Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: haSrQmhx7anH0dOfKhdnWc9bGiI/scg2VSz8NvaPnRc=
Subject key identifier: 29:1C:F2:F0:7D:01:CE:59:5E:D2:6F:01:AF:9D:11:C6:5B:BB:27:93
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01A1035B8FC3B3B266086A207A6CA488B869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 20:01:34 +0000
Manifest this update: Sat 03 Oct 2026 20:01:34 +0000
Manifest next update: Sun 04 Oct 2026 20:01:34 +0000
Files and hashes: 1: AAf9opHVWJgSdG0z23sJPDY_3AM.roa (hash: iVy5buGzTgQUxgbWVG8NGcWMQhFRBdxznjdBNwotVPc=)
2: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: ewGfaz0/Id78S2kR+22kL/rU33rZa5+5aWCgIU4koIk=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:8f:c3:b3:b2:66:08:6a:20:7a:6c:a4:88:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Oct 3 20:01:34 2026 GMT
Not After : Oct 4 20:01:34 2026 GMT
Subject: CN=291cf2f07d01ce595ed26f01af9d11c65bbb2793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:8b:bc:96:11:7c:f2:ec:eb:06:91:62:0d:
12:2a:a4:86:44:d5:2e:5c:a8:38:e0:7f:e8:51:77:
3c:4b:53:d4:2a:02:64:4a:9a:d5:e9:3a:cd:f6:e8:
55:10:b5:c1:84:c6:12:e4:85:fd:13:3c:fa:89:71:
9b:91:33:15:45:3e:2c:6b:ed:e3:f1:3d:95:47:43:
a8:8c:b8:c9:dd:80:29:f5:2c:e7:40:9d:be:13:7d:
f9:c4:35:cc:06:0a:1f:b7:97:2b:56:2d:52:73:a6:
2b:f0:b8:80:85:8b:3c:84:b8:6d:c0:a7:63:de:9a:
d8:e4:57:b9:98:85:13:3a:8c:b0:ff:24:71:90:9c:
cf:03:7b:72:4e:5f:5d:45:46:78:8c:79:4d:c7:99:
a3:44:ea:80:bb:62:39:e4:db:2f:58:49:2b:b1:1a:
3a:07:bb:ed:ec:7d:51:44:87:61:13:f6:42:0b:cf:
f1:9f:46:c9:d4:dd:0e:bc:bf:e8:91:5a:d3:60:2b:
34:e4:d2:c6:46:c7:92:d1:4e:47:fe:b7:c2:30:b3:
d4:a2:48:85:c2:62:2b:1c:38:d4:83:0c:bd:95:63:
5b:9e:1c:c6:bf:dc:94:1b:f5:8f:34:55:e4:47:fe:
36:8a:3b:07:95:57:1b:17:e5:fe:f0:24:38:61:1c:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:F2:F0:7D:01:CE:59:5E:D2:6F:01:AF:9D:11:C6:5B:BB:27:93
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e9:30:2f:5b:17:6a:16:0b:a4:fa:3f:b0:7f:e5:ae:1c:bc:
1c:a5:10:36:86:19:d1:a8:cf:5d:b4:d4:34:1e:66:b6:7c:c5:
d2:89:e4:f9:64:dd:f0:77:b7:9f:68:3c:87:82:3e:6a:90:e8:
f4:2a:a2:77:72:73:1d:37:05:5d:f8:2a:aa:26:36:40:03:e9:
c4:50:f2:65:06:32:86:e3:be:fd:7f:b8:ad:e2:8a:dc:09:a4:
ec:af:bf:3d:65:96:1c:cb:33:9a:64:27:b5:99:51:94:28:c2:
a3:7b:1c:9f:46:09:d3:18:b3:a9:d1:93:f7:69:bc:9f:b3:e6:
6c:90:f4:41:19:35:87:50:0e:f6:fb:33:ed:62:44:64:56:07:
97:6e:8b:3b:9d:df:2a:a6:58:30:3b:42:d6:2f:d8:6e:f5:a0:
d3:6a:7c:0c:20:89:55:bd:b5:dc:28:06:8c:b7:f9:8b:d4:a7:
15:af:6d:5f:10:05:0f:ac:0d:8d:de:2f:34:b5:06:f6:e3:5e:
20:7e:51:24:15:73:c3:6a:8b:4a:bd:95:59:d9:6b:16:c5:f1:
9e:3a:c6:d0:38:31:39:cd:dd:46:bb:33:50:62:c9:47:49:7c:
82:70:f4:55:92:e8:12:8b:49:ee:23:02:75:e7:00:66:bd:c2:
84:e9:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:14:47 2026 by rpki-client