Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: NDTymRigTU6QrdtPrha3XUGxolhLvozCJG+o5at+gGo=
Subject key identifier: 53:F2:8D:AD:4C:AD:2F:E6:F9:CB:17:FE:67:3B:2F:E2:B4:CD:71:2B
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 01A13F6FE40B9FB33B72429119481AEDFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0641
Signing time: Thu 15 Oct 2026 12:00:59 +0000
Manifest this update: Thu 15 Oct 2026 12:00:59 +0000
Manifest next update: Fri 16 Oct 2026 12:00:59 +0000
Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: S3IfncrptysPoa3Eoyfk7g8dQYUZFT00d+ZPhcGnPak=)
3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=)
4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:e4:0b:9f:b3:3b:72:42:91:19:48:1a:ed:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Oct 15 12:00:59 2026 GMT
Not After : Oct 16 12:00:59 2026 GMT
Subject: CN=53f28dad4cad2fe6f9cb17fe673b2fe2b4cd712b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:d0:74:39:2d:10:9a:52:a1:f6:12:77:6c:
fb:9b:e3:c4:da:80:2b:2a:4a:a0:e1:01:59:99:dd:
7e:16:b5:a5:56:09:5f:01:0a:2f:f2:fd:7f:3b:a9:
99:20:d2:b7:38:8f:ec:58:e3:4a:c9:fa:a1:2a:e4:
b1:40:01:b4:68:97:9f:2f:38:75:74:01:49:3a:3d:
91:b0:c2:63:54:1b:96:97:30:df:ad:ee:cb:e1:a0:
7a:7f:33:b2:53:91:d3:ec:d9:a4:90:46:50:a0:4a:
a1:19:a3:31:e8:25:8a:3b:81:23:ba:16:b2:65:df:
6c:94:d4:b0:15:91:54:56:35:72:75:96:40:21:48:
c5:97:f3:e7:72:62:49:01:59:b8:e6:64:cf:d9:85:
d2:bf:2b:c0:2c:a3:e7:23:22:4b:91:f6:0d:cf:d0:
9c:68:51:11:8f:a2:04:63:76:79:11:46:47:36:a5:
48:bf:7b:83:3e:50:83:6c:90:b8:43:5b:da:dd:a0:
ad:a5:b6:20:83:79:c1:1f:98:f2:a5:9c:09:42:70:
1f:09:b6:5c:e2:48:91:d3:2c:ec:b6:a3:b8:a5:a5:
85:01:fd:4d:b7:f5:0c:05:50:3b:81:56:fa:87:42:
2a:22:d7:a1:3f:ad:b1:35:80:d9:be:89:0f:51:09:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:8D:AD:4C:AD:2F:E6:F9:CB:17:FE:67:3B:2F:E2:B4:CD:71:2B
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:88:63:46:31:d2:f3:fa:31:ed:99:f4:c5:13:86:61:db:
fc:88:3c:88:12:b0:76:4f:54:1b:e0:c4:28:db:b4:a1:11:7e:
c6:43:7d:ee:3a:cf:54:39:c4:48:83:1a:00:0f:17:32:0f:73:
bb:68:34:fb:ef:60:db:34:26:07:e0:92:b1:ea:8d:5b:4f:9d:
a3:4e:b5:0b:17:8e:e1:43:81:34:b7:34:cf:5a:65:ac:df:e5:
6c:aa:0a:82:19:70:cb:61:dc:4b:12:4f:11:0f:a7:90:2e:b4:
81:4f:34:ff:9f:b8:e6:af:ec:c7:18:f1:a3:cd:a6:3e:8c:c2:
0b:a1:96:cf:c5:94:2e:20:66:be:92:84:1a:2f:1c:d7:f2:10:
2b:94:8b:90:2d:e7:b0:15:6b:12:75:23:46:98:41:72:c5:1a:
1f:ec:b9:9b:b2:f5:25:1e:6b:82:00:73:83:e1:68:ac:65:d6:
96:17:cd:4b:ea:ce:f7:13:15:0f:10:cf:1c:c8:f4:c5:56:c8:
ee:79:bb:cf:8d:e1:cf:be:4a:91:50:06:40:63:2e:71:ef:1d:
df:97:02:2b:71:ec:48:09:31:e3:02:f5:fe:ea:cf:49:53:b1:
a6:5c:27:26:73:cc:07:57:72:48:cd:2c:fb:9c:e5:4d:b3:c8:
c4:0f:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:41:04 2026 by rpki-client