
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: l/IsJOcLswGIbCLiTx39BCVLTPM2sZ0jyhY+gQ+gkqU=
Subject key identifier: 59:C5:CC:5E:3E:E0:2D:7B:30:28:AF:06:0D:6D:87:D0:0A:15:A0:A1
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019D9C9A793B40E1014CD130230AB67A32AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 045F
Signing time: Fri 17 Apr 2026 18:01:02 +0000
Manifest this update: Fri 17 Apr 2026 18:01:02 +0000
Manifest next update: Sat 18 Apr 2026 18:01:02 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: X8GlXyQj2S7FMDVXbGEmrg4xAa1ine9LrByPafQmP6g=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:79:3b:40:e1:01:4c:d1:30:23:0a:b6:7a:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Apr 17 18:01:02 2026 GMT
Not After : Apr 18 18:01:02 2026 GMT
Subject: CN=59c5cc5e3ee02d7b3028af060d6d87d00a15a0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:b8:02:a9:7b:ee:c7:8f:23:c7:f3:06:15:
02:ae:fd:8a:99:cc:e5:b2:53:4b:9e:2d:68:54:bc:
0d:03:cc:89:0a:6a:43:3a:bf:1c:b7:7f:f5:01:a4:
03:2b:72:5b:89:7c:31:d6:8c:86:25:0c:3f:8c:b3:
ce:53:c6:e7:91:80:e2:cf:f3:29:e4:93:64:c7:fe:
0d:1d:4f:1d:6b:e2:c5:bc:e2:dc:ef:bd:9c:b9:46:
55:5a:94:3c:44:ed:d0:15:da:9f:04:1f:fb:c4:5c:
28:d9:f7:44:75:83:68:98:1b:85:f2:71:5e:da:65:
c4:c3:fd:45:95:c7:99:40:f4:99:62:4c:fe:ae:94:
45:fc:08:d2:f7:68:d1:a5:e9:51:23:ea:1a:81:5a:
a6:89:99:c6:fb:81:97:74:d1:01:ce:0b:e4:79:b7:
dc:6b:76:61:63:ec:e2:9a:be:a6:b9:88:49:2d:34:
d2:4e:52:ed:37:64:9b:fe:ba:76:33:ce:be:e7:ae:
f6:e4:db:b7:5e:f3:f2:bf:bc:2d:84:0c:11:31:b1:
3e:5b:80:50:c9:0e:82:7c:2e:7b:6e:5c:e8:bc:e1:
77:62:c1:21:f8:8a:cb:90:9c:b3:eb:93:f1:f3:7d:
51:f2:53:5b:97:5b:e6:f6:67:c3:39:4b:f3:a9:d4:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:CC:5E:3E:E0:2D:7B:30:28:AF:06:0D:6D:87:D0:0A:15:A0:A1
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:70:99:fd:e8:43:64:1d:70:97:17:97:6a:ae:5f:70:7b:cd:
22:55:c4:70:5a:1e:70:dc:45:40:5b:1b:ea:3a:5f:d8:07:1e:
56:db:2f:20:a0:f6:41:a1:ee:f5:ff:ee:61:5e:8a:d3:32:e4:
a6:b2:9d:f4:c5:6c:14:a5:8b:8b:67:6f:0e:b9:d1:11:13:bf:
db:39:d9:90:cb:7a:44:0c:04:45:99:28:d6:ee:3b:88:6c:b9:
e8:65:bd:c5:1e:7f:98:5a:bd:73:bf:13:21:b8:42:f8:fa:92:
dd:91:c8:34:79:4a:6f:c0:94:96:27:62:9a:a7:3b:ca:da:d4:
aa:ec:c0:24:22:1f:f8:79:c3:09:e2:32:00:bb:54:52:83:7b:
2e:be:f5:c9:dc:8b:3d:33:69:da:0c:e0:c4:d7:75:e8:ae:d9:
0d:84:0b:dd:0b:2e:e6:26:05:db:30:27:aa:5e:8a:7b:af:c2:
61:a3:c1:94:90:40:4b:cd:a2:c6:69:76:6e:16:bc:e2:14:63:
09:7d:eb:00:5d:93:94:ec:ee:ec:de:46:5b:5e:d8:99:87:54:
b8:54:ab:f8:ef:84:b7:e7:c7:96:6a:ed:5e:db:50:f2:e2:9a:
09:58:56:75:65:0b:d3:8e:c5:6d:c7:b3:85:2b:e4:50:74:61:
1c:86:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:55 2026 by rpki-client