Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: Js8Eu9HDMQhK1HZcetpuwdvaKCkY5cg2PUnmYqh+0WE=
Subject key identifier: 59:B4:5B:F6:29:F6:90:FD:21:22:26:D6:0A:12:3B:AC:CA:97:1C:E5
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019D9C2D18E3A8EAC61706E83F4C788B45F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 0880
Signing time: Fri 17 Apr 2026 16:01:34 +0000
Manifest this update: Fri 17 Apr 2026 16:01:34 +0000
Manifest next update: Sat 18 Apr 2026 16:01:34 +0000
Files and hashes: 1: F1sJih0zQrKGljsnOUmtg-YLfWM.roa (hash: jdsNnWcmvKyI8OLsL4MHN8saAAU5viDugMttRK7ykl4=)
2: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: 6m+uIdscRvvh5oTIkSkzJoFU1PXpUB11kTuFouJsc1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:18:e3:a8:ea:c6:17:06:e8:3f:4c:78:8b:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Apr 17 16:01:34 2026 GMT
Not After : Apr 18 16:01:34 2026 GMT
Subject: CN=59b45bf629f690fd212226d60a123bacca971ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:2f:d7:b2:0f:e3:d7:ad:77:5b:71:15:40:
97:be:74:ef:26:ec:be:ff:45:ea:72:9a:d5:31:99:
b8:bc:93:57:07:47:77:f2:72:b0:f5:e0:1b:b7:c8:
27:26:21:16:9f:e2:89:7d:0a:91:ff:61:b9:a7:12:
84:85:3c:fb:22:00:15:1d:68:63:f7:fa:f1:ae:0a:
ac:c5:60:c2:47:3b:27:e0:02:9d:66:7a:36:20:64:
03:0a:f6:bb:b3:67:e7:66:82:33:cb:f2:7c:4a:ff:
dd:64:61:df:81:4e:21:e6:be:97:57:b5:ed:d3:2d:
86:2b:47:db:19:8e:19:e7:8c:3b:c8:c9:6b:01:95:
cf:e0:b9:e0:b5:5f:2f:d1:ca:27:d6:81:9c:2c:3e:
24:00:30:b7:12:d5:3a:59:0b:ad:1b:be:ac:d7:ae:
53:d0:c2:f3:dd:1f:86:7e:aa:ea:05:94:19:cb:25:
57:46:a6:c0:f6:29:f5:16:b7:7d:a1:8b:aa:fb:bc:
c9:c4:a7:21:d2:fe:42:fe:74:b3:92:2a:ed:a8:94:
25:14:cf:9b:1d:be:a3:07:dd:a5:7c:4d:ab:6e:c9:
77:e3:44:2c:ae:7c:4b:76:4d:c3:92:e1:8b:7b:a0:
38:0d:ff:15:60:c2:97:54:73:67:84:58:8a:48:3e:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:5B:F6:29:F6:90:FD:21:22:26:D6:0A:12:3B:AC:CA:97:1C:E5
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:97:56:09:ac:8e:bf:35:95:e3:5e:e1:59:8a:43:03:ff:
67:01:7e:09:a2:6e:3d:53:d3:9e:77:6c:43:73:24:40:35:7c:
bf:df:ff:a9:64:54:0a:6e:ae:1c:a3:26:46:1a:85:2d:47:86:
4b:8f:d8:b1:ab:08:bd:f4:7a:9c:84:21:ee:5a:ed:94:80:97:
c6:7e:9f:52:81:87:b7:87:52:2b:a5:85:b1:0d:b0:a6:2a:c3:
a5:f6:17:83:d2:02:36:af:f2:e8:5e:39:ec:ac:a2:98:c9:a4:
1c:db:e2:15:85:bb:55:6d:5f:e5:7a:5b:fb:00:c3:39:bc:fa:
ed:1e:ed:a1:85:a1:59:4f:2c:91:36:15:f6:9f:35:5c:de:7c:
47:f6:70:6b:ce:58:a1:f8:ec:12:27:c6:de:78:65:57:de:a6:
39:a4:4b:ae:4c:6f:3a:0c:15:85:69:b8:a8:60:5c:7a:63:d4:
b0:6e:92:6a:cc:4c:9e:db:20:44:be:94:3a:fd:ac:1b:55:9a:
ef:23:13:8e:42:24:c8:64:b5:c8:fb:74:8b:00:f0:ef:02:70:
d8:81:eb:72:32:09:26:3d:ca:a3:5c:ac:e4:99:0a:55:0b:b4:
6e:cb:8b:ca:6e:b8:70:99:f0:57:d6:5e:e2:f4:e8:bb:82:2b:
d5:f2:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:07 2026 by rpki-client