Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: PjtIyBakJQqDdzWOLswbBWI0OxsZ41fr8102gvWfhGU=
Subject key identifier: B3:BC:9E:8C:F9:49:5C:A6:8C:A1:B9:66:F1:F8:98:A9:A2:57:7E:DB
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 01A13410C599C12C802B8D9147AB68E17BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 07:01:16 +0000
Manifest this update: Tue 13 Oct 2026 07:01:16 +0000
Manifest next update: Wed 14 Oct 2026 07:01:16 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: xdZNJ/r0zqNnZ4Lzvs/bmWw1rGcv2HhNOo//kByhRSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:c5:99:c1:2c:80:2b:8d:91:47:ab:68:e1:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Oct 13 07:01:16 2026 GMT
Not After : Oct 14 07:01:16 2026 GMT
Subject: CN=b3bc9e8cf9495ca68ca1b966f1f898a9a2577edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:b8:08:b2:66:46:2e:d8:76:5b:85:d3:ce:
b9:36:55:b7:58:73:0f:ca:a2:81:07:1c:0c:16:d8:
23:42:f0:26:40:35:72:07:8b:3a:57:40:b4:d4:96:
38:07:9c:44:7f:3a:8d:f7:3a:58:e6:a4:5d:a1:b9:
04:6a:91:97:36:84:dd:b0:64:3e:c4:92:18:16:f8:
f3:a6:e7:fa:ba:d9:b1:69:d2:fc:82:c7:c6:1c:4c:
ba:1e:97:55:db:5c:73:9c:c6:6a:bb:1c:7c:ae:cf:
dd:fe:71:7a:ee:88:52:12:18:60:62:cc:d4:ca:b4:
9d:d8:6b:ce:6e:87:07:ec:e3:b0:07:73:f1:30:ff:
40:30:f4:dd:b4:e8:23:53:3a:e0:c7:6f:e8:c7:d3:
bf:e8:42:7f:a5:47:32:dc:55:ab:fd:42:65:09:5d:
4d:c6:46:d6:20:ec:27:72:29:34:3f:f2:85:c9:6d:
72:2a:e9:0b:d3:02:42:e6:42:ae:e6:39:87:0e:2e:
ef:8d:b6:6c:86:0d:20:61:c2:b5:67:80:15:d0:c9:
12:69:21:08:1e:e3:f0:dd:cb:56:40:c6:60:19:15:
3d:88:f7:86:e5:5e:97:fa:85:d1:9a:b3:28:b2:98:
c2:87:87:12:8f:6f:8c:35:f9:0a:bf:87:76:28:66:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:9E:8C:F9:49:5C:A6:8C:A1:B9:66:F1:F8:98:A9:A2:57:7E:DB
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:72:8c:8c:fd:29:b4:48:94:71:42:32:4f:6a:60:40:3c:
c0:06:65:fc:1c:01:a3:81:1d:f4:01:3c:66:55:64:ca:c7:a7:
c6:41:5e:94:bf:0d:29:1f:66:53:c4:3d:60:a2:e0:90:8e:94:
ce:af:1e:f9:4d:20:9f:e9:44:15:c0:a0:c0:e0:3e:89:5b:b8:
77:ed:3b:ff:e7:56:a4:12:f0:d5:1f:3d:97:4f:9c:18:62:c5:
59:8a:09:c6:0a:1a:66:54:c7:8c:ae:11:df:17:87:29:ef:65:
26:39:96:be:8a:ec:67:95:46:76:7f:26:4f:40:ac:69:28:09:
ed:4e:da:df:f1:31:00:b2:b8:91:f2:95:e3:3c:40:96:52:6e:
65:94:9b:ad:70:15:7f:7e:92:44:4c:83:22:45:43:88:58:0b:
38:3a:c8:a5:08:c1:86:1b:9b:e4:28:b7:e1:93:87:bf:02:f2:
d4:b4:44:4e:01:87:bf:e2:91:5d:63:d5:a3:be:42:d5:ef:40:
30:a3:a2:2a:9c:48:90:f0:41:59:2d:b1:d8:86:95:04:29:9c:
32:74:cc:1a:7b:c2:05:3c:38:86:f4:f0:43:f0:62:c3:29:7f:
1e:79:1e:45:2f:61:b3:0c:fc:c8:3c:8c:9d:5c:eb:bf:de:29:
7a:f7:64:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0EMWZwSyAK42RR6to4XvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjYxMDEzMDcwMTE2WhcNMjYxMDE0MDcwMTE2WjAzMTEwLwYDVQQD
EyhiM2JjOWU4Y2Y5NDk1Y2E2OGNhMWI5NjZmMWY4OThhOWEyNTc3ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQq4CLJmRi7YdluF0865NlW3WHMP
yqKBBxwMFtgjQvAmQDVyB4s6V0C01JY4B5xEfzqN9zpY5qRdobkEapGXNoTdsGQ+
xJIYFvjzpuf6utmxadL8gsfGHEy6HpdV21xznMZquxx8rs/d/nF67ohSEhhgYszU
yrSd2GvObocH7OOwB3PxMP9AMPTdtOgjUzrgx2/ox9O/6EJ/pUcy3FWr/UJlCV1N
xkbWIOwncik0P/KFyW1yKukL0wJC5kKu5jmHDi7vjbZshg0gYcK1Z4AV0MkSaSEI
HuPw3ctWQMZgGRU9iPeG5V6X+oXRmrMospjCh4cSj2+MNfkKv4d2KGbd+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO8noz5SVymjKG5ZvH4mKmiV37bMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDByjIz9
KbRIlHFCMk9qYEA8wAZl/BwBo4Ed9AE8ZlVkysenxkFelL8NKR9mU8Q9YKLgkI6U
zq8e+U0gn+lEFcCgwOA+iVu4d+07/+dWpBLw1R89l0+cGGLFWYoJxgoaZlTHjK4R
3xeHKe9lJjmWvorsZ5VGdn8mT0CsaSgJ7U7a3/ExALK4kfKV4zxAllJuZZSbrXAV
f36SREyDIkVDiFgLODrIpQjBhhub5Ci34ZOHvwLy1LRETgGHv+KRXWPVo75C1e9A
MKOiKpxIkPBBWS2x2IaVBCmcMnTMGnvCBTw4hvTwQ/Biwyl/HnkeRS9hswz8yDyM
nVzrv94pevdk8Q==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:57:00 2026 by rpki-client