Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: sjeac1hAb0Qdm0L/IdVhefr/K9hz7cbNGuEN19lGDw4=
Subject key identifier: 13:E1:D3:FD:FF:17:6F:F6:7D:C1:21:E4:40:12:05:58:19:4C:81:64
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019CAA584DA5A0D3C472C0B86DEE8BC151CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0C2D
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: XllVu1Jb5L8UWNCDdTDWkFcjTRzS0g0lJn2EAVAVQtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4d:a5:a0:d3:c4:72:c0:b8:6d:ee:8b:c1:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=13e1d3fdff176ff67dc121e440120558194c8164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:04:c1:09:0c:e4:94:6f:31:e4:83:99:53:
96:57:dd:59:3e:37:53:2e:a4:d9:bb:a5:40:c7:5c:
36:e7:24:9c:32:42:a5:f7:f7:18:29:10:e0:58:ca:
df:47:ac:52:f9:32:e2:37:2c:46:83:d0:80:48:b4:
37:a3:9c:b5:0d:23:8e:a4:ae:35:dd:b4:11:f5:ff:
31:2e:55:a3:80:6e:ca:4d:a2:e0:ea:5f:1f:d7:38:
89:e0:95:3b:bf:7f:34:b5:03:15:95:31:8b:50:f2:
ea:87:e4:6b:3b:ad:8a:91:d4:a8:e6:fc:47:38:0e:
5c:fd:62:f1:9d:c8:78:67:1a:d5:1a:59:57:11:42:
e5:5c:f7:58:8f:7e:38:fe:07:b7:d3:02:5d:73:08:
83:b3:a3:01:be:24:89:38:23:53:22:30:56:22:ff:
57:34:db:9a:bf:97:3e:a8:c9:1f:9f:d7:7f:75:bb:
ad:44:3b:db:47:a8:82:f8:5b:05:fd:ed:ce:2f:e8:
3d:93:72:f0:10:d3:df:57:9d:69:4a:e7:09:7a:d7:
bd:68:36:ba:21:6b:ee:98:8c:58:e5:fb:28:2a:dc:
fa:3c:69:51:ae:dc:c1:0b:d8:76:0d:1a:00:20:b8:
a5:1d:6c:09:9e:ab:62:1a:df:c5:bd:78:43:f0:13:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:D3:FD:FF:17:6F:F6:7D:C1:21:E4:40:12:05:58:19:4C:81:64
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f3:d0:49:43:71:ab:00:8f:ec:12:3a:12:e1:2d:d7:70:be:
fd:98:96:b6:18:16:4a:28:47:fe:9c:4a:5e:91:a3:9b:d0:3d:
ea:f5:a7:21:1c:8d:40:59:72:e2:4b:79:15:97:d0:e4:43:50:
35:f6:29:1e:1b:9a:48:28:ae:e7:12:a1:41:12:05:19:1d:27:
1b:a0:60:03:5e:c2:ba:ce:b8:d7:80:75:de:91:af:be:a1:d4:
0a:0a:f0:59:7f:a1:b4:17:47:10:38:d8:d9:f6:b0:5d:b9:66:
fd:98:91:43:65:43:47:03:b8:b7:f0:75:8b:6b:c2:e1:25:21:
6a:ce:0b:83:c7:76:84:c7:6a:90:9e:2f:09:07:24:ec:f8:73:
09:9f:2c:f5:7d:36:5a:87:55:4c:17:33:b7:af:53:9b:27:e0:
cd:d3:01:2b:b0:c0:da:71:da:dd:9a:5b:e1:f2:01:dd:2a:f0:
13:8b:6e:cd:e0:1d:c6:66:63:9c:32:dc:37:ef:8a:55:e5:13:
0d:d1:a5:8b:83:bc:c4:7d:05:a3:f5:44:2f:8c:c5:b1:5e:95:
c8:a0:dc:22:56:75:c8:00:16:d9:2a:ba:41:0d:37:54:c9:20:
57:58:78:10:ef:d8:64:24:5f:67:47:07:48:5a:1a:c1:4d:ab:
29:0e:6c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWE2loNPEcsC4be6LwVHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4
ZTQ1MTAwHhcNMjYwMzAxMTcwMDM5WhcNMjYwMzAyMTcwMDM5WjAzMTEwLwYDVQQD
EygxM2UxZDNmZGZmMTc2ZmY2N2RjMTIxZTQ0MDEyMDU1ODE5NGM4MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPEEwQkM5JRvMeSDmVOWV91ZPjdT
LqTZu6VAx1w25yScMkKl9/cYKRDgWMrfR6xS+TLiNyxGg9CASLQ3o5y1DSOOpK41
3bQR9f8xLlWjgG7KTaLg6l8f1ziJ4JU7v380tQMVlTGLUPLqh+RrO62KkdSo5vxH
OA5c/WLxnch4ZxrVGllXEULlXPdYj344/ge30wJdcwiDs6MBviSJOCNTIjBWIv9X
NNuav5c+qMkfn9d/dbutRDvbR6iC+FsF/e3OL+g9k3LwENPfV51pSucJete9aDa6
IWvumIxY5fsoKtz6PGlRrtzBC9h2DRoAILilHWwJnqtiGt/FvXhD8BOdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPh0/3/F2/2fcEh5EASBVgZTIFkMB8GA1UdIwQY
MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt
YzhjYzViMmQwYWVkLzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk
LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPPQSUNx
qwCP7BI6EuEt13C+/ZiWthgWSihH/pxKXpGjm9A96vWnIRyNQFly4kt5FZfQ5ENQ
NfYpHhuaSCiu5xKhQRIFGR0nG6BgA17Cus6414B13pGvvqHUCgrwWX+htBdHEDjY
2fawXblm/ZiRQ2VDRwO4t/B1i2vC4SUhas4Lg8d2hMdqkJ4vCQck7PhzCZ8s9X02
WodVTBczt69TmyfgzdMBK7DA2nHa3Zpb4fIB3SrwE4tuzeAdxmZjnDLcN++KVeUT
DdGli4O8xH0Fo/VEL4zFsV6VyKDcIlZ1yAAW2Sq6QQ03VMkgV1h4EO/YZCRfZ0cH
SFoawU2rKQ5s/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:42 2026 by rpki-client