Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: /V2zrRRnkkAdxZtQcxAzz4Y8WYjEam3GKlkSVaaUOSs=
Subject key identifier: 3B:5B:6C:60:A2:00:E9:3E:27:C0:19:0B:4A:FD:13:24:FC:AC:88:89
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019CAD226CD26C957822526145BE9469E192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 03E3
Signing time: Mon 02 Mar 2026 06:00:40 +0000
Manifest this update: Mon 02 Mar 2026 06:00:40 +0000
Manifest next update: Tue 03 Mar 2026 06:00:40 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: WHq4koDTDvz4eRuUUEnSLBF6tpJSQqkEdfv+23yNwIQ=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6c:d2:6c:95:78:22:52:61:45:be:94:69:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Mar 2 06:00:40 2026 GMT
Not After : Mar 3 06:00:40 2026 GMT
Subject: CN=3b5b6c60a200e93e27c0190b4afd1324fcac8889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:a1:88:c5:b6:76:a6:4b:44:35:83:01:18:
c8:93:66:94:aa:3e:c9:f4:58:5e:ae:18:5a:b8:1a:
18:f1:01:f6:d7:38:19:65:48:07:00:5c:7d:c0:30:
ba:7a:0e:fa:37:81:5d:db:9b:90:0d:5e:7b:ef:b3:
15:70:d0:23:d0:e4:65:d9:10:b5:e6:c3:5f:fa:7f:
bf:33:af:70:09:4f:6d:3d:0f:0f:c0:46:16:c0:09:
89:b1:bc:83:02:52:aa:a6:55:e6:c5:0f:2b:88:59:
0f:cc:9d:7c:e4:32:71:04:5f:19:30:f7:be:92:22:
24:09:3e:9d:e5:4e:e9:73:05:f7:89:a0:84:7a:d3:
9f:af:2c:c2:44:3c:5d:40:71:5b:34:b0:a5:6b:00:
05:de:b6:d6:a7:e4:04:5c:5a:4f:73:55:e8:a8:d0:
ac:3f:c8:a8:ec:f4:73:66:30:00:13:5f:bd:9f:e6:
b6:c1:0e:fa:e9:00:43:92:1f:eb:b7:6a:fb:f5:dd:
d9:46:1e:91:de:9d:9d:aa:b7:82:3b:1a:bd:32:c1:
a9:91:1f:ce:a8:b8:b0:da:35:87:6a:70:ca:e5:c4:
13:16:22:0e:f0:e2:87:ac:f7:7e:af:a9:04:1c:90:
bd:dc:6a:e8:bd:28:82:9c:33:0a:f2:a8:81:db:f3:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:6C:60:A2:00:E9:3E:27:C0:19:0B:4A:FD:13:24:FC:AC:88:89
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e0:c5:89:c8:b8:a2:d9:71:39:cc:8f:a1:e5:08:48:38:f1:
21:45:ee:fe:df:36:b0:de:d0:c9:fd:3f:d3:19:61:3e:9d:a1:
99:53:92:fb:3c:c7:d8:55:29:92:fd:5d:ee:89:3d:ab:38:c8:
29:de:6f:b8:76:45:df:6b:e9:8b:9c:d9:eb:83:d1:06:0c:fa:
40:ae:43:65:3c:e9:b6:0a:43:46:7b:f7:e7:f9:60:51:9b:f2:
73:5b:3a:ec:65:67:6d:85:b5:cb:d8:b0:d4:63:3a:8d:ba:5f:
a6:c8:c6:16:d3:4d:99:61:2b:a0:ad:fb:d8:b3:ed:7f:d6:fe:
8a:a5:65:8b:12:67:e4:af:26:08:42:57:da:6f:78:a3:c4:23:
dc:1c:d8:e6:85:0e:4b:94:16:5e:b4:71:4e:10:38:bc:e9:f9:
d7:8c:c6:a0:fc:89:47:91:f6:97:e0:d6:8f:76:08:65:e1:b7:
ca:28:93:56:16:8b:68:66:8e:78:fc:ad:af:97:02:b5:68:dd:
24:24:df:07:23:54:b0:ad:e5:36:ee:5a:ca:e9:b8:66:37:cf:
d1:f8:63:86:2b:c7:fe:9e:59:e9:74:68:e0:25:be:4b:34:f3:
4c:e4:57:e7:25:fa:c7:9d:e7:ef:8b:f5:0e:8a:dd:70:d6:7c:
fa:38:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:33:24 2026 by rpki-client