Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: oizZHh/6Au9lxReLHez6FRvF9FXbl0sMcSyd2smA4d4=
Subject key identifier: A7:0D:97:FB:B8:F5:07:22:79:F0:1F:21:42:32:56:92:DE:D5:FA:19
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019EC06DDC0143419A177609A42C7AA185E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 10:01:25 +0000
Manifest this update: Sat 13 Jun 2026 10:01:25 +0000
Manifest next update: Sun 14 Jun 2026 10:01:25 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: iC99q5UX2CvzD0QPEGIESsAeAb5Ymr5mZNBZnHYP2oU=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:dc:01:43:41:9a:17:76:09:a4:2c:7a:a1:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jun 13 10:01:25 2026 GMT
Not After : Jun 14 10:01:25 2026 GMT
Subject: CN=a70d97fbb8f5072279f01f2142325692ded5fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:b1:fa:2a:51:33:69:12:bb:9b:73:29:98:
9f:fd:25:9c:c3:54:f3:bd:53:13:ed:f9:25:ad:48:
84:f1:21:64:ec:d9:08:80:1a:98:71:f1:14:ed:32:
8d:ae:08:c8:c5:13:e4:52:aa:32:20:a4:6e:94:d9:
52:f9:b2:62:b2:04:b8:70:f9:5f:2a:f1:19:b1:76:
2c:a3:df:37:80:59:72:c6:51:10:4d:cb:95:05:87:
f3:f3:85:f0:9d:47:cd:f8:69:a0:ff:fe:69:13:9a:
fb:3e:f4:80:70:65:00:37:90:c7:41:76:ea:b1:b4:
bc:5f:d4:4e:73:fe:30:70:1d:d0:f1:2e:6f:da:0a:
9b:95:0d:b7:f2:0b:29:0c:5e:b2:cc:b8:d6:f1:64:
db:d4:dc:31:68:aa:a5:c9:9b:e9:b5:6d:d2:6e:75:
e2:7d:d9:17:7e:18:2f:5e:48:be:02:04:8c:5a:eb:
9e:2c:38:21:82:c3:65:b1:bc:9d:79:a4:7f:de:81:
48:c3:22:d3:ea:bd:ad:6a:9b:c6:ce:c1:e8:dc:2d:
57:11:78:8a:a6:cc:a0:42:dc:9e:bf:6e:3f:86:14:
f2:64:29:cb:63:98:4e:7f:fb:ac:cc:5a:ba:d6:de:
ff:ae:dc:70:a8:6f:22:45:40:7b:53:e8:7b:7f:11:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:97:FB:B8:F5:07:22:79:F0:1F:21:42:32:56:92:DE:D5:FA:19
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8a:4b:90:2d:c2:a4:33:97:07:9d:35:37:ec:7a:35:db:5f:
90:bb:54:43:c6:a7:2f:a9:9d:d4:8c:03:1b:98:7e:32:a7:5a:
34:87:74:bc:e3:d2:da:93:88:77:00:3e:59:37:ba:3b:b3:50:
79:a9:77:a6:a4:6c:d1:63:7b:85:62:81:63:5f:bd:5e:aa:4c:
fb:fd:5d:61:fc:c0:91:11:46:0c:b4:f8:ab:30:7f:7c:6b:af:
d0:f8:bc:1b:be:26:67:9b:fa:0e:b2:fd:a4:aa:21:60:31:e6:
7e:cf:91:54:d4:cb:c9:27:38:13:f6:a4:98:46:5a:f9:de:e3:
fc:72:0b:d5:a5:5b:55:f0:2f:0c:80:c7:89:2a:d1:9f:78:57:
5f:bf:c2:b3:bb:71:48:2c:26:a0:e3:6a:36:cf:eb:47:8e:c9:
96:49:f5:1f:ba:53:c0:f3:63:41:52:0f:9d:b0:17:98:cc:9d:
60:fa:4a:cc:75:96:ee:d6:02:28:b2:2f:1d:f6:88:08:76:e7:
0e:20:a5:d4:f1:4f:75:ea:c5:7d:6c:fd:4c:49:66:b7:ff:4b:
05:d2:2a:c0:a1:3a:0a:b0:01:b4:e7:c0:0b:58:7f:c9:92:e6:
16:97:7a:97:03:bd:de:e9:21:b2:02:a6:d5:27:00:f2:88:15:
e7:e5:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:26 2026 by rpki-client