Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: 720yn0M91DpYptQ0tg27e21/OOyNEEYeQw4YQhQ+gZs=
Subject key identifier: F2:31:D5:E1:13:47:73:E3:13:DE:56:F8:C5:E2:62:7D:6B:8E:96:8E
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019CAD59F7C15D910B8B80403A8004F1CB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:01:20 +0000
Manifest this update: Mon 02 Mar 2026 07:01:20 +0000
Manifest next update: Tue 03 Mar 2026 07:01:20 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: KRbO3nU15iWsLGRwsr9ooizWmoI4LUCsRWuBhfrpkbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f7:c1:5d:91:0b:8b:80:40:3a:80:04:f1:cb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Mar 2 07:01:20 2026 GMT
Not After : Mar 3 07:01:20 2026 GMT
Subject: CN=f231d5e1134773e313de56f8c5e2627d6b8e968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:7f:66:8d:2a:3a:64:0e:74:b8:b9:2c:bf:
aa:3f:07:e3:c3:af:1e:8b:43:4f:44:7d:a0:2c:16:
fe:49:13:05:4e:c8:a1:ae:dc:76:84:a6:df:c0:60:
9b:a5:29:16:c7:19:be:1c:b5:f6:9b:20:76:72:2e:
91:ce:9e:75:1e:35:d8:6e:5e:ce:3e:30:b3:c2:32:
87:03:71:76:b5:7f:dc:02:1a:aa:f7:31:8b:26:e9:
f1:a4:69:55:51:ed:8b:0e:01:ba:17:b1:35:e2:89:
e6:bd:27:e4:fe:58:ce:b8:77:67:e4:65:cf:8d:0a:
4f:da:05:5e:9d:68:a4:b5:7f:17:51:06:e9:48:4a:
da:79:cc:c0:a5:4d:89:9f:65:79:9d:3d:08:21:01:
f0:83:63:e4:56:7e:f4:ae:17:90:fa:0e:47:a9:d3:
0d:c7:69:68:17:a8:b6:dd:f4:7b:32:e7:2c:8a:ef:
ba:7f:7f:2f:fe:87:39:32:2f:d0:e4:b9:d4:d5:08:
d4:d5:2e:59:98:2a:a0:2a:f2:10:1a:4e:71:c4:16:
ec:94:1e:6a:8c:a7:53:cb:c5:9c:da:fe:25:bb:1d:
10:96:40:ad:04:a5:20:95:81:05:79:b2:33:dd:24:
db:b2:ee:ad:42:5f:97:9c:fe:1e:65:d5:e8:60:35:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:D5:E1:13:47:73:E3:13:DE:56:F8:C5:E2:62:7D:6B:8E:96:8E
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:aa:70:72:c0:1b:65:d1:50:2d:94:74:be:ea:93:57:75:
b4:d4:9b:46:1c:75:9e:0e:f1:46:6d:97:8f:22:a5:5c:6f:77:
21:c3:b6:d6:fb:40:9e:45:9b:29:58:72:79:ad:b9:e7:50:cb:
bc:6f:b0:0d:d6:b9:2d:87:4e:35:5f:7d:3f:a8:0c:4d:d4:cb:
46:79:45:a2:d2:98:e7:e2:95:d9:56:48:44:1f:d3:ab:e5:23:
42:60:c6:4a:5d:b5:f2:13:30:3b:56:41:08:e6:eb:a8:bd:14:
fd:63:04:05:47:09:75:d3:af:de:61:b3:90:ad:af:46:33:f2:
60:a6:76:a5:9f:48:51:15:ba:2c:e8:42:fe:92:15:b0:6a:47:
ac:3b:90:ec:37:71:1b:75:97:3e:44:11:6b:af:40:73:ab:8b:
06:20:3d:6b:fa:57:f5:be:a3:f2:dc:a0:c8:a0:98:07:19:d6:
6a:ea:06:e1:8f:61:df:40:b7:a9:40:9e:23:86:c9:2f:2b:0b:
bc:b8:5b:de:83:b2:c1:ca:0a:bc:41:91:5d:47:4c:c5:2a:47:
71:55:ce:6c:d5:f4:89:6e:48:79:d2:70:d3:0c:ae:b2:e9:47:
2c:28:c1:e0:77:20:bf:3c:58:3a:43:0a:69:5f:0e:87:ba:88:
82:bd:80:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWffBXZELi4BAOoAE8csjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjYwMzAyMDcwMTIwWhcNMjYwMzAzMDcwMTIwWjAzMTEwLwYDVQQD
EyhmMjMxZDVlMTEzNDc3M2UzMTNkZTU2ZjhjNWUyNjI3ZDZiOGU5NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiR/Zo0qOmQOdLi5LL+qPwfjw68e
i0NPRH2gLBb+SRMFTsihrtx2hKbfwGCbpSkWxxm+HLX2myB2ci6Rzp51HjXYbl7O
PjCzwjKHA3F2tX/cAhqq9zGLJunxpGlVUe2LDgG6F7E14onmvSfk/ljOuHdn5GXP
jQpP2gVenWiktX8XUQbpSEraeczApU2Jn2V5nT0IIQHwg2PkVn70rheQ+g5HqdMN
x2loF6i23fR7Mucsiu+6f38v/oc5Mi/Q5LnU1QjU1S5ZmCqgKvIQGk5xxBbslB5q
jKdTy8Wc2v4lux0QlkCtBKUglYEFebIz3STbsu6tQl+XnP4eZdXoYDXUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIx1eETR3PjE95W+MXiYn1rjpaOMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQyqcHLA
G2XRUC2UdL7qk1d1tNSbRhx1ng7xRm2XjyKlXG93IcO21vtAnkWbKVhyea2551DL
vG+wDda5LYdONV99P6gMTdTLRnlFotKY5+KV2VZIRB/Tq+UjQmDGSl218hMwO1ZB
CObrqL0U/WMEBUcJddOv3mGzkK2vRjPyYKZ2pZ9IURW6LOhC/pIVsGpHrDuQ7Ddx
G3WXPkQRa69Ac6uLBiA9a/pX9b6j8tygyKCYBxnWauoG4Y9h30C3qUCeI4bJLysL
vLhb3oOywcoKvEGRXUdMxSpHcVXObNX0iW5IedJw0wyusulHLCjB4HcgvzxYOkMK
aV8Oh7qIgr2Afw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:08 2026 by rpki-client