Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: FFxHzxz8EYGCA3sKpznkHezIGaW1KnUuxhQsvQE6z5E=
Subject key identifier: B3:27:80:76:DF:C7:FA:E8:BD:F5:C9:4A:FE:31:52:1E:47:86:32:31
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019D9AE2AF8BC8AF0CC3BD7A202E1472D294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:00:40 +0000
Manifest this update: Fri 17 Apr 2026 10:00:40 +0000
Manifest next update: Sat 18 Apr 2026 10:00:40 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: 0ZEFCh2KJE/wP5UAHjTrHmR9EGPZA+Pid2Gusz05Rpg=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:af:8b:c8:af:0c:c3:bd:7a:20:2e:14:72:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Apr 17 10:00:40 2026 GMT
Not After : Apr 18 10:00:40 2026 GMT
Subject: CN=b3278076dfc7fae8bdf5c94afe31521e47863231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:dd:70:c8:ea:1f:e7:6c:86:5d:39:ee:92:
0a:e2:22:87:f2:14:c7:cd:79:d2:ae:28:44:6b:0c:
11:1f:7a:64:44:b5:93:61:3a:24:e5:7f:58:50:fe:
94:ec:5b:e6:59:38:68:3c:4a:14:06:13:8d:88:ad:
78:b0:d1:ff:11:6a:91:82:f2:72:c5:29:d5:26:09:
de:0f:d8:c0:ec:26:e9:01:ef:67:34:60:67:ba:c8:
2a:95:54:37:f5:04:71:3d:82:77:38:76:4b:21:e5:
e3:fc:f2:6b:53:c8:a5:74:27:b1:dc:cf:64:7d:c9:
8a:7c:f5:f8:56:c7:b8:c5:b1:40:dc:58:a5:f8:2f:
2f:51:fb:f5:e4:a3:75:bf:d8:1c:1d:41:9a:84:7c:
56:42:2d:53:e7:02:ca:6b:dd:19:e6:ad:38:7f:1f:
d5:4a:52:06:fa:47:7e:88:bf:40:89:20:2c:2a:97:
aa:02:ca:22:2c:e7:5f:83:dc:b9:cc:10:78:3e:d5:
8a:79:42:68:0a:2e:d3:19:1e:6f:b0:17:57:51:ad:
a4:56:aa:5a:5e:82:c3:fb:2d:ba:65:a2:39:82:a4:
e5:96:d5:74:f5:87:ca:29:4a:db:fc:0f:d0:33:95:
7f:f0:82:ff:3f:45:c9:e7:16:15:5e:37:31:8b:56:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:80:76:DF:C7:FA:E8:BD:F5:C9:4A:FE:31:52:1E:47:86:32:31
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:4c:c3:82:33:0c:0b:28:3a:5b:38:7c:7e:7d:7a:38:17:
24:4e:cd:58:7c:6b:83:2b:1b:5d:aa:ed:58:d6:98:d8:d9:a9:
c0:5a:d5:73:f9:e2:1e:46:94:e3:ca:88:18:67:d2:ca:c4:51:
db:0f:d5:72:dd:6d:f9:14:1c:ae:69:1e:0c:99:b3:6e:24:f1:
a7:e9:01:3c:ce:83:f1:93:d3:6e:0f:8a:05:59:a8:84:d9:bf:
f7:b4:3d:a6:98:30:fb:e0:07:e5:c3:50:ce:8d:ee:1e:08:8d:
85:cb:31:61:b9:18:99:f9:5f:dc:77:f1:98:8c:70:81:88:e2:
e7:e3:0d:5a:83:78:b2:00:6d:29:b6:ba:11:31:11:2d:b5:7f:
46:93:4e:b9:95:b6:c4:a2:bd:ad:76:e8:69:71:96:7d:92:05:
f6:b7:b2:99:26:05:18:5b:ea:34:55:a9:06:ed:76:e8:ce:2f:
fb:44:4a:7f:d5:16:79:cf:8f:ea:5e:27:89:b2:f7:b3:d9:33:
52:2b:4f:4a:e6:72:ca:47:52:3b:54:32:e0:df:4c:db:c8:bb:
0e:23:64:b7:a0:b4:14:f0:d5:8c:63:93:c6:d9:a6:33:83:65:
3d:c4:56:ad:f5:19:6d:c4:4b:3c:84:9e:9b:96:7f:70:ab:ae:
7b:ee:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:15 2026 by rpki-client