Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: wG1Te+a+zFVQAqTt1bhRvZlmAaaTQ3FBdqKzA6tAcBk=
Subject key identifier: 87:68:50:69:15:BC:26:9A:4F:CD:F5:DF:7E:A9:1D:50:D6:9C:F5:8F
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019D97E2851A67F1ACB6638EAACCF7D728A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0CA8
Signing time: Thu 16 Apr 2026 20:01:37 +0000
Manifest this update: Thu 16 Apr 2026 20:01:37 +0000
Manifest next update: Fri 17 Apr 2026 20:01:37 +0000
Files and hashes: 1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: anrIL7K40Im4QLtMAOsEKODEBtFZd2vk6VXmAAM2dJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:85:1a:67:f1:ac:b6:63:8e:aa:cc:f7:d7:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Apr 16 20:01:37 2026 GMT
Not After : Apr 17 20:01:37 2026 GMT
Subject: CN=8768506915bc269a4fcdf5df7ea91d50d69cf58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:b6:fb:f1:48:2f:a6:c4:1d:64:77:68:bb:
12:e9:69:2a:ac:e7:a9:26:01:92:b1:66:5b:90:1a:
fe:66:37:7a:5e:45:5d:14:76:dd:ff:88:f3:75:d6:
b8:50:00:9d:7b:44:d9:fb:e5:47:8e:92:15:00:34:
51:5a:8b:9f:67:20:53:6b:10:77:fa:46:26:fe:7f:
9e:15:f7:ad:85:0f:f0:2d:8f:bb:3a:9a:ff:0d:5c:
cc:69:07:52:12:5e:ff:90:0e:70:e7:ff:3f:cc:66:
ed:23:49:ea:3c:ce:0b:ee:44:c7:88:16:9c:f6:3f:
54:a6:d2:04:8a:fd:5a:3a:85:0e:73:c2:db:8c:c8:
79:29:3c:91:6c:09:d1:54:85:72:fb:de:6b:34:bd:
d3:8c:66:20:85:1a:07:fe:81:1b:de:8a:af:01:70:
44:59:09:96:c7:a0:88:9f:8b:c8:8c:bf:bb:94:bc:
48:ab:5d:e3:a3:a8:33:53:b3:69:39:4a:7d:a0:a6:
dd:4c:5a:0a:15:1b:39:2d:6e:5c:30:84:a6:3d:1f:
e6:9e:7a:f0:61:42:e0:d5:6f:9b:aa:56:b2:29:2d:
98:5a:68:f5:fb:e4:0c:26:5c:09:55:92:8a:7f:27:
c3:8d:8d:1a:d7:ef:56:09:c3:65:0a:d3:b9:09:55:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:50:69:15:BC:26:9A:4F:CD:F5:DF:7E:A9:1D:50:D6:9C:F5:8F
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:32:5a:a9:3e:9e:18:f4:9d:64:bb:f5:78:ae:ed:d9:e2:29:
9b:76:a8:3e:aa:3a:bd:ba:f8:4d:ce:96:87:3c:69:52:3b:db:
4b:1a:43:35:e9:0b:a9:aa:dc:b4:db:ed:30:2c:ca:b0:5d:c0:
ab:fb:e3:d2:96:b6:32:7f:bd:69:33:6a:60:78:e0:54:35:28:
b8:dc:a3:90:fe:fb:6c:d1:e4:a4:d8:f3:d5:eb:d5:d4:58:db:
81:f4:aa:86:db:99:86:86:02:66:0b:e5:c6:65:55:fb:10:f6:
3e:e7:de:26:c3:0f:c5:05:19:9b:1b:9d:ab:16:48:e5:82:9f:
d6:57:b4:86:b3:ff:fa:ff:a6:a4:da:b5:9a:1f:10:cc:ef:71:
c9:9c:c7:2c:b1:0a:75:ac:7e:0e:62:b1:80:a9:91:33:23:ea:
89:93:b0:4f:1d:cc:6b:69:6e:f1:1d:d4:dd:79:f9:cc:40:d5:
9c:3c:97:fe:f8:28:c5:69:ef:90:b0:15:dd:9e:71:52:41:1d:
70:53:01:b9:1b:64:2c:4b:4a:db:d6:fa:4c:e5:7b:e1:6a:3b:
e2:fb:5d:c4:1b:f0:ca:8a:a8:85:a6:47:2e:d7:72:11:1a:c4:
4c:37:2b:ca:92:9f:db:f3:31:44:e1:15:d7:b1:1b:dd:c3:de:
d3:60:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:22 2026 by rpki-client