Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: uoRHnrS4SabTeyjey6qwZgYn08g5ebE7hWuMHFoC+3w=
Subject key identifier: AD:4E:01:82:43:2A:5E:54:F3:69:4F:24:3B:BE:13:5D:75:81:04:7A
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019FAA1A4111265D1D9F14BFA09645336BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 19:01:14 +0000
Manifest this update: Tue 28 Jul 2026 19:01:14 +0000
Manifest next update: Wed 29 Jul 2026 19:01:14 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: 1SNg6P3DJ1lrnsynRdD4SeX9t5Jajm3oEXHd7xVv9NE=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:41:11:26:5d:1d:9f:14:bf:a0:96:45:33:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jul 28 19:01:14 2026 GMT
Not After : Jul 29 19:01:14 2026 GMT
Subject: CN=ad4e0182432a5e54f3694f243bbe135d7581047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:40:b7:a2:41:4d:be:e8:2b:85:5c:37:aa:
b1:72:39:f3:07:73:cb:35:1f:76:af:3f:af:58:b3:
95:f7:bf:54:90:e8:9d:6e:60:45:d3:33:e5:fc:5a:
ce:ad:7e:b7:b7:db:87:6c:3c:94:f8:07:aa:1c:7e:
8b:af:2e:e6:71:51:23:9e:df:b9:22:26:9e:f4:47:
e8:ec:5c:39:4d:f3:d2:b7:17:ba:c0:4c:7b:d7:9d:
06:8a:40:15:b5:94:33:63:0d:ec:af:3d:d9:61:5a:
cf:4f:7a:b0:78:57:06:89:38:58:c9:07:fa:08:e3:
82:bf:94:e8:0c:ef:14:ec:0b:3d:13:d4:c5:79:d8:
eb:89:ba:bd:65:a9:91:09:6f:18:90:76:53:2b:75:
04:95:03:1a:60:f2:54:00:f2:77:7b:f8:f8:4f:fa:
25:1a:4d:71:80:00:9c:6e:59:67:c2:2e:0e:90:5b:
68:7c:a3:a3:db:3e:6e:65:ac:f9:00:59:67:e3:91:
81:10:e1:56:ea:fe:57:75:95:25:05:b3:2a:9b:5a:
5d:61:cc:e5:0c:6b:1d:6d:c3:49:5c:dd:91:56:43:
5e:ce:2e:55:90:fd:f5:21:42:f7:d3:06:7d:07:28:
ec:4c:99:6c:73:c5:f0:d3:ec:61:a4:8d:36:ca:16:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:01:82:43:2A:5E:54:F3:69:4F:24:3B:BE:13:5D:75:81:04:7A
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c7:af:46:16:24:45:6f:c1:13:06:cc:50:45:fb:d7:77:a9:
29:49:81:bd:ef:08:af:40:e6:c2:5a:e0:86:00:64:62:75:bb:
07:17:92:fe:a2:29:6e:86:7e:a8:74:e2:87:74:6a:9a:dc:c3:
42:fe:06:d4:89:d3:5c:43:62:6d:46:71:c1:1b:85:b9:ff:ce:
a2:49:cb:52:7d:e4:1b:71:43:61:d4:0e:ed:e9:25:6f:4b:eb:
bd:17:ca:54:52:fa:7a:03:39:92:d6:b1:ba:c4:7a:ac:72:51:
f8:fc:97:8d:17:54:7a:c5:a1:1b:88:37:68:b2:92:bc:51:14:
d6:75:8a:be:85:e9:3a:56:39:12:14:21:2b:60:21:09:6a:db:
71:a1:9f:50:b6:25:1e:fa:32:2c:84:37:b6:cc:d1:76:50:2b:
a4:a6:6c:77:44:0a:c0:4d:bd:44:a5:b3:ce:2e:76:56:26:05:
ac:59:73:c0:95:76:4b:a9:3f:ab:d9:1e:f4:d6:20:cb:f6:f3:
77:ec:76:07:fd:27:18:b2:23:06:9d:78:b9:34:cc:a6:bd:68:
0f:09:6f:d9:a6:c6:04:2f:1e:b7:f2:d1:32:e2:0a:ef:f5:08:
d4:fb:f6:ec:92:89:6a:1c:d5:99:49:9d:d9:a0:e3:49:bf:1a:
53:2d:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:17 2026 by rpki-client