:90:48:ff:4c:cd:d4:e2:4c:39:6a:cd:60:
a1:c3:a7:6d:d2:08:f7:fd:67:f9:32:08:10:42:d9:
23:ad:d0:fe:8b:56:21:8b:bf:e9:02:ea:91:f0:6c:
72:59:0e:34:bf:1e:d5:30:10:5e:63:bc:ad:d0:bf:
77:89:d6:f9:87:2c:2e:24:ec:ed:e2:c2:b8:10:7b:
10:c5:38:2c:26:19:69:19:02:fc:e9:fb:3c:78:24:
8f:6e:a2:38:2c:0b:4f:36:23:c8:ac:2a:64:c5:e2:
0f:9a:45:42:8d:42:08:29:d4:31:de:45:a0:5f:00:
73:87:75:62:c7:79:83:06:c7:44:8f:c1:99:72:f8:
29:72:52:2a:a5:de:a3:83:77:86:af:ba:a5:56:64:
ba:8e:23:fc:fc:a2:1d:96:c7:84:23:61:40:dd:3a:
4d:23:0e:9f:6b:f0:f7:a7:30:f5:33:77:36:3b:c0:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:21:BB:3A:D8:16:CF:BE:7E:69:2D:B7:96:D1:3C:B2:82:8B:97
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:d1:37:a2:46:0e:21:c4:fc:1f:0b:6d:47:04:7d:37:c1:
62:a7:80:1e:44:23:5a:b4:41:e7:b9:d9:44:e4:dc:c3:e9:2e:
e4:cf:f2:7e:a0:4d:4a:0b:1d:ea:ff:12:2d:54:9d:fe:cb:ee:
e1:70:f3:80:e9:44:a5:d3:13:c0:ff:8a:ca:f2:e7:c5:72:42:
b6:ff:4c:dd:20:cf:97:10:0a:c9:2f:a4:2a:19:2b:6e:4a:41:
fc:d5:7d:37:77:dc:83:b6:64:7a:3b:c0:28:b4:3d:a0:e8:6e:
16:77:06:74:3e:47:a3:ee:b1:25:d8:99:ee:d9:31:96:97:32:
99:7f:d1:38:ba:dd:39:dd:db:d6:d9:73:a0:60:e6:21:8e:36:
db:6e:c0:a9:0a:1f:6b:eb:0a:d4:2a:9d:d3:a9:49:6b:20:8f:
c4:76:54:04:f9:cb:3b:ba:41:91:1c:a7:a6:7d:41:94:cc:1f:
55:5d:35:ed:3b:7a:31:5e:1b:bb:72:61:cf:13:61:14:51:69:
b3:88:62:7a:99:cd:cb:4b:99:d7:39:e0:3e:63:01:bd:47:7f:
ff:b2:ec:2f:59:4b:02:0c:3f:8f:af:73:a7:0b:16:50:65:8a:
21:79:77:ac:e7:18:df:df:5a:5c:2f:33:9c:13:1e:21:79:70:
24:a0:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:21 2026 by rpki-client