Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: VzSkP+pCrEoGXQugh+Cj60PRCse6q1+NfsjJ/r2Kzj4=
Subject key identifier: 4E:DF:86:B6:8A:04:52:3D:76:BC:22:18:E6:B2:41:98:EA:61:2B:04
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019FAC08D0DAAF687C255D55CF9AD941710D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 04:01:26 +0000
Manifest this update: Wed 29 Jul 2026 04:01:26 +0000
Manifest next update: Thu 30 Jul 2026 04:01:26 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: TVME5mK1oB/1Z8G+bm1LRAr8Ayj5FxWB8Mv1JXMWmlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:d0:da:af:68:7c:25:5d:55:cf:9a:d9:41:71:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jul 29 04:01:26 2026 GMT
Not After : Jul 30 04:01:26 2026 GMT
Subject: CN=4edf86b68a04523d76bc2218e6b24198ea612b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:7e:d2:7e:2f:c7:83:d0:ea:7f:ac:1a:d1:
5b:c3:96:55:dd:7f:8f:50:3b:18:ea:21:37:fc:07:
31:0d:11:04:f1:89:b4:72:82:34:78:c0:21:9e:fc:
d6:b7:89:1b:14:3e:a2:01:d4:4f:4c:88:9b:2b:73:
92:f7:85:76:91:fc:0a:de:0c:58:1c:29:99:7c:87:
e0:07:a3:98:b7:f7:62:dd:87:74:f3:50:80:dd:c6:
3e:13:a1:e8:b8:23:c1:df:ad:bc:36:da:6c:82:0e:
52:20:86:60:c0:f1:8d:2c:13:cb:e6:ed:56:33:13:
7e:b1:24:16:51:fa:b4:d8:b5:7d:3a:cf:3f:b9:f9:
1f:5c:0a:6c:2d:13:3e:90:0e:e9:32:ed:79:8e:5c:
39:a0:f1:9c:77:77:51:51:fc:a1:14:af:00:f5:5e:
83:62:ae:a2:08:99:4c:e6:ae:50:35:a1:6f:18:53:
0a:84:09:be:43:6c:06:bb:2f:09:f4:8e:d2:ce:cd:
9b:a8:af:3e:7c:83:28:6c:d3:4a:7a:d7:4b:67:7f:
93:04:5c:60:9e:36:a5:b2:17:f4:b4:db:23:b8:cb:
6c:43:c4:b8:0a:5d:e1:a6:35:36:4c:32:22:f2:ff:
c8:4a:f2:3d:c3:d5:4e:93:2f:49:93:d3:9b:9c:9c:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:86:B6:8A:04:52:3D:76:BC:22:18:E6:B2:41:98:EA:61:2B:04
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:09:41:f4:c7:d6:b5:30:0a:27:e1:e9:74:fe:28:bb:02:
c6:c8:ed:d6:b2:0a:7a:87:86:8b:79:43:b3:64:05:35:f6:78:
03:14:d0:66:ad:c5:5c:20:75:35:c9:61:80:af:5b:6a:b2:15:
35:a5:f3:87:65:86:d7:61:36:42:a5:9f:a2:23:d3:a2:41:80:
cd:33:07:00:85:88:c4:78:97:ae:31:e6:9a:93:b5:8c:b1:e2:
de:20:96:b2:c0:20:ea:05:51:17:e5:42:af:19:24:5a:fb:08:
6c:53:b5:25:20:23:3c:a2:79:52:98:32:7d:d7:fa:29:18:00:
d1:ac:ed:18:1c:10:3e:91:16:3a:de:e7:50:04:f0:01:05:00:
3f:59:03:99:2e:1c:45:00:08:c9:e2:90:92:35:08:8e:6e:d5:
9d:e6:54:4b:d2:d4:ff:a8:b7:b9:9d:35:10:e7:16:8a:28:eb:
c9:1d:30:b0:6a:86:4e:49:41:c3:67:e6:a7:53:26:87:ca:b8:
7a:34:95:eb:d7:4f:8c:8c:b3:b1:23:29:70:d9:58:e0:3e:8c:
e3:4d:11:b3:6d:8e:bd:a5:c0:b8:88:06:28:5a:0c:80:b5:8f:
21:7b:2d:00:25:0b:68:a8:53:08:2c:99:21:c8:ac:10:1e:1a:
7e:8d:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:56 2026 by rpki-client