Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: 2jXVB6gbXBp7rVPF1c7tJ6yieEClX4ZtVJ6vkKQEgYU=
Subject key identifier: BE:61:E8:24:BA:1F:77:22:A9:7B:CA:7F:6E:1F:93:D9:D8:F2:12:7D
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 019CA9EADA6096BA3D1E084F8B2D8D581439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 10EA
Signing time: Sun 01 Mar 2026 15:01:06 +0000
Manifest this update: Sun 01 Mar 2026 15:01:06 +0000
Manifest next update: Mon 02 Mar 2026 15:01:06 +0000
Files and hashes: 1: 1-yZ40ZIR1zrvdMavNgVP-U3GRkw.roa (hash: rrotFnvFJZjY/IZDrZ/Q8wCEoprdXyBMiaME4EtjYZ8=)
2: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: dUnKloEb3cGJcjkxmQuO7R3w0fqGi6+Qm+NiCQ1FvQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:da:60:96:ba:3d:1e:08:4f:8b:2d:8d:58:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Mar 1 15:01:06 2026 GMT
Not After : Mar 2 15:01:06 2026 GMT
Subject: CN=be61e824ba1f7722a97bca7f6e1f93d9d8f2127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:4a:4a:46:38:03:81:93:3d:6b:38:97:63:
75:14:26:19:d1:06:78:2f:8e:90:b2:7b:79:70:f5:
95:5b:c6:a9:cc:b4:e2:69:9f:09:60:1e:04:c9:fe:
da:6d:e9:88:c7:6f:2c:d1:85:b2:89:55:a5:08:aa:
dd:d4:75:28:1a:11:97:02:5c:99:5f:5e:e3:e5:7f:
9e:3b:56:58:ab:b4:7b:e8:91:ac:12:16:8f:4e:95:
38:e8:01:6c:a0:fe:db:a0:37:77:1a:1b:2e:dc:f5:
8b:a0:af:15:6a:51:be:13:70:46:72:50:ac:64:29:
e3:04:37:23:00:17:42:46:a3:9d:ec:88:f3:c1:4b:
76:ad:70:76:c1:8c:58:6d:ac:b2:73:0c:d4:99:fb:
01:31:2a:eb:c6:20:2d:8e:03:57:62:6f:41:80:db:
fd:57:c2:02:45:77:d7:c4:f4:ac:aa:65:1c:a8:63:
35:31:c6:fd:e5:d3:18:7b:15:6c:7c:76:21:05:3e:
29:a7:49:d4:f0:2b:f8:08:98:c0:af:37:9b:b9:c7:
38:be:2c:bc:5a:ac:17:54:e5:02:80:9c:8a:05:e7:
53:6d:a1:41:3c:0e:f7:32:0f:01:ef:8d:a3:14:72:
65:79:ae:a5:37:54:1f:0b:fa:64:4b:4e:83:7c:12:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:E8:24:BA:1F:77:22:A9:7B:CA:7F:6E:1F:93:D9:D8:F2:12:7D
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:83:98:41:6b:ad:5c:37:ef:95:e2:22:c6:02:ec:68:ec:
e3:c6:39:47:67:0c:ae:07:a3:40:f2:ac:01:8f:46:5b:03:eb:
78:5e:4e:87:ae:49:1d:88:8e:42:da:49:e2:a7:18:29:97:a9:
ca:8b:0a:47:b9:88:cc:08:bc:3e:00:38:ea:0e:b7:ec:c9:d6:
ae:09:e2:4a:5e:88:b5:1e:ea:41:c1:4e:fb:51:f0:50:3d:ac:
77:4f:0b:8f:b0:89:a6:d3:6d:7c:50:cf:e0:1b:67:d3:c8:53:
35:da:2c:f6:e4:cd:49:4e:ea:26:d6:b1:a6:24:36:bf:e7:dc:
34:85:33:14:c7:ea:da:19:1d:99:bf:f0:24:92:e4:34:f4:0b:
ef:a1:ae:0a:28:b3:ac:13:76:6c:12:cf:31:a2:cb:4c:31:9a:
f1:43:1a:99:27:8e:80:0d:d5:b0:a2:05:5d:bb:e0:34:97:03:
12:df:3e:3e:8b:b7:8d:7a:ea:db:48:d8:6f:ae:24:62:e3:37:
f7:ba:4e:be:8f:0a:36:d3:56:bd:9e:73:e7:9f:cf:a0:62:0f:
b0:4c:de:f0:96:f7:dc:8e:5c:a5:1b:d3:67:cc:7c:0f:d6:73:
ff:9b:4e:77:fd:fb:44:b4:8a:8d:90:cd:2f:a1:f3:9d:43:7a:
a1:e1:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:29 2026 by rpki-client