Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: 4y5jiDR9axgrafz42pYNXc3BmsJG7B6pjiY1Z44cFlI=
Subject key identifier: B6:FD:C4:B9:64:E7:E7:5D:8B:56:C2:D3:1D:63:99:21:C3:14:DA:B8
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 01A0CCA3567CDDD520F8F5C73BF303C66C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 1139
Signing time: Wed 23 Sep 2026 05:00:51 +0000
Manifest this update: Wed 23 Sep 2026 05:00:51 +0000
Manifest next update: Thu 24 Sep 2026 05:00:51 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: QdOKtp8Y1gzbJ8Cg/pCgbQUdOZiXN+zNDaZbcSzHrBI=)
2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:56:7c:dd:d5:20:f8:f5:c7:3b:f3:03:c6:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Sep 23 05:00:51 2026 GMT
Not After : Sep 24 05:00:51 2026 GMT
Subject: CN=b6fdc4b964e7e75d8b56c2d31d639921c314dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:e1:3d:bc:cf:e7:b5:27:39:22:68:35:ab:
88:8d:2a:02:a9:d2:a3:a3:f3:1e:9d:7a:cc:4b:27:
fb:ad:96:da:ba:7e:55:a0:a7:e7:16:e9:5d:cd:0c:
f1:09:bf:e8:3e:8a:7d:72:a0:20:56:96:c1:c3:e0:
45:ba:cd:e7:e0:60:9c:7e:88:06:e7:0b:1f:6e:be:
df:bd:4f:ba:d1:73:52:9d:1d:eb:5c:53:b5:87:87:
cd:e7:65:cc:8e:cb:56:71:70:03:eb:83:06:68:e5:
6c:1f:6a:1e:31:ed:e3:22:e6:1b:21:71:29:ac:23:
36:fb:b4:26:ee:e4:bb:9d:dd:ad:af:71:b4:46:1f:
75:63:6a:58:f0:95:2a:b7:28:fa:5d:72:1c:2d:d1:
5d:92:e8:ca:49:aa:84:79:87:fd:cd:e9:fd:f7:e4:
3f:2e:63:10:6a:18:b8:9e:53:1d:c3:78:3d:88:86:
33:ae:f7:08:2d:cf:2e:52:5b:c8:85:4b:24:63:a5:
66:bd:45:66:49:98:0a:50:0f:cc:81:bb:4e:97:21:
fe:f5:eb:4b:20:2e:0f:14:d3:46:53:a9:d3:ff:18:
a7:44:34:74:ee:9a:60:2b:1e:a9:3a:53:1e:a8:48:
dc:d3:c1:2e:53:04:83:12:19:01:63:d7:e2:f9:00:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:C4:B9:64:E7:E7:5D:8B:56:C2:D3:1D:63:99:21:C3:14:DA:B8
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:97:20:dc:a2:ef:2e:a4:48:41:0d:46:b6:d6:74:ed:3a:
5b:68:f8:43:21:54:6e:7e:fe:3e:c8:20:e8:69:12:fd:da:34:
93:39:0c:9f:ec:5b:11:7a:e1:99:b1:23:ff:e2:af:2f:9c:ab:
b4:ca:92:3d:af:a4:8d:c6:6e:23:d9:05:ca:81:ca:ce:46:30:
a9:b0:3d:43:58:a8:c8:9c:a5:05:f1:26:7e:55:1e:9b:8e:ed:
4b:95:d1:88:e3:fa:63:d9:92:c5:66:cd:86:58:56:22:b5:dd:
9d:15:10:dd:61:7d:f0:0d:cf:11:2f:a0:bd:b2:fa:61:33:61:
c3:e9:af:53:fa:a8:19:b6:46:36:30:fa:bd:a9:a8:85:59:90:
17:45:60:9b:a5:63:e3:74:5b:48:d8:03:51:f8:cd:a6:07:f8:
ba:60:49:5a:e7:7f:05:46:20:80:3e:56:66:b5:02:b2:04:7f:
21:d2:7c:46:72:53:9e:6d:21:b2:2b:8f:a5:71:b7:0f:64:51:
d2:aa:20:40:9e:32:44:9f:7c:75:f8:e7:98:b9:43:e8:28:d7:
5b:be:bd:90:c0:4e:72:93:e9:ef:6b:25:4e:76:77:41:96:22:
a3:9c:9f:43:38:cb:fd:3f:83:ae:54:20:7f:16:e5:af:7d:34:
39:d2:fc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo1Z83dUg+PXHO/MDxmwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw
NGRjNGUwHhcNMjYwOTIzMDUwMDUxWhcNMjYwOTI0MDUwMDUxWjAzMTEwLwYDVQQD
EyhiNmZkYzRiOTY0ZTdlNzVkOGI1NmMyZDMxZDYzOTkyMWMzMTRkYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ovhPbzP57UnOSJoNauIjSoCqdKj
o/MenXrMSyf7rZbaun5VoKfnFuldzQzxCb/oPop9cqAgVpbBw+BFus3n4GCcfogG
5wsfbr7fvU+60XNSnR3rXFO1h4fN52XMjstWcXAD64MGaOVsH2oeMe3jIuYbIXEp
rCM2+7Qm7uS7nd2tr3G0Rh91Y2pY8JUqtyj6XXIcLdFdkujKSaqEeYf9zen99+Q/
LmMQahi4nlMdw3g9iIYzrvcILc8uUlvIhUskY6VmvUVmSZgKUA/MgbtOlyH+9etL
IC4PFNNGU6nT/xinRDR07ppgKx6pOlMeqEjc08EuUwSDEhkBY9fi+QD9UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb9xLlk5+ddi1bC0x1jmSHDFNq4MB8GA1UdIwQY
MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct
MGE4MTJiYjE4ZjM1LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1
LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOGXINyi
7y6kSEENRrbWdO06W2j4QyFUbn7+Psgg6GkS/do0kzkMn+xbEXrhmbEj/+KvL5yr
tMqSPa+kjcZuI9kFyoHKzkYwqbA9Q1ioyJylBfEmflUem47tS5XRiOP6Y9mSxWbN
hlhWIrXdnRUQ3WF98A3PES+gvbL6YTNhw+mvU/qoGbZGNjD6vamohVmQF0Vgm6Vj
43RbSNgDUfjNpgf4umBJWud/BUYggD5WZrUCsgR/IdJ8RnJTnm0hsiuPpXG3D2RR
0qogQJ4yRJ98dfjnmLlD6CjXW769kMBOcpPp72slTnZ3QZYio5yfQzjL/T+DrlQg
fxblr300OdL8dw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:06:42 2026 by rpki-client